Privacy Policy Detailed Version

Privacy Policy of PREOKA Ltd

Effective Date: August 2, 2025
Last Updated: August 2, 2025

PREOKA Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or otherwise interact with us.

This document applies to all services offered by PREOKA Ltd, including training programs, coaching sessions, digital products, email communication, and any other online or offline activities where your personal data may be processed.

---

1. Company Details

Legal Name: PREOKA Ltd
UIC (Unified Identification Code): 208040251
Legal Form: Sole-owned Limited Liability Company (Еднолично дружество с ограничена отговорност)
Registered Office:
Exarch Yosif Street №93, Ground floor,
1000 Sofia, Oborishte District,
Sofia Municipality, Bulgaria

Correspondence Address with NRA:
Stara Planina Street №5, Floor 2, Office 1,
1000 Sofia, Oborishte District,
Sofia Municipality, Bulgaria

Hosting Provider: Webador (EU-based)

---

2. What Personal Data We Collect

We may collect the following types of personal data:

a. Identity Data

• Full name

• Username or similar identifier

• Date of birth

• Gender (optional)

b. Contact Data

• Email address

• Phone number

• Billing and delivery address

c. Professional Data

• Job title or occupation

• Organization or company name

• Field of interest or industry

d. Financial Data

• Bank account or payment card details (processed securely via third-party payment providers like Stripe or PayPal)

• Invoicing information

e. Transaction Data

• Details of payments and purchases made

• History of attended courses, coaching sessions, and consultations

f. Technical Data

• IP address

• Browser type and version

• Time zone setting and location

• Device type and operating system

• Website usage behavior (via cookies and analytics)

g. Marketing and Communication Data

• Your preferences in receiving marketing communications

• Your communication history with us

---

3. How We Collect Your Data

We use different methods to collect data, including:

• Direct interactions: You provide data by filling in forms, registering on our website, booking a session, or contacting us by email or phone.

• Automated technologies: As you interact with our website, we automatically collect technical data via cookies, server logs, and analytics tools.

• Third parties: We may receive data from payment processors, marketing platforms (like Mailchimp or Meta), or analytics tools (e.g., Google Analytics).

---

4. Why We Process Your Data (Purposes of Processing)

We process your data for the following purposes:

• To deliver our services: Training programs, coaching sessions, support, and user accounts

• To process payments and invoices

• To send administrative notifications: Confirmations, changes, or reminders

• To manage our relationship with you: Customer service, responding to inquiries

• To improve our services: Customer feedback, analytics, and performance tracking

• To comply with legal obligations: Invoicing, tax reporting, and fraud prevention

• To send marketing communications (if you have opted in): Newsletters, offers, and service updates

---

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

• Contractual necessity – to perform the services you request

• Legal obligation – for accounting and taxation purposes

• Legitimate interests – such as improving our services and business development

• Consent – where required for email marketing or tracking cookies

---

6. Cookies and Tracking Technologies

We use cookies and similar technologies on our website to:

• Ensure website functionality

• Monitor traffic and usage behavior

• Customize your user experience

• Serve personalized advertising (only with your consent)

You can manage cookie preferences via our cookie banner or through your browser settings.

---

7. Data Sharing and Disclosure

We do not sell your personal data. However, we may share your data with:

• Service providers and partners: Web hosting, analytics, CRM, email marketing, payment processing

• Regulatory authorities: Tax offices or other competent agencies if legally required

• Third-party platforms: Only with your consent (e.g., social media remarketing tools)

All third parties are required to respect your privacy and process your data securely, in accordance with applicable laws.

---

8. International Data Transfers

Our operations are based in Bulgaria (EU), and your data is stored within the European Economic Area (EEA). However, some tools we use (such as Google Analytics, email marketing services, or payment gateways) may process data outside the EEA.

We ensure that any such transfers are made in compliance with GDPR, using appropriate safeguards such as Standard Contractual Clauses or certified frameworks (e.g., EU-U.S. Data Privacy Framework where applicable).

---

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including:

• Customer data: 5 years after the last interaction

• Financial records: 10 years (as required by Bulgarian accounting law)

• Marketing data: Until you withdraw consent or unsubscribe

After this period, your data will be securely deleted or anonymized.

---

10. Your Rights under GDPR

You have the following rights regarding your personal data:

• Right to access – You can request a copy of the data we hold about you.

• Right to rectification – You can ask us to correct inaccurate or incomplete data.

• Right to erasure ("right to be forgotten")

• Right to restrict processing

• Right to data portability – You can request your data in a structured, machine-readable format.

• Right to object – Especially to marketing or processing based on legitimate interest.

• Right to withdraw consent – At any time, for marketing or cookies.

• Right to lodge a complaint – With the Commission for Personal Data Protection in Bulgaria (https://www.cpdp.bg/).

To exercise these rights, please contact us at:
📧 Email: [Insert your email here]
📬 Postal address: PREOKA Ltd, Stara Planina №5, Floor 2, Office 1, 1000 Sofia, Bulgaria

---

11. Data Security

We have implemented appropriate technical and organizational security measures to prevent unauthorized access, disclosure, alteration, or destruction of your personal data.

These include:

• SSL encryption

• Secure backups

• Access control

• Employee confidentiality agreements

• Data protection training

---

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing any data.

---

13. Updates to This Policy

We may update this privacy policy from time to time. The latest version will always be available on our website with the "Last Updated" date indicated at the top.

---

14. Contact Us

If you have questions, concerns, or requests related to this privacy policy or your personal data, please contact us:

PREOKA Ltd
Country: BULGARIA
Region: Sofia (capital), Municipality: Sofia
City/Village: Sofia, p.c. 1000
Oborishte district
93 Exarch Joseph Street, ground floor