Privacy Notice

Who we are

Product Upgraded is a trading name of AIIA Consulting Ltd, a company registered in Bulgaria. Registered address: 45 Preslav St, Varna, Bulgaria. Company number (EIK): 205365556. VAT number: BG205365556.

AIIA Consulting Ltd is the data controller for personal data collected through this website. For anything in this notice, contact us at [email protected].

What we collect and why

If you submit the inquiry form, we collect what you enter: name, work email address, company, role if you provide it, the situation you select, and what you want to discuss. We use this to respond to you, assess fit, and prepare for a conversation. The legal basis is our legitimate interest in responding to business inquiries and, where applicable, taking steps at your request before entering into a contract.

You do not have to submit an inquiry. If you choose to contact us, the fields marked as required are necessary for us to understand and respond to your inquiry; without them we cannot respond.

When you visit the website, our hosting and security provider, Cloudflare, processes limited technical data such as IP address, request information and security events as necessary to deliver and protect the website. We process this on the basis of our legitimate interest in operating a secure website. We also use Cloudflare Web Analytics, a cookieless, privacy-first service that gives us aggregate page statistics only and does not track individuals across sites.

If you book an intro call, the booking runs on Google Calendar appointment scheduling. The details you enter on the booking page (name, email, chosen time) are processed by Google and shared with us to hold the appointment. Booking is optional; you can always arrange a time by email instead.

We do not sell personal data, use advertising pixels, or run profiling.

Cookies and similar technologies

This website does not set cookies for analytics or marketing. Our analytics (Cloudflare Web Analytics) is cookieless and does not fingerprint or track individuals. Cloudflare (hosting, security, and the spam check on the inquiry form) may set strictly necessary cookies needed to serve the site securely. Because these are necessary to deliver the service you requested, we do not show a cookie banner. We do not use advertising, marketing or personalization technologies. If you open the Google Calendar booking page, Google applies its own cookie and privacy practices on its domain.

Who processes data on our behalf

• Cloudflare, Inc.: website hosting, content delivery, spam protection (Turnstile), and cookieless web analytics.
• Resend, Inc.: sends the email notification of your inquiry to us and the confirmation to you.
• Google Ireland Limited / Google LLC: appointment scheduling via Google Calendar, if you choose to book an intro call through the booking link.

These providers act as processors under data processing agreements. Cloudflare is based in the United States and certified under the EU-US Data Privacy Framework, which the European Commission recognizes as providing adequate protection; where the Framework does not apply, transfers rely on the European Commission's Standard Contractual Clauses. Resend is based in the United States and transfers rely on Standard Contractual Clauses. You can contact us to request further information or a copy of the applicable transfer safeguards.

How long we keep data

Inquiry details and the related correspondence are kept for as long as needed to handle the inquiry and any resulting engagement, and for no longer than 24 months after our last contact, unless a contract or legal obligation requires longer.

Technical data processed by Cloudflare to deliver and protect the website (request logs and security events) is retained according to the security and operational retention periods applicable to the Cloudflare services we use, and only for as long as necessary for those purposes.

Your rights

Under the GDPR you can ask us to access, correct, delete, or restrict the processing of your personal data, object to processing based on legitimate interest, and receive your data in a portable format. To exercise any of these, email [email protected]. You also have the right to lodge a complaint with a supervisory authority.

Changes

If we change how we handle personal data, we will update this notice and the date above.