Privacy policy

This portfolio is operated by Bao Nam Doan under the BND name, who is the controller of personal data. For privacy questions or to exercise your rights, contact hello@bndagency.tech.

Contact links open your email application. Clicking a link does not send a message or its contents to BND. Once you send an email, we process your email address, name, message and any attachments you choose to provide.

We use this information to answer your enquiry and discuss a project. For project enquiries, processing is necessary to take steps at your request before entering into a contract (GDPR Article 6(1)(b)); for other messages, our basis is a legitimate interest in handling correspondence (Article 6(1)(f)). Providing information is voluntary, but we need contact details to reply. Please do not send passwords or other sensitive information.

Hosting is provided by Vercel Inc. When you load the website, it processes technical information needed to deliver and protect it, such as your IP address, request time, requested URL and browser information. This supports website operation, abuse prevention and troubleshooting, based on our legitimate interest in a secure and functioning website.

Hosting and email service providers may access information as necessary to provide their services. We do not sell personal data. Project and social links lead to independent websites governed by their operators’ privacy practices.

We load Vercel Web Analytics only after you opt in. It helps us understand which pages are used and where visitors come from. Our legal basis is your consent under GDPR Article 6(1)(a). Declining does not affect the content or contact options.

Vercel processes page views, timestamps, referring websites, approximate location and device, operating system and browser information. We remove query parameters and fragments from the visited page URL before sending it. According to Vercel’s documentation, its analytics does not use third-party cookies; visitors are distinguished using a request hash and session identification expires after 24 hours. This is not a deletion period for aggregate statistics.

You can change or withdraw consent at any time through the privacy settings in the footer. Confirming your refusal stops further analytics collection. Withdrawal does not affect the lawfulness of processing carried out beforehand.

When you change the animation setting, the website saves your choice in your browser’s local storage under bnd-motion. Your choice remains stored until you change it or clear website data. It controls the interface and is not used for advertising tracking.

We also store your analytics choice and the time of your decision in local storage under bnd-consent-v1. Your choice is valid for 180 days, after which we ask again. This record is used to respect acceptance or refusal, not to identify a visitor.

You can remove these settings by clearing website data in your browser. The main content and contact details remain available without these preferences.

Vercel operates international infrastructure, so information may be processed in the United States and other countries outside the EEA. Its privacy notice describes participation in the EU–US Data Privacy Framework and, where appropriate, standard contractual clauses or other legal mechanisms. The linked notice explains these safeguards and how to contact Vercel. Hosting does not guarantee that information remains exclusively in the EU.

We retain correspondence for as long as needed to handle your enquiry and any resulting project. Longer retention may be necessary to meet legal obligations or establish, exercise or defend legal claims; this depends on applicable statutory periods and any ongoing dispute. Technical logs are retained as needed for security and operational troubleshooting, according to the provider’s settings.

Subject to the GDPR’s conditions, you can request access, correction, deletion, restriction and portability of your personal data. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

Send your request to hello@bndagency.tech. We normally respond within one month and will inform you in time if a lawful extension is needed. You can also complain to the Czech Office for Personal Data Protection or another competent supervisory authority.