Privacy Policy

Last updated: 1 September 2026

1. Who we are

Two Pillars Media (“we”, “our”, “us”) is a growth marketing agency based in Bulgaria. Two Pillars Media is a trading name of IZDATELSKA KASHTA „SV. GEORGI POBEDONOSEC“ (UIC 203419824), which is the data controller responsible for the personal data described in this policy. We operate the website twopillarsmedia.com (the “Site”). This policy explains what personal data we collect through the Site, how we use it, and the rights you have over it. It applies to the English and Bulgarian versions of the Site. For any privacy question or request, write to us at info@twopillarsmedia.com.

2. Information we collect

Information you give us directly:

  • Contact form: your name, email address, company name, website, budget range, how you heard about us, and anything you write in your message.
  • Newsletter signup: your email address.
  • Direct communication: information you share when you email or call us.

Information collected automatically: our hosting provider (Webflow) records technical data needed to deliver and secure the Site, such as your IP address, browser type, device information, and the pages you visit. The Site also remembers your language preference (English or Bulgarian). With your consent, we use Google Analytics 4 to measure how the Site is used — see section 4. When you submit a contact form, we also receive basic technical context alongside your message: the page you submitted from, the referring site, any campaign parameters in the link, your device type and screen size, browser and operating system, language, time zone, and the time of submission. We use this to understand where enquiries come from and to reply in context.

3. How we use your information

We use personal data to:

  • Respond to your inquiries and prepare proposals — based on steps taken at your request prior to a contract (Art. 6(1)(b) GDPR) and our legitimate interest in running our business (Art. 6(1)(f)).
  • Send you the newsletter you signed up for — based on your consent (Art. 6(1)(a)), which you can withdraw at any time by unsubscribing or emailing us.
  • Operate, secure, and improve the Site — based on our legitimate interest (Art. 6(1)(f)).
  • Comply with legal obligations that apply to us (Art. 6(1)(c)).

We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal effects.

4. Cookies

The Site uses essential cookies and similar technologies required for it to function — for example, cookies set by our hosting platform (Webflow) and the setting that remembers your chosen language. We also use Google Analytics 4 to measure how the Site is used. Analytics cookies are set only after you accept them in our cookie banner. Before you choose, and if you decline, no analytics cookies are stored and Google receives only anonymous, cookieless signals. You can change your choice at any time by clearing this site's data in your browser.

5. Who we share your information with

We share personal data only with service providers who process it on our behalf, under data processing agreements, and only to the extent necessary: Webflow, Inc. (website hosting and storage of form submissions), Google Ireland Limited and Google LLC (Google Analytics, where you have given consent), and the providers we use for email and business communication. We may also disclose information where required by law or to protect our legal rights.

6. International transfers

Webflow and Google are based in the United States, so data collected through the Site may be processed outside the European Economic Area. Where that happens, transfers are protected by recognized safeguards such as the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

7. How long we keep your data

We keep contact inquiries for as long as needed to handle your request and follow up — as a rule, no longer than 24 months after our last contact, unless we enter into a business relationship. Newsletter email addresses are kept until you unsubscribe. After these periods, data is deleted or anonymized.

8. Your rights

Under the GDPR you have the right to access, correct, or delete your personal data; to restrict or object to its processing; to receive it in a portable format; and to withdraw consent at any time. To exercise any of these rights, email info@twopillarsmedia.com — we will respond within one month. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the supervisory authority in your country.

9. Security

We use appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, alteration, or loss.

10. Children

The Site is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Links to other websites

The Site contains links to external websites and social networks (for example, Instagram). We are not responsible for their privacy practices — please review their own policies.

12. Changes to this policy

We may update this policy from time to time. The current version, with its “Last updated” date, will always be published on this page.

13. Contact

Two Pillars Media · IZDATELSKA KASHTA „SV. GEORGI POBEDONOSEC“ (UIC 203419824) · Bulgaria · info@twopillarsmedia.com