Privacy Policy
Last updated: 18 October 2026
This policy explains what we collect through rollingpandas.studio and expo.rollingpandas.studio, why, who helps us, how long we keep it and what you can ask us to do with it. In short: we use what you send us to answer you and do the work you ask for. We never sell it and we don't run ads on it.
Who we are
Rolling Pandas runs this website and decides how your data is used. Our registered address is July 27 Street, 9000 Varna, Bulgaria. For anything about your data, write to contact@rollingpandas.studio. We answer within one month at the latest, usually much sooner.
What we collect and why
When you send a form
The contact form, the audit forms and the expo gift card ask for what we need to answer you: your name, email or WhatsApp number, your website, the service or offer you picked and your message. With it we note the page you sent it from and, if you came through a campaign link or a printed code from the AccessAbilities Expo, that link or code. We use this to reply, to prepare the audit or call you asked for and to send you a proposal. The legal basis is taking the steps you ask for before a possible contract, and our legitimate interest in answering business enquiries.
When you join the newsletter
Your email address, to send you occasional updates. The basis is your consent. You can unsubscribe at any time: reply to any newsletter or write to us.
When you book a call
“Book a time” opens our calendar from Calendly. The details you enter there go to Calendly and to our calendar, and the call itself runs on Google Meet. Calendly's own privacy notice applies inside the calendar.
When you message us on WhatsApp
WhatsApp links open a chat in WhatsApp, run by Meta. What you write there is covered by WhatsApp's terms, and we use it only to answer you.
When you just read the site
Our host keeps short technical logs (such as IP address, browser and the page asked for) to keep the site running and safe. Google Analytics and Hotjar run only if you say yes in the cookie choice; see Cookies. Client video reviews play from YouTube, and only after you press play.
Who helps us
These companies process data for us, only to provide their service:
- Vercel: hosts the website.
- Google: email, the sheet where enquiries arrive, calendar and Meet, and Google Analytics if you agree to it.
- Hotjar: heatmaps and recordings, if you agree to it.
- Calendly: booking calls.
- YouTube (Google): the video reviews, when you play one.
Some of them are based in the United States. Transfers there are protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Enquiries and audit requests: while we are in touch about your project and up to 2 years after our last contact, then we delete them. If you become a client, for as long as the contract runs and the law requires (for example for invoices).
- Newsletter: until you unsubscribe.
- Google Analytics keeps visit data for up to 14 months; Hotjar keeps recordings and heatmaps for up to 1 year.
When you are a client
To do the work we may need admin access to your Shopify store. We use it only for the tasks we agreed on and never share it. Files you give us (images, texts, logos) are used only for your project. Drafts are kept for our records after the project ends and are never reused for other clients. When we work with companies in the same field, their projects and information stay fully separate.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, give it to you in a portable format, or stop using it for a purpose based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time, as easily as you gave it. Write to contact@rollingpandas.studio.
If you think we have handled your data wrongly, you can complain to the data protection authority where you live, where you work or where you think the problem happened. In Bulgaria, where we are registered, that is the Commission for Personal Data Protection (cpdp.bg, opens in a new tab). We would like the chance to put it right first.
Children and changes
This site is meant for businesses and is not aimed at children under 16. If this policy changes, we update the date at the top, and if the change affects the cookie choice we ask you again.