Data Protection Policy
How OptimAIze collects, uses and protects your personal data, and the rights you have under the GDPR.
Last updated: 14 June 2026
1. Introduction
OptimAIze is committed to protecting your personal data and respecting your privacy. This Data Protection Policy explains how we collect, use, store and share personal data when you visit this website, contact us, subscribe to our newsletter, book an intro call, or engage our consultancy services. It applies to data we process as a controller and reflects our obligations under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Bulgarian Personal Data Protection Act.
2. Data controller
The controller responsible for your personal data is:
- OptimAIze
- Registered entity: OptimAIze [full legal/company name to be confirmed]
- Company registration number (EIK/UIC): [to be confirmed]
- Registered address: [to be confirmed], Bulgaria
- Contact for data protection matters: office@optimaize.pro
We have not appointed a statutory Data Protection Officer, as we are not required to. The contact above handles all data protection queries.
3. Personal data we collect
We collect only the data we need:
- Contact and enquiry data: your name, email address, organisation, role and the contents of any message when you email us, complete a form, or book a call.
- Booking data: information needed to schedule and hold an intro call, which may be processed through a third-party scheduling/calendar tool.
- Newsletter data: your email address (and any name you provide) if you subscribe to our briefing.
- Engagement data: information you and your organisation share with us during a consultancy engagement, which may include documents and details about your business processes and systems. This is governed primarily by the engagement agreement and, where we process data on your behalf, a data processing agreement.
- Technical data: limited information your browser sends when loading the site (e.g. IP address, device and browser type), and the local-storage preferences described in our Cookie Policy.
We do not intentionally collect special categories of personal data through this website, and ask that you do not send us such data unprompted.
4. How and why we use your data (purposes and legal bases)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to your enquiries and providing requested information | Legitimate interests (Art. 6(1)(f)), to communicate with people who contact us |
| Arranging and holding intro calls; preparing proposals | Steps prior to entering a contract (Art. 6(1)(b)) |
| Delivering contracted consultancy services | Performance of a contract (Art. 6(1)(b)) |
| Sending our newsletter / briefing | Consent (Art. 6(1)(a)), you may withdraw it at any time |
| Operating, securing and improving the website | Legitimate interests (Art. 6(1)(f)), running a safe, functional site |
| Complying with legal, accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have considered and balanced those interests against your rights and freedoms.
5. Sharing your data
We do not sell your personal data. We share it only where necessary with:
- service providers who process data on our behalf under appropriate contracts, for example email, scheduling/calendar, newsletter and IT hosting providers, and the third-party services described in our Cookie Policy;
- professional advisers (such as accountants or lawyers) where reasonably required;
- public authorities or regulators where we are legally obliged to do so.
6. International transfers
Some of our service providers may process data outside the European Economic Area. Where this happens, we ensure an appropriate safeguard is in place, such as an adequacy decision of the European Commission or Standard Contractual Clauses, so that your data continues to receive an equivalent level of protection.
7. How long we keep it
We retain personal data only for as long as necessary for the purposes for which it was collected:
- enquiry and intro-call data that does not lead to an engagement, typically up to 12 months;
- newsletter data, until you unsubscribe;
- engagement and contract records, for the duration of the engagement and for the period required by law (including accounting and limitation periods) afterwards.
When data is no longer needed, we securely delete or anonymise it.
8. How we protect your data
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including access controls, encryption in transit where supported, and limiting access to those who need it. Reflecting our own consultancy practice, data protection and security are considered by design in the tools and processes we adopt.
9. Your rights
Subject to the conditions in the GDPR, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased ("right to be forgotten");
- restrict or object to certain processing, including processing based on legitimate interests;
- data portability;
- withdraw consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, contact us at office@optimaize.pro. We will respond within one month, as required by the GDPR.
10. Complaints
If you believe we have not handled your personal data properly, we would welcome the chance to resolve it directly. You also have the right to lodge a complaint with the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), www.cpdp.bg, or with the data protection authority in your country of residence.
11. Changes to this policy
We may update this Data Protection Policy from time to time. The "Last updated" date above indicates when it was last revised, and we encourage you to review it periodically.
12. Contact
Requests or questions regarding your personal data can be sent to office@optimaize.pro.
Questions about your data?
Get in touch and we'll be happy to explain how your information is handled.
Book a call