Privacy Policy
Thanks for showing interest in us and our website. This Privacy Policy outlines the privacy practices for Spacetype OOD, a company based in Sofia, Bulgaria, operating under the brand name Type Forward (“we,” “us,” or “our”).
This document explains the nature, scope, and purpose of the personal data we collect, use, and process when you interact with our website, typeforward.com (the “Website”). We’re committed to protecting your privacy and handling your information safely and responsibly in line with the GDPR and other applicable data protection laws.
We operate from Bulgaria and make our site available worldwide. This policy explains what personal data we handle when you browse our website or interact with our forms.
Who We Are & How to Contact us
Company Name: spacetype OOD (спейстайп ООД)
Company Registration Number: BG206100269
Operating Name: Type Forward
Location: Sofia, Bulgaria
Contact Email: contact@typeforward.com
Website: typeforward.com
If you have any questions about this policy or wish to exercise your data protection rights, please use the email address above.
What Information We Collect
A. Information from All Website Visitors
1) Newsletter sign‑ups (Mailchimp embedded forms)
Data: Email address.
Optional meta: Mailchimp may record time, IP, and consent log.
Why: To send newsletters (e.g., new font releases, sales) and manage welcome/free/trial font emails.
Legal basis: Consent (Art. 6(1)(a) GDPR). You can withdraw at any time via the unsubscribe link.
2) Contact form — “Type Services”
Data: Name, email, message.
Why and Legal Basis: We use this information to reply to your message. Our legal basis is our legitimate interest to respond to business inquiries (Art. 6(1)(f) GDPR). If your message is about purchasing a service or starting a project, we process this data as a necessary step at your request before entering into a contract (Art. 6(1)(b) GDPR).
Storage: Form entries are stored in WordPress (Elementor Submissions) and also delivered to our email inbox.
3) Technical data
Data: Our hosting provider may process IP addresses and basic browser/device information as part of standard server operations, security, and error logs.
Why: To operate, secure, and debug the site.
Legal basis: Legitimate interests (site security and reliability) (Art. 6(1)(f)).
4) Cookies
We use cookies to operate our site. These include essential cookies, which are necessary for the website to function, and optional cookies for analytics and user experience improvements, which are only set if you give us your consent. For a detailed list of cookies and to manage your choices, please see our Cookie Policy.
5) Consent logs (via CookieYes)
- Data: Anonymized IP address, your country, your consent status (e.g., accepted/rejected), and a timestamp of when you consented.
- Why: To record your cookie preferences and demonstrate our compliance with data protection laws.
- Legal basis: Legal Obligation (Art. 6(1)(c) GDPR).
6) Analytics data (via Google Analytics)
- Data: We collect pseudonymized data about your interaction with our site, such as pages visited, time spent on pages, device and browser type, and your general location (country/city). We have enabled IP anonymization, so your full IP address is not stored.
- Why: To analyze website performance, understand which content is popular, and improve the user experience.
- Legal basis: Consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time through our cookie settings.
7) Behavior Analytics (via Hotjar)
- Data: To help us improve our website’s design and usability, we collect data on user interactions, such as clicks, taps, scrolling, and mouse movements. This is aggregated into heatmaps and session recordings. We ensure that sensitive information in form fields is not recorded. Hotjar also uses a pseudonymized user identifier and technical data like your browser and country.
- Why: To identify and fix user experience issues and improve the overall functionality and design of our website.
- Legal basis: Consent ( GDPR). You can withdraw your consent at any time through our cookie settings.
8) Behavior Analytics (via Microsoft Clarity)
To further understand how users interact with our website, we use Microsoft Clarity to capture behavioral data such as clicks, taps, scrolling, and mouse movements. This is aggregated into heatmaps and session recordings. Clarity is a Microsoft product, and this data helps us identify usability issues and improve our site’s design.
Why: To analyze user behavior, improve website functionality, and fix user experience problems.
Legal basis: Consent (). You can withdraw your consent at any time through our cookie settings.
9) Affiliate links
Some pages on our site include affiliate links to external font shops (e.g., Fontspring, MyFonts). This means that if you click on one of these links and make a purchase, we may earn a small commission at no extra cost to you. Please note that when you click such a link, the external website will process your data under its own privacy policy, which we do not control.
B. Information from Our Clients
10) Licensee and Contact Information
Data: Your name (as an individual or the full legal name of your company/organization), and your contact email address.
Why: To correctly identify you as the official “Licensee” in the End User License Agreement (EULA). This is essential for the license to be legally valid. We also use your email to deliver the font files, the license document, and for any future communication regarding your license. This same principle applies to communications and information processed during the negotiation and fulfillment of custom licenses, font customizations, or other design service agreements.
Legal basis: Performance of a Contract (Art. 6(1)(b) GDPR). This processing is essential for us to create and fulfill the legal agreement between us.
11) Billing and Transaction Information
Data: Your billing address, company registration or VAT number (if applicable), and a record of the transaction itself (e.g., invoice number, amount paid, date of payment).
Why: To issue legally compliant invoices and for our own mandatory tax and accounting records, as required by Bulgarian law.
Legal basis: Legal Obligation (Art. 6(1)(c) GDPR). We are legally required to collect this information for financial reporting and tax purposes.
A Note on Payment Data: Please note that payments are made via direct bank transfer to our company IBAN. We do not request, process, or store sensitive payment data like credit card numbers.
12) License Records
Data: We maintain an internal record of the license you have purchased. This includes your name as the Licensee, the specific fonts licensed, and the scope of your license (e.g., number of desktop users, website pageviews).
Why: To provide you with long-term customer support (such as re-sending font files if you lose them), to verify your license status, and to manage our business records effectively.
Legal basis: Legitimate Interests (Art. 6(1)(f) GDPR). It is in our legitimate interest to maintain accurate business records of the intellectual property licenses we have granted and to be able to provide ongoing support to our clients.
Our Service Providers (Third-Party Processors)
We use trusted service providers to run our business. They process personal data only under our instructions and in accordance with our legal agreements. Below, we’ve listed our key providers by their function.
1. Website Hosting & Infrastructure
These services are essential for our website to operate, function securely, and be delivered to you.
Hostinger International Ltd. (Hosting Provider)
Purpose: Hosts our website files and database.
Data Location: Germany (EU).
Elementor Ltd. (Website Platform)
Purpose: Stores contact form entries within our website’s database.
Data Location: Israel (Recognized by the EU as providing adequate data protection).
GoDaddy.com LLC (DNS Provider)
Purpose: Routes traffic to our website.
Data Location: United States (Protected by appropriate safeguards).
2. Analytics & User Experience
We use these services to understand how visitors interact with our website so we can improve it. This data is only collected with your consent.
Google Analytics (Google LLC)
Purpose: Provides pseudonymized analytics about website traffic and user engagement.
Data Location: United States (Protected by appropriate safeguards like SCCs).
Hotjar Ltd. (Behavior Analytics)
Purpose: Helps us understand user experience through heatmaps and session recordings.
Data Location: Malta (EU).
Microsoft Clarity (Microsoft Corporation)
Purpose: Provides additional heatmaps and session recordings to help us improve site design.
Data Location: United States (Protected by appropriate safeguards).
3. Marketing & Communication
These services help us communicate with you, for example, through our email or newsletters.
Google Workspace (Google LLC)
Purpose: Our provider for email services (
contact@typeforward.com).Data Location: United States (Protected by appropriate safeguards like SCCs).
Mailchimp (Intuit Inc.)
Purpose: Manages our newsletter subscriptions and sends email campaigns.
Data Location: United States (Protected by appropriate safeguards like SCCs).
4. Payment Processing
This is the service that handles payment transactions when you purchase a license.
Banking Partners
Purpose: To process your payments via bank transfer.
Data Location: European Union (EU). They operate as independent data controllers.
5. Compliance Management
This service helps us manage our legal compliance obligations.
CookieYes (Mozilor Limited)
Purpose: Our consent management platform for managing cookie preferences.
Data Location: United Kingdom (Recognized by the EU as providing adequate data protection).
International transfers
Some providers are headquartered outside the EEA (for example, Mailchimp’s parent company is in the United States). Where such access or transfer occurs, we rely on appropriate safeguards under GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs), and we take additional measures where necessary.
How long do we keep data (Data Retention)
Newsletter subscribers (Mailchimp): kept until you unsubscribe; minimal records (e.g., consent logs) retained for up to 24 months afterward for compliance.
Contact form emails (our mailbox): kept until no longer needed for your request or our legitimate interests; we review annually and delete stale threads.
Elementor Submissions (in WordPress): kept for 12 months, then purged.
Server access/security logs: typically kept up to 90 days.
Backups: automatic daily backups; currently ~60–90 days of restore points (rolling).
Client and Billing Records: We are legally required by Bulgarian law to keep invoices and related financial records for up to 10 years after the transaction.
License Records: We will retain your license record for as long as your license is active to provide you with ongoing support (e.g., re-sending files or other needed support).
Your Data Protection Rights
You have the right to request access, correction, erasure, restriction, portability, and to object to processing based on our legitimate interests. Where we rely on consent, you can withdraw it at any time.
To exercise your rights, email contact@typeforward.com. We will respond without undue delay.
You also have the right to lodge a complaint with your local authority. In Bulgaria, that is the Commission for Personal Data Protection (CPDP).
Your Data Protection Rights
We use reputable hosting, industry‑standard security measures, and limited access to data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
If something goes wrong (data breach): we will investigate, mitigate risk, and where required, notify the relevant authority within 72 hours and inform affected individuals when legally required.
Children’s Privacy
Our site does not target children under 18, and we do not knowingly collect their data.
If you believe we have inadvertently collected such information, please contact us at contact@typeforward.com so we can promptly take corrective action.
Changes to This Policy
We may update this policy when our services or the law changes. We will post the updated version here and change the “Last updated” date.