Privacy Policy

1. Who We Are

Bulgaria Unlocked is operated by Bultrips Ltd, a licensed tour operator registered in Bulgaria.

For any privacy-related inquiries, please contact us at the email provided in our Contact page.

2. Information We Collect

We collect information that you provide directly to us, including:

• Name and email address when you create an account
• Payment information processed through our secure payment provider (Stripe)
• Location data when you use our GPS-guided tours
• Usage data and preferences to improve your experience
• Device information and browser type for technical compatibility

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our audio guide services
• Process your payments and deliver purchased content
• Enable GPS-triggered audio narration at historical sites
• Send you service-related communications (not marketing without consent)
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Protect the security and integrity of our service

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for processing your personal information includes:

• Contract: Processing necessary to fulfill our service agreement with you
• Consent: You have given explicit consent for specific purposes
• Legal Obligation: Compliance with Bulgarian and EU law
• Legitimate Interests: Providing and improving our services

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Payment Processors: Stripe for secure payment processing
• Service Providers: Third-party vendors who assist in operating our service
• Legal Requirements: When required by Bulgarian or EU law
• Business Transfers: In connection with any merger or sale of company assets

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide you with access to purchased regions and content
• Comply with legal obligations (Bulgarian commercial and tax law)
• Resolve disputes and enforce our agreements

You may request deletion of your account at any time through the app settings or by contacting us.

7. Your Rights (GDPR)

If you are in the EEA, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us or use the account management tools in the app.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure payment processing via PCI-DSS compliant providers
• Regular security assessments and updates
• Access controls and authentication mechanisms

9. International Data Transfers

Your information may be transferred to and processed in countries other than Bulgaria. We ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Compliance with GDPR Chapter V requirements

10. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us: