Personal data processing notice

Leadsupply LLC respects your privacy. This notice explains what personal data we collect, why we collect it, on what legal bases, who we share it with, how long we keep it and what rights you have. We process personal data in accordance with Regulation (EU) 2016/679 (the "GDPR"), the UK GDPR and, to the extent they apply to us, United States federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (the "CCPA").

1Data controller

2Scope of this notice

This notice applies to visitors of balubstudios.com, to people who contact us through our forms or through advertising forms hosted on third-party platforms, and to people we contact in the course of our marketing services. The sections on legal bases, data sharing, international transfers, retention, your rights and complaints describe our processing under the GDPR and the UK GDPR and apply in particular to people located in the European Economic Area, the United Kingdom and Switzerland. The section "Additional information for residents of the United States" contains further information for US residents, including California residents. Where the law of your country or state grants you further rights, we will honour them.

3Personal data we collect

3.1 Data you give us

When you fill in one of our contact forms or, where used, an advertising form hosted on a third-party platform (for example, Meta services such as Facebook and Instagram, Google, or TikTok), we collect the data you enter, including your first name, last name, email address, telephone number, and answers to questions in the form or qualification questionnaire (for example, the type of product or service you are interested in, your budget range, your timing, and similar information relevant to your request).

3.2 Browsing data

The IT systems and software procedures that operate this site acquire, in the course of normal operation, certain data whose transmission is inherent in the use of internet communication protocols, such as IP addresses, domain names, URIs of requested resources, the time of the request and parameters relating to the operating system and computing environment.

4Purposes of processing and legal bases

5How we collect data and the role of the platforms

Collection forms may be hosted directly on our site or, where we use them, on third-party advertising platforms (for example, contact forms provided by Meta services such as Facebook and Instagram, or similar tools from Google and TikTok). When you fill in a form on such a platform, the data is collected through the tools made available by that platform and transmitted to the Controller. Processing by the platform for its own purposes is governed by its respective privacy notice, which you should consult.

6Who we share your data with

Your data may be shared with:

• Partners and collaborators: external professionals collaborating on your marketing project.
• Processors acting on our behalf: IT, hosting and cloud service providers, email and SMS platforms, CRM systems, call centers and contact and qualification services, consultants and professional advisers.
• Advertising platforms (such as Meta, Google, TikTok and similar providers), where used and within the limits described in section 5.
• Public and judicial authorities, where required by law.

Your data is not disseminated, meaning it is not made available to an indeterminate audience.

7International data transfers

Leadsupply LLC is established in the United States, so personal data you provide to us is processed in the United States. Some of our processors and the advertising platforms listed above may also process data in other countries. Where personal data originating from the European Economic Area, the United Kingdom or Switzerland is transferred to a country that does not benefit from an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (art. 46 GDPR) or the UK International Data Transfer Addendum, together with supplementary security measures where needed. You can request a copy of the relevant safeguards by contacting us.

8How long we keep data

As a general rule we keep data for as long as necessary for the purposes for which it was collected:

9Your rights

As a data subject you may exercise, within the limits set out in the GDPR, the rights of: access to your data, rectification, completion, erasure, restriction of processing, portability, objection to processing for direct marketing purposes and, where processing is based on consent, withdrawal of consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You can object to commercial communications at any time, for example, by clicking the unsubscribe link at the bottom of our emails or by replying to an SMS with the opt-out keyword. To exercise your rights, email hello@balubstudios.com,
call +1 (231) 999-1258, use the contact form on our website, or write to the Registered Office.

10Complaint to the supervisory authority

If you believe that our processing infringes the GDPR or the UK GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA country where you live or work or where the alleged infringement took place. For Italy: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, garanteprivacy.it. For the United Kingdom: Information Commissioner's Office, ico.org.uk. We would appreciate the chance to address your concerns first: please contact us at hello@balubstudios.com.

11Cookies

The site uses technical cookies, necessary for browsing, and may use measurement and marketing cookies subject to your consent. Details of the cookie categories, their purposes and how to manage your preferences are available through the site cookie banner.

12Children

Our website and services are directed to businesses and to adults. We do not knowingly collect personal data from anyone under 16 years of age. If you believe a minor has provided us with personal data, contact us and we will delete it.

13Additional information for residents of the United States (including California)

This section supplements the rest of this notice and applies to residents of US states whose privacy laws apply to our processing, including the CCPA. It also serves as our notice at collection.

13.1 Categories of personal information we collect.

In the last 12 months we have collected the following categories: identifiers (name, email address, telephone number, IP address); commercial information (the products or services you are interested in, and the budget range and timing you indicate in a form); internet or other network activity (pages visited, device and browser data, cookies). We do not collect sensitive personal information, and we do not use or disclose personal information for purposes that would require us to offer a right to limit its use.

13.2 Sources.

We obtain personal information directly from you (our forms, emails and calls), automatically from your device when you browse our site, and from advertising platforms (Meta, Google, TikTok) when you fill in a form they host on our behalf.

13.3 Purposes.

The business purposes described in the section on purposes and legal bases: responding to and qualifying your enquiry, providing and improving our services, marketing our services and those of our clients, security, analytics and legal compliance.

13.4 Disclosures, sale and sharing.

We disclose personal information to service providers and contractors acting on our behalf (hosting, CRM, email and SMS platforms, call and qualification services, professional advisers) and, in connection with advertising, to advertising platforms. We do not sell personal information in exchange for money. If measurement or marketing cookies are enabled, the transmission of identifiers to advertising platforms for cross-context behavioural advertising may qualify as "sharing" under California law. You can opt out at any time by declining measurement and marketing cookies in our cookie banner (use the "Cookie preferences" link in the footer) or by emailing hello@balubstudios.com with the subject "Do Not Sell or Share". We treat Global Privacy Control signals sent by your browser as a valid opt-out request. We have no actual knowledge of selling or sharing the personal information of consumers under 16.

13.5 Retention.

We keep personal information for the periods set out in the section on how long we keep data.

13.6 Your rights.

Subject to applicable law, you have the right to know what personal information we collect, use and disclose; to access it in a portable format; to correct inaccurate information; to delete it; to opt out of sale or sharing; and not to be discriminated against for exercising these rights. To exercise them, email hello@balubstudios.com
or call +1 (231) 999-1258. We will verify your request by matching the details you provide with the information we hold, and we will respond within 45 days, extendable once by a further 45 days where permitted. You may designate an authorised agent to submit a request on your behalf; we may ask for proof of the agent's authority and verify your identity directly with you. If we deny your request, you may appeal by replying to our decision email with the word "Appeal" in the subject line.

14Changes to this notice

The Controller may update this notice to reflect new legislation, guidance from the authorities or changes to its services. The purposes of processing will not be changed without informing you first. The version published on this page, with its update date, is the one that applies.