Legal

Privacy Policy

Updated:

1. Who processes your data

Provider:
Unban Solutions
Address:
18 Shipchenski Prohod Blvd., Sofia, Bulgaria
Email:
support@unbansolutions.com
Phone:
+359 887 704 737

No data protection officer is appointed, because the activity does not meet the conditions of Article 37 GDPR. All questions about this policy go to the address above and are answered within one month.

2. Data we process

  • the name and email you enter in the form;
  • the selected platform, issue type and message content;
  • files you voluntarily attach (screenshots, notices, documents);
  • the record that you confirmed this policy, with the date and time;
  • IP address for short-lived abuse protection and hosting provider technical logs;
  • website usage data: only if you enable analytics or marketing technologies.

3. What we never ask for

We do not ask for and do not accept passwords, recovery codes, two-factor authentication codes or access to your mailbox. If you sent such data by mistake, write to us immediately. We will delete the message, and you should change the code. Please do not attach documents containing data the case does not need, such as national ID or bank details.

4. Purposes and legal bases

  • responding to and assessing an inquiry: pre-contractual steps (Art. 6(1)(b));
  • providing an ordered service: contract performance (Art. 6(1)(b));
  • security and abuse prevention: legitimate interest (Art. 6(1)(f));
  • analytics and marketing: only with your consent (Art. 6(1)(a));
  • legal and accounting duties: legal obligation (Art. 6(1)(c)).

5. Recipients and processors

  • Vercel Inc.: hosting for the website and the contact form;
  • Resend: delivering the inquiry email to us;
  • Cloudflare, Inc.: bot protection in front of the site and the Turnstile check on the form;
  • SuperHosting.BG: the mail server where we receive and keep the messages;
  • Upstash, when configured: a pseudonymised IP-address hash for abuse protection with a 15-minute lifetime;
  • Google Ireland Ltd. and Meta Platforms Ireland Ltd.: only after your consent for the relevant category.

We do not sell or rent personal data, and we do not pass it to third parties for their own advertising purposes.

6. International transfers

Some of the providers above are US companies and processing may take place outside the EEA. In those cases the transfer relies on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU–US Data Privacy Framework. You can request a copy of the applicable safeguards at the address given.

7. Retention

  • inquiries and attachments that do not lead to a contract: up to 12 months;
  • contract and accounting records: for the applicable statutory periods (typically 5 or 10 years);
  • the cookie consent record: 180 days, after which the site asks again;
  • provider technical logs: under their own retention periods, typically up to 30 days.

8. Cookies and tracking

Without your consent neither Google Analytics nor Meta Pixel is loaded. Their scripts are not downloaded at all, which means no data, including your IP address, reaches Google or Meta until you choose the relevant category. Withdrawal takes effect immediately and deletes the cookies already written.

The full list of names, providers and lifetimes is in the Cookie Policy.

The contact form is protected by Cloudflare Turnstile, which distinguishes humans from bots. The check is invisible and requires no action from you; Cloudflare processes limited technical information about the browser and the request. Details are in the Turnstile Privacy Addendum.

9. Your rights

As a data subject you have the right to:

  • access your data and receive a copy;
  • rectify inaccurate data;
  • erasure (the "right to be forgotten");
  • restriction of processing;
  • portability in a machine-readable format;
  • object to processing based on legitimate interest;
  • withdraw consent at any time, without affecting the lawfulness of prior processing.

Email support@unbansolutions.com. We reply within one month. If you believe your rights have been breached, you may complain to the Bulgarian Commission for Personal Data Protection.

10. Rights of visitors from California and other US states

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information has been collected, to request a copy or its deletion, to correct inaccuracies, and not to be discriminated against for exercising those rights.

We do not sell or share personal information within the meaning of the CCPA and we do not carry out targeted advertising without consent, so a separate "Do Not Sell or Share My Personal Information" link does not apply. Requests go to the same address; where necessary we will ask for further information to identify you.

11. Security

The site is served over HTTPS only, with a content security policy and protection against framing by another site. The form accepts a limited list of fields and file types, verifies file content by signature and rate-limits requests. Access to received inquiries is limited to the people working on the case. No measure is absolute. In the event of an incident with significant risk we will notify you and report it to the supervisory authority.

12. Children

The services are intended for people over 18. We do not knowingly collect children's data. If we learn that we have received a child's data without parental or guardian consent, we delete it.

13. Automated decisions

We do not take decisions based solely on automated processing that produce legal effects for you, and we do not carry out profiling. The diagnostic on this site is an informational aid and does not decide a case.

14. Changes to this policy

Any change updates the date at the top. For a material change we will ask for your consent again where that is required. We recommend reviewing this page whenever you send a new inquiry.