Privacy Policy for Break Bad Marketing

 

1. Who we are

This website is https://breakbadmarketing.com (the “Site”), operated by co-owners Gjorgji Cvetkovski and Teodora Panajotovikj, trading as freelancers at Break Bad Marketing (“we,” “us,” “our”).

Address: Bukureska St 2, Skopje 1000, North Macedonia

Contact for privacy matters:
breakbadmarketing@gmail.com
or
gjorgji@breakbadmarketing.com

Because the Site actively solicits applications from school owners in the U.S., UK, EU, and elsewhere, this policy is written to satisfy both:

  • North Macedonia’s Law on Personal Data Protection (LPDP) — enforced by the Agency for Personal Data Protection (AZLP, azlp.mk) — our home regulator, and
  • The EU GDPR, which applies to visitors located in the EU/EEA/UK under its extraterritorial scope (Art. 3(2)), since the Site knowingly offers services to people there.
 

2. What Personal Data We Collect and Why

a) Culture-Fit Diagnosis Application Form

When you apply at /culture-fit-diagnosis-application-form/, we collect:

  • Contact details: full name, email address, school website URL
  • Business data: years running your school, student count, full/part-time status, trial show-up rate, enrollment rate, 3-month retention rate, average monthly fee, average student tenure, monthly revenue, estimated profit margin
  • Marketing/acquisition data: how you currently attract leads, your ad targeting approach, your ideal-student description, your follow-up and onboarding process
  • Open-text answers: your motivations, frustrations, goals, and a self-rated commitment score (1–10)

We collect this to run the diagnosis you’re applying for and to assess fit before a call. Legal basis: your consent (given by submitting the form) and steps taken at your request prior to a potential contract (GDPR Art. 6(1)(b); equivalent basis under the LPDP).

On submission, you automatically receive the “7 Red Flags Your Ads Are Attracting the Wrong Students” PDF by our website’s email:
gjorgji@breakbadmarketing.com

b) Testimonials

If you submit a testimonial, we collect your full name, email address, photo, company name, and website, to verify, publish, and attribute the testimonial, and to send related confirmations.

Testimonial content and images are collected directly from clients with their permission, not via an on-site form.

c) Cookies and Site Functionality

Caching: LiteSpeed Cache stores temporary copies of pages to speed up load times. Cache files are never accessed by third parties except for plugin support, and expire on a schedule we control. We may use QUIC.cloud to process and cache data temporarily — see their policy: https://quic.cloud/privacy-policy/.

Admin login: standard WordPress session cookies apply when logging into the dashboard; these don’t affect regular visitors.

d) Analytics

We use Google Analytics to understand how visitors use the Site — pages viewed, approximate location, device/browser type, and referral source. Data is retained per our Google Analytics settings (default 14 months unless changed). See Google’s privacy policy: https://policies.google.com/privacy.

We also use Google Search Console to monitor the Site’s search performance; this doesn’t track individual visitors the way Analytics does.

Google PageSpeed Insights is a diagnostic tool we run on-demand to check page load speed — it doesn’t process visitor personal data and isn’t a tracking technology, so it isn’t a visitor-facing data collection point.

e) Advertising / Tracking Pixels

We do not run Meta (Facebook) Pixel or Google Ads conversion tracking on the Site.

3. Who We Share Your Data With

 
  • Hosting: Hostinger — hosts the Site and its database
  • Caching / CDN: QUIC.cloud — via LiteSpeed Cache
  • Analytics: Google (Analytics, Search Console) — via Site Kit
  • Advertising: None — no pixels or ad conversion tracking in use
  • Email delivery: FluentSMTP — sent directly from the Site
  • Form/lead storage: Formspree + our email inbox — Formspree is a U.S.-based third-party service; completed applications are stored safely there and in our inbox only, not in the WordPress database itself
We do not sell personal data to anyone.

4. How Long We Retain Data

  • Applications from people we don’t work with: 12 months from submission, then deleted
  • Applications from clients we do work with: duration of the engagement, plus 5 years
  • Testimonials: retained and displayed until the person asks us to remove them
  • Analytics data: per our Google Analytics retention setting (default 14 months unless changed)

5. Your Rights

 
Regardless of where you’re located, you can ask us to:
 
  • Confirm what personal data we hold about you, and get a copy
  • Correct inaccurate data
  • Delete your data (subject to legal retention obligations, e.g. accounting records)
  • Object to or restrict certain processing
  • Withdraw consent at any time, without affecting processing already done
To exercise these, contact us at gjorgji@breakbadmarketing.com.

6. How We Protect Your Data

 
The Site is served over HTTPS. Access to the WordPress admin is restricted to Gjorgji Cvetkovski and Teodora Panajotovikj, with two-factor authentication enabled on admin logins.

7. Data Breach Procedure

If we become aware of a personal data breach likely to pose a risk to your rights, we will notify the AZLP without undue delay, and affected individuals where required, per LPDP/GDPR breach notification rules.

8. Children’s Privacy

 
The Site is directed at business owners and is not intended for use by children. We do not knowingly collect data from anyone under 16.

9. Contact

 
Gjorgji Cvetkovski — Break Bad Marketing
Bukureska St 2, Skopje 1000, North Macedonia
Email: gjorgji@breakbadmarketing.com

Scroll to Top