Privacy Policy
This Privacy Policy explains how ByDimitar ("we", "us") collects, uses, and protects information when you visit bydimitar.app or contact us about our website, AI automation, or booking system services. Last updated June 26, 2026.
1. Information We Collect
We collect only what we need to respond to inquiries and operate this site:
- Contact info you send us — name, email address, company, and message content when you email bydimitar@gmail.com or use a contact form.
- Basic technical data — IP address, browser type, device type, referring page, and pages viewed. Used for security, debugging, and aggregate traffic analysis.
- Cookies and similar storage — see the Cookies section below.
We do not knowingly collect information from children under 13.
2. How We Use Information
- To reply to your inquiry and deliver the services you request.
- To send transactional or service-related emails (e.g. project updates).
- To maintain, secure, and improve the website.
- To meet legal, tax, and accounting obligations.
We do not sell your personal information.
3. Legal Bases (GDPR / UK GDPR)
Where applicable, we rely on: your consent (cookies, marketing), performance of a contract (delivering work you hired us for), legitimate interests (site security, basic analytics), and legal obligation (record-keeping).
4. Cookies & Similar Technologies
We use a small number of cookies and local storage entries:
- Essential — required for the site to work (e.g. remembering your cookie choice). Always active.
- Analytics — aggregate usage statistics so we can improve the site. Only set after you accept.
You can change your choice anytime by clearing the bydimitar-cookie-consent entry from your browser's site storage, which will re-show the banner.
5. Third-Party Services
The site and our backend use a small set of vendors that may process limited data on our behalf:
- Lovable Cloud / Supabase — application hosting, database, and edge functions.
- Email delivery — transactional email sent from notify.bydimitar.app.
- Google Search Console — anonymous search performance data for SEO.
Each vendor processes data under its own privacy terms.
6. Data Retention
We keep contact and project records only as long as needed to provide services and meet legal obligations, then delete or anonymize them.
7. Your Rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, withdraw consent, or object to certain processing. To exercise any of these rights, email bydimitar@gmail.com. We respond within 30 days.
8. Security
We use industry-standard safeguards including TLS in transit, access controls on our backend, and least-privilege service roles. No system is perfectly secure, but we take reasonable steps to protect your information.
9. International Transfers
Our hosting providers may process data in countries other than yours. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
10. Changes to This Policy
We may update this policy as our services or the law evolve. The "Last updated" date above will reflect the most recent revision.