Privacy & Terms

BOLD Agency is responsible for the personal information that visitors choose to provide through this website. Privacy questions and requests can be sent to bold.smm.agency@gmail.com or through the contact details published on the Contacts page.

The booking form sends submitted values to a Vercel-hosted server function for validation. If live email-delivery configuration is unavailable, the form displays an unavailable message and the enquiry is not delivered. When delivery is enabled, a validated enquiry is sent through Resend to BOLD Agency's email inbox. A completed honeypot field receives a generic success response but its contents are not delivered or stored by the application.

The application does not intentionally store the enquiry as a database record. The delivery provider and BOLD Agency's receiving email service process a successfully delivered enquiry as described below.

Before live delivery is enabled, this policy will be reviewed against the final form, email provider, retention practice and agency legal details. Any material difference will be published before submissions are accepted.

The form submits only the enquiry information that a visitor actively enters or selects. BOLD Agency receives that information only when email delivery is enabled and the submission is accepted. The form requests:

• an optional name and a required email address
• whether the visitor is starting the project from scratch
• one or more selected services: Social Media Marketing, Website Performance, Digital Marketing, Content shoots, Graphic Design, Video Editing, Meta Ads, Google Ads, Tracking Setup, Landing Pages, E-commerce Stores, Web-app Development, or a short description entered under Other
• one preferred contact method: Telegram, WhatsApp, email or another method, together with the necessary contact details
• an optional approximate budget range
• an optional project message

An email address, at least one service and the details needed for the selected contact method are required so BOLD Agency can understand and answer the enquiry. The form clearly marks required fields. Other requested information is optional but may help the agency prepare a more relevant response.

Submitting an enquiry is voluntary. A visitor who does not provide the required information cannot use the online form but may use another contact channel shown on the Contacts page. Visitors should not include passwords, payment-card details, identification documents, health information or other unnecessary sensitive information in the message.

If the page URL contains standard utm_source, utm_medium, utm_campaign, utm_term or utm_content parameters, the website keeps those values in temporary in-memory interface state while the visitor navigates within the open website. When that visitor submits the booking form, the available parameters are included with the enquiry so BOLD Agency can understand which campaign led to the request.

The application does not place these campaign parameters in cookies, local storage, session storage or Neon. A full page reload clears the in-memory copy; parameters still present in the reloaded URL may be read again. Closing the open website also clears the copy. No advertising or analytics script is loaded merely because these parameters are present.

The website is hosted on Vercel. When a visitor requests a page, Vercel may process technical information required to deliver, protect and diagnose its hosting service. According to Vercel's Privacy Notice, this may include an IP address, approximate city and country derived from the IP address, browser or device information, request details, timestamps, system configuration, performance information and diagnostic logs.

BOLD Agency has not enabled Vercel Web Analytics, advertising pixels or behavioural profiling on this website. BOLD Agency does not use hosting logs to build advertising profiles about visitors.

Pages containing the booking form use Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Turnstile runs a browser security challenge and returns a short-lived, single-use token. The website sends that token and the requesting IP address to Cloudflare for server-side verification and checks that the response belongs to the expected form action and hostname. The integration does not send the visitor's form entries to Cloudflare.

The website also applies server-side rate limits in Neon. It derives keyed HMAC hashes from the requesting IP address and from the normalized email-and-IP combination, then stores only those hashes, counters and expiry timestamps. The rate-limit table does not store the original IP address, original email address or enquiry text. Expired records no longer affect submissions and are removed during subsequent cleanup operations.

Before successful delivery, submitted values are used to validate the form, prevent abuse and return an interface status. When delivery is enabled, enquiry information is used only to review the request, respond using the preferred contact method, discuss relevant services, prepare a possible scope or quotation and take steps requested before entering into a contract. Campaign parameters included with an enquiry are used to understand the source of that enquiry and evaluate campaign performance without activating a separate tracking script.

Where the GDPR applies, enquiry information is intended to be processed to take pre-contractual steps requested by the visitor. Technical request information and anti-abuse signals may be processed where necessary for BOLD Agency's legitimate interests in operating, securing and troubleshooting the website. The final legal basis will be reviewed before the form goes live.

BOLD Agency does not sell personal information and will not use enquiry details for unrelated marketing without a separate lawful basis where one is required.

Vercel acts as the website hosting provider and may process data in the United States and other locations used by Vercel and its subprocessors. Vercel publishes information about international processing and transfer safeguards in its Privacy Notice and Data Processing Addendum. The contractual terms that apply to this website depend on the Vercel plan and service agreement in use.

Cloudflare provides the Turnstile abuse-prevention service and processes the security signals needed to distinguish human visitors from automated traffic. Neon hosts the rate-limit hashes and counters described above together with the website's application database. These security records are not used for advertising or behavioural profiling by BOLD Agency.

When live email delivery is configured, the Vercel-hosted server function uses Resend to deliver a validated enquiry to BOLD Agency's existing email inbox. Resend may therefore process email addresses, message content and delivery metadata as BOLD Agency's service provider. Live delivery will not be enabled until its final configuration and applicable data-processing terms have been reviewed.

BOLD Agency will not intentionally disclose enquiry information to unrelated third parties. It may disclose information where required by law or where reasonably necessary to establish, exercise or defend legal claims.

The application does not save form submissions in its database, browser local storage or browser session storage. When delivery is enabled, Resend and the receiving agency inbox process a successful submission. Vercel may retain ordinary function and security records according to its operational and legal requirements, so visitors should not submit unnecessary sensitive information.

Successfully delivered information will be kept only for as long as reasonably necessary to respond, manage the potential business relationship and meet applicable legal obligations. Enquiries that do not lead to a working relationship will not be retained indefinitely. The agency will document and publish its final retention practice before launch.

Depending on applicable data-protection law, a person may request access, correction or deletion of their personal information, object to or restrict certain processing, request portability, or complain to the relevant supervisory authority. Requests can be sent to the contact address above.

This website provides general information about BOLD Agency, its services and previous work. Website content is not a binding offer, quotation or guarantee of availability. A project begins only after its scope, price and other terms are agreed separately.

Visitors may use the website for lawful personal and business-information purposes. They must not attempt to disrupt the website, gain unauthorised access, introduce malicious code or misuse its content.

Unless otherwise stated, the website's branding, copy, design and original media belong to BOLD Agency or are used with permission. They may not be reproduced commercially without permission.

BOLD Agency aims to keep the website accurate and available but may update, remove or temporarily suspend content. To the extent permitted by applicable law, BOLD Agency is not responsible for losses caused solely by reliance on general website information or by temporary technical unavailability.

These terms and the privacy information may be updated when the website, form delivery or third-party services change. The date at the top of this page identifies the latest version. Questions can be sent to bold.smm.agency@gmail.com.