# Privacy policy > What bunny-agency.men collects, why, who processes it, how long it is kept and how to use your rights, including the cookie choice and application data. URL: https://bunny-agency.men/data-regulation/ Updated: 2026-09-21 This page explains what happens to your data on bunny-agency.men: what we collect, why, who helps us process it, how long we keep it and what you can ask us to do with it. The short version: the site works without cookies, we track nothing personal until you allow it (or, outside Europe, until you refuse), and the answers you give in an application are used to answer that application. ## Who is responsible Bunny Agency LLC, 1309 Coffeen Avenue STE 1200, Sheridan, Wyoming 82801, United States, is the controller of the data described here. Email info@bunny-agency.com for anything on this page, including every request under "Your rights". ## Visiting the site The site is served by Cloudflare, Inc. (USA), which receives your IP address, the page you asked for, your browser's user agent and the time, to deliver the page and protect the site from attacks. We do not keep web server logs of our own. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). ## Applying to work with us When you fill in the application, we receive your answers to the questions, the photo you add, the contact you give (an email address or a social media handle), an optional first name and the page you applied from. If you use the step-by-step form, we save your answers as you go; your photo and contact reach us only when you send the whole form. We use these answers to decide whether we can help, to reply to you, and to prepare the first call. Legal basis: steps you asked us to take before a possible contract (Art. 6(1)(b) GDPR). Where the application goes: | Recipient | What for | Where | |---|---|---| | Cloudflare (Workers KV) | the stored application and your photo, kept 90 days | USA / EU edge | | HubSpot, Inc. | our customer relationship system, where the team works on the application | USA | | Make.com (Celonis) | the workflow that routes the application to the right person | EU | | Telegram | an instant notice to our team that a new application arrived, with your photo | international | After 90 days the copy in Cloudflare is deleted automatically. The record in HubSpot is kept while we are in contact and deleted on request, or within 24 months if nothing comes of it. ## Booking a call The booking calendar is provided by Calendly LLC (USA). It loads only when you open it, and Calendly then processes the details you enter to schedule the call. If you came from the application, your name, email and an application reference are passed to Calendly so you do not have to type them again, and Calendly tells us when a call is booked. ## Measurement and advertising We measure which pages help creators decide, and whether our advertising reaches the right people. None of it runs in your browser: our server sends the events itself. | Question | Answer | |---|---| | Which events | a page viewed, a button to the application clicked, application steps completed, an application sent and routed, the booking calendar opened, a call booked | | Where they go | Google Analytics 4 (Google Ireland Ltd / Google LLC) and Meta Conversions API (Meta Platforms Ireland Ltd / Meta Platforms, Inc.); with an application, HubSpot as well. Meta receives your email address only as a one-way hash | | Identifier | a random visitor id in the cookie `bam_vid`, not linked to your name | | Legal basis in the EU, EEA, UK, Switzerland and Brazil | your consent (Art. 6(1)(a) GDPR, ยง 25 TDDDG; in Brazil, Art. 7(I) LGPD). Until you choose, and after a refusal, no event is sent and no `bam_vid` cookie exists | | Elsewhere | on, unless you refuse below or your browser sends a Global Privacy Control signal, which we treat as a refusal. Under US state privacy laws, the refusal is your opt-out of "sale" or "sharing" | Under the same rules, and only after you first scroll, tap or type, we may also record anonymized sessions with Microsoft Clarity (Microsoft Corp.) on a sample of about one visit in ten, to see where pages are hard to use. Form entries are masked. ## Cookies | Cookie | Purpose | Lifetime | Needs consent | |---|---|---|---| | `bam_consent` | remembers your choice below | 1 year | no, it records the choice | | `bam_vid` | the random visitor id for measurement | 13 months | yes | | `bam_lead` | links your booking to your application | 1 day | no, you asked for the booking | | `ab_` | keeps you in the same version of a page while we compare two | 30 days | no, it holds no personal data | ## Transfers outside the EU Several of the services above are based in the USA. Where they are certified under the EU-US Data Privacy Framework, transfers rely on it; otherwise on the European Commission's standard contractual clauses. ## Your rights You can ask for a copy of your data, for corrections, for deletion, for restricted processing or for a portable copy, and you can object to processing based on our legitimate interest. You can withdraw consent at any time, with effect for the future, in "Your choice" below. Email info@bunny-agency.com. You can also complain to a data protection authority in your country. In Brazil these rights come from Art. 18 LGPD, and the authority is the ANPD. ## Age Applications are for adults. The form asks you to confirm that you are 18 or older, and we delete any application we learn came from someone below that age. ## Changes If what we collect or who processes it changes, this page changes first. The date at the top of the source is the date of the last change: 21 September 2026.