Privacy Policy

Effective date: 2026-02-22

This Privacy Policy describes how Bespokely Inc. ("Bespokely AI", "we", "us", or "our") collects, uses, and protects your personal information when you visit our website and use our services.

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

We collect the following categories of personal data, depending on your consent choices:

2.1 Automatically Collected (with consent)

2.2 Strictly Necessary (no consent required)

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): Analytics, behavioural tracking, and geolocation — only processed after you click "Accept All" in our cookie banner.
• Legitimate interest (Art. 6(1)(f)): Strictly necessary cookies for site functionality, security, and fraud prevention.

You may withdraw your consent at any time by clearing your cookies or contacting us at privacy@bespokely.io.

4. Third-Party Processors

When you consent to analytics, we share data with the following third-party processors:

5. International Data Transfers

Some of our third-party processors are located outside the European Economic Area (EEA). These transfers are safeguarded by Standard Contractual Clauses (SCCs) adopted by the European Commission, or equivalent mechanisms ensuring adequate data protection.

6. Data Retention

• Consent cookie: 180 days (automatically renewed on re-consent).
• Google Analytics data: 14 months (configured in GA4 settings).
• Hotjar recordings: 365 days (per Hotjar default retention).
• Geolocation/tracking data: Retained by Make.com per their data retention policy.
• Server logs (Vercel): 30 days.

7. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to restriction: Request restriction of processing in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interest.
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@bespokely.io. We will respond within 30 days.

8. Cookies

For detailed information about the cookies we use, please see our Cookie Policy.

9. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@bespokely.io.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date.

11. Complaints

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection supervisory authority.

12. Contact Us

For any questions about this Privacy Policy or our data practices, contact us: