Privacy policy

§1. Controller

The controller of personal data is [Company name], UIC [·········], registered at [address] (“Kvorum”, “we”). For data protection questions: info@kvorum.bg.

§2. What we process

• Account data: email, name, phone (optional), language, role (client, consultant, company).
• Consultant public profile: name, photo, description, city, languages, experience, services and prices. Public once the consultant publishes the profile.
• Bookings: date and time, service, format, meeting notes and status.
• Reviews: rating and text; publicly only the first name and last initial are shown.
• Requests and messages: what you send through the contact and request forms.
• Technical data: IP address and browser data, processed by the hosting provider for security and abuse prevention.

§3. Purposes and legal bases

• Providing the platform and handling bookings: performance of a contract (Art. 6(1)(b) GDPR).
• Answering requests and messages: your consent and our legitimate interest in replying (Art. 6(1)(a) and (f)).
• Security and preventing abuse and spam: legitimate interest (Art. 6(1)(f)).
• Legal obligations such as accounting: legal obligation (Art. 6(1)(c)).

§4. Recipients and processors

We use providers that process data on our behalf: Supabase (database and sign-in, servers in Frankfurt, EU), Cloudflare (hosting and bot protection) and Resend (email delivery). The consultant you book receives your name, contact details and meeting notes. We do not sell personal data.

§5. Retention

Account data is kept while the account exists. When you delete your account, the data is erased unless the law requires longer retention. Messages and requests are kept for up to 24 months.

§6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. In “My account” → “Settings” you can download all your data and delete your account yourself. You may complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

§7. Cookies

We only use strictly necessary local storage for sign-in and preferences. See the Cookie policy.