Privacy Policy

Effective date: 24 August 2025

1. Who we are

Bridge Designs & Consulting ("Bridge", "we", "us") is a production consultancy and house of brands based in the EU. We design, develop, and operate fashion products and brands, including FELUS and EOS AURA.

Website: bridgedesigns.org
Email (privacy): privacy@bridgedesigns.org
Postal address: REINA FELOUS LAZAROS, Vissarionos 7, Athens, Greece

For the purposes of the EU General Data Protection Regulation (GDPR), we act as the data controller for personal data collected via our website, forms, and marketing. For client projects, we may also act as a processor where we handle data on behalf of a client under contract.

2. Scope

This Policy explains how we collect, use, share, and protect personal data when you visit our website, download resources, book meetings, request proposals, interact with our brands (FELUS, EOS AURA) via this site, or participate in AI Lab demos. It does not cover third‑party sites we link to.

3. Personal data we collect

Information you provide directly

Contact and business details (name, email, company, role, phone)
Project briefs and messages (including uploaded files such as tech packs, BOMs, images)
Newsletter sign‑ups and resource downloads
Meeting bookings (e.g., Calendly)
Career applications (CV, portfolio, cover letter)
AI Lab demo inputs (test data you choose to upload)

Information collected automatically

Device/usage data (IP address, browser type, pages viewed, time on site)
Cookies and similar technologies (see Cookies below)

Information from third parties

Social platforms (e.g., LinkedIn) if you interact with our pages
CRM/lead sources and event registrations
Public databases and partners (e.g., referrals)

4. How and why we use personal data (legal bases)

We process personal data for:

Providing our services and responding to requests (contract; legitimate interests)
Operating our site and improving content/UX (legitimate interests; consent where required)
Marketing communications such as newsletters and updates (consent; or legitimate interests for B2B with opt‑out)
Running AI Lab demos/pilots (consent; contract)
Security, fraud prevention, and compliance (legitimate interests; legal obligation)
Recruitment (contract; legitimate interests)

Where we rely on consent, you can withdraw it at any time.

5. Cookies & analytics

We use cookies to operate the site, remember preferences, and understand engagement. Categories:

Essential (required for the site to function)
Analytics (e.g., GA4)
Functional (e.g., video embeds, scheduling widgets)
Marketing (when used)

You can manage preferences via our cookie banner and your browser settings. See our Cookie Policy for details and a current list of cookies.

6. AI, client materials & IP

Files and data you upload for demos or scoping (e.g., tech packs, images) remain your IP.
We do not use client materials to train any AI models without your explicit, written consent.
On request, we can process sensitive files in client‑controlled storage or with local execution tools.
Demo data is deleted on request and automatically after the retention period below unless a project proceeds.
We apply role‑based access controls and logging to restrict who can view your materials.

7. Sharing your information

We share personal data only as needed to operate our business:

Service providers/processors (hosting, email, analytics, CRM, cloud storage, scheduling, project tools, QA/audit, legal/accounting).
Within the Bridge umbrella (FELUS, EOS AURA) for shared infrastructure and operations.
Business transfers (e.g., merger, acquisition) subject to safeguards.
Legal compliance (to comply with laws or valid requests).

We require processors to protect data and process it only on our documented instructions.

8. International data transfers

If we transfer personal data outside the EEA/UK, we rely on adequacy decisions or Standard Contractual Clauses (SCCs), and apply supplementary safeguards where appropriate.

9. Data retention

We keep data only as long as necessary for the stated purposes or as required by law. Typical periods:

Website inquiries & leads: 24 months after last interaction
Contracts, invoices, compliance records: 6–10 years (legal obligation)
Analytics data: 14 months (default GA4 window unless configured otherwise)
Job applications: 12 months (or sooner if you request deletion)
AI Lab demo files: 90 days unless a project proceeds or you request earlier deletion

10. Your rights (EU/EEA & UK)

You have the right to access, rectify, erase, restrict, and object to processing, as well as data portability and the right to withdraw consent. We do not make decisions based solely on automated processing that have legal or similarly significant effects.

To exercise rights, email privacy@bridgedesigns.org. We may need to verify your identity. We aim to respond within one month.
You can lodge a complaint with your local authority. In Greece: Hellenic Data Protection Authority — www.dpa.gr

11. Children

Our services are not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it.

12. Security

We employ administrative, technical, and physical measures to protect personal data (encryption in transit, access controls, backups). No system is 100% secure; please use caution when sending information online.

13. Links to other sites

Our site may link to third‑party websites. We are not responsible for their privacy practices. Review their policies before submitting personal data.

14. Changes to this Policy

We may update this Policy from time to time. We will post the new version with an updated Effective date and, where appropriate, notify you by email or banner.

15. Contact

Questions or requests: privacy@bridgedesigns.org or write to our postal address above.