Privacy policy

Who processes your data

The data controller is REFEREL CONSULTING LTD (РЕФЕРЕЛ Консултинг ООД), Company ID (EIK) 207116012, EU VAT No. BG207116012, registered in Sofia, Bulgaria. For questions about data processing, write to [email protected].

What data we collect

Through the free check form we collect: business name, other names, website, city, industry, business description, list of competitors, sample questions, full name, role, email, phone and company size.

Through the contact form we collect: name, email, company name and the message text.

When a form is submitted we also record the IP address, browser and referring page - to protect against abuse.

Visit data

If you give consent through the cookie notice, Google Analytics collects anonymized data about your visit: pages viewed, approximate city-level location, device and browser type, traffic source and duration. This data does not allow us to identify you personally.

Without your consent, Google Analytics sets no cookies and collects no data that could identify you. Google Consent Mode may still send limited, cookieless technical signals used for aggregate traffic modeling, which contain no identifier for you.

Why we process it

• To prepare the requested check and send you the result - based on your consent and on steps taken at your request before a contract.
• To reply to your specific inquiry.
• To protect the site from automated abuse - based on legitimate interest.
• To analyze site usage - only based on your consent, which you can withdraw at any time.

How long we keep it

Check requests are kept for up to 24 months from submission. Contact form messages are kept for up to 12 months. After that they are deleted. Analytics data in Google Analytics is kept for up to 14 months.

Who we share it with

We do not sell your data or share it with third parties for marketing purposes.

We use the following processors on our behalf:

• Hosting provider - SuperHosting.BG Ltd., storing the site, database and submitted requests on infrastructure in Bulgaria (EU).
• Email - sent through the same hosting provider's mail server; no external email platform is used.
• Google Ireland Limited - Google Tag Manager and Google Analytics, for site usage analysis. Activated only after your consent. Google may transfer data outside the EU under standard contractual clauses. Details: policies.google.com/privacy.

We do not use advertising networks, profiling technologies or external fonts. All other site resources load from our own server.

When preparing a check, we ask questions to publicly available AI systems. These questions contain the names of your business and your competitors - publicly available commercial information, not personal data.

International transfers

Your data is stored in the European Union. If you are located in the United States, your data is transferred to and processed in the EU, which provides a high level of data protection under the GDPR.

Your rights

• Access to the data we hold about you
• Correction of inaccurate data
• Deletion - see the separate page
• Restriction of processing and objection to it
• Data portability
• Withdrawal of consent at any time - including consent for analytics, by clearing site data in your browser settings
• A complaint to the Bulgarian Commission for Personal Data Protection

Information for California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you rights regarding your personal information.

• Categories we collect: identifiers (name, email, phone, IP address), professional information (business name, role) and internet activity (analytics data, only with consent). The purposes are described above.
• We do not sell or share your personal information, as those terms are defined under the CCPA, and we do not use it for cross-context behavioral advertising.
• Sensitive personal information: we do not collect it.
• Your rights: to know what we collect, to request deletion, to request correction, and not to be discriminated against for exercising these rights.

To exercise these rights, email [email protected] with the subject "California privacy request". We will verify your request using the email address you submitted and respond within 45 days.

Changes

If we make a material change to this policy, we publish the new version on this page with its last updated date.