Personal data

Privacy Policy

This policy explains what personal data Bulgarify uses, why it is needed and how you can exercise your rights.

Last updated 3 August 2026

01

Who is responsible for your data

Bulgarify is operated by Mechta-Oil Ltd., UIC 128526822, registered office and management address: 19 Nikolay Petrini St., 8600 Yambol, Bulgaria. The company is the controller of personal data processed through the website and related services.

For privacy requests, contact contact@bulgarify.com.

02

Data we collect

We process information needed to operate the platform and handle your request: identification and business contact details; your role, organisation, interests and form responses; project or opportunity information and files you provide; security logs and basic device, browser, IP and request data; public professional and company information from reliable sources; and communication or unsubscribe records.

Please do not send sensitive personal data, third-party identity documents or confidential files unless specifically requested and you are entitled to provide them.

03

Purposes and legal grounds

  • Handling enquiries and taking requested pre-contractual steps.
  • Our legitimate interests in operating and protecting the platform, reviewing submissions, maintaining a relevant B2B directory and preventing abuse.
  • Your consent where you have made a specific choice or consent is legally required.
  • Compliance with applicable legal obligations.
04

Projects and controlled access

Public project summaries contain only information approved for publication. Contacts, precise locations and private documents are not published automatically.

Where you ask us to make an introduction, we may share necessary information with a relevant investor, buyer, owner or supplier after suitability review, with permission and, where appropriate, under an NDA.

05

Recipients and international processing

We do not sell personal data. Information may be accessed by service providers supporting hosting, database, email, form security and maintenance; relevant counterparties where an introduction has been requested or authorised; professional advisers; and authorities where required by law.

We use Supabase services and Cloudflare Turnstile, as well as operational email infrastructure. Where a provider processes data outside the EEA, appropriate contractual or legal safeguards are used.

06

Retention

We retain information only for as long as needed. Enquiries and applications are normally kept for up to 24 months after the last meaningful contact. Active relationships, disputes and legal or accounting requirements may justify longer retention under applicable limitation periods.

Security logs are short-lived. Limited unsubscribe records may be kept to respect your choice. Public business profiles remain while relevant and reasonably current.

07

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent for the future. We may reasonably verify your identity.

Contact contact@bulgarify.com. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection at cpdp.bg.

08

Security and changes

We apply reasonable technical and organisational safeguards, but no online service can guarantee absolute security. We do not make solely automated decisions producing legal or similarly significant effects. Bulgarify is a professional B2B platform and is not intended for people under 18.

Material changes will be published on this page with an updated date.