Privacy Policy

    Last updated: January 24, 2026

    Introduction

    This Privacy Policy describes how Orion Ascend, operating under the Bonu brand ("we", "our" or "us"), a digital agency based in the Principality of Andorra, collects, uses and protects the personal information you provide when using our website bonu.ad. We are committed to protecting your privacy in accordance with Andorran data protection legislation, as well as the General Data Protection Regulation (GDPR) for our visitors residing in the European Union.

    1. Data Controller

    Orion Ascend (trade name: Bonu)

    Digital agency

    NRT: to be completed

    58 Carretera del Forn, AD100 Canillo, Principality of Andorra

    Email: contact@bonu.ad

    2. Personal Data Collected

    We collect the following data when you use our contact form:

    • Identification data: first name, last name
    • Contact details: email address, phone number (optional)
    • Professional data: your website URL (optional)
    • Project information: goals, estimated budget, message
    3. Purposes of Processing

    Your personal data is collected for the following purposes:

    • Responding to your contact and quote requests
    • Providing you with information about our services
    • Establishing and managing the business relationship
    • Improving our services and your user experience
    4. Legal Basis for Processing

    Orion Ascend is a company under Andorran law and processes your data in accordance with Andorran legislation on the protection of personal data. For individuals residing in the European Union, the GDPR also applies. Processing is based on the following legal grounds:

    • Your consent: when submitting the contact form
    • Performance of a contract: for the management of our services
    • Our legitimate interest: improving our services
    5. Retention Period

    Your personal data is retained for a period of 3 years from your last contact with us, unless a longer legal retention period applies.

    6. Data Recipients

    Your data may be transmitted to the following recipients:

    • Our internal team: to process your request
    • Technical providers: hosting (Lovable/Supabase), email sending (Resend)

    We do not sell or rent your personal data to third parties.

    7. Data Transfers

    Some of our technical providers may be located outside the European Union. In that case, we ensure appropriate safeguards are in place in accordance with the GDPR (standard contractual clauses, certifications, etc.).

    8. Your Rights

    In accordance with the GDPR, you have the following rights:

    • Right of access: obtain a copy of your data
    • Right to rectification: correct inaccurate data
    • Right to erasure: request the deletion of your data
    • Right to restriction: restrict the processing of your data
    • Right to portability: receive your data in a structured format
    • Right to object: object to the processing of your data
    • Right to withdraw your consent: at any time

    To exercise these rights, contact us at: contact@bonu.ad

    9. Cookies

    Our site uses cookies to improve your browsing experience. Cookies are small text files stored on your device.

    Types of cookies used:
    • Essential cookies: necessary for the site to function
    • Analytics cookies: help us understand site usage (Google Analytics)
    • Marketing cookies: measure the effectiveness of our campaigns (Google Ads)

    You can manage your cookie preferences via your browser settings or our consent banner.

    10. Data Security

    We implement appropriate technical and organizational measures to protect your data against any unauthorized access, alteration, disclosure or destruction:

    • SSL/TLS encryption of communications
    • Secure hosting with authentication
    • Limited access to personal data
    11. Complaint to the supervisory authority

    If you believe that the processing of your data does not comply with regulations, you may lodge a complaint with the Andorran supervisory authority:

    Agència Andorrana de Protecció de Dades (APDA)

    Principality of Andorra

    Website: www.apda.ad

    Visitors residing in the European Union may also contact the data protection authority of their country of residence.

    12. Changes to the Policy

    We reserve the right to modify this Privacy Policy at any time. Any changes will be published on this page with an updated date. We encourage you to review this page regularly.

    13. Contact Us

    For any questions regarding this Privacy Policy or the processing of your data:

    Email: contact@bonu.ad

    Address: 58 Carretera del Forn, AD100 Canillo, Principality of Andorra