Privacy & Cookies

1. Who we are

This website is operated under the UpReformer brand by IVELAS Group EOOD (UIC 208036107, VAT BG208036107), the controller of the personal data collected through it. For any privacy question, or to exercise your rights, contact us at the email below.

2. What we collect

• Information you give us: when you use the contact form or sign up for the newsletter, we collect your name, email address and the content of your message.
• Usage & analytics data: if you accept analytics cookies, we collect anonymous statistics about how you use the site · pages viewed, clicks, device and browser type, and an approximate region derived from your IP address. We use PostHog (EU-hosted) for this. Nothing is collected and no analytics cookies are set until you accept.
• Technical data: like any website, our hosting and security providers process standard request data (e.g. IP address, browser) to deliver and protect the site.

3. Cookies & similar technologies

• Strictly necessary: we store your cookie choice in your browser (a small upr-consent value) so we remember it. This is required to honour your decision and needs no consent.
• Analytics cookies: set by PostHog only after you accept. They help us understand usage in aggregate.
• You can change your mind at any time by clearing this site's cookies / site data in your browser · this brings the consent banner back.

4. Why we use your data (legal basis)

• Consent · for analytics cookies and newsletter sign-ups.
• Legitimate interest, or steps taken at your request · to reply to messages you send us and to keep the site secure.

5. Who we share it with (processors)

We don't sell your data. We use trusted providers who process data on our behalf, each under its own privacy terms:

• PostHog · product analytics (EU-hosted).
• Resend · sending email for the contact form and newsletter.
• Vercel · website hosting.
• Cloudflare · DNS, security and content delivery.
• Google Maps · studio location maps are rendered by our server; your browser does not contact Google directly for them.

6. Booking & independent studios

Reservations are completed on our booking partner's platform (Fitsys) and on the systems of the independent franchise studios. When you book, your data is handled under their privacy policies. This website only links you to them.

7. International transfers

We aim to keep processing within the EU/EEA (our analytics are EU-hosted). Where a provider processes data outside the EEA, it does so under appropriate safeguards (e.g. EU Standard Contractual Clauses).

8. How long we keep it

Contact messages are kept as long as needed to handle your inquiry and for a reasonable period afterwards. Newsletter data is kept until you unsubscribe. Analytics data is retained in aggregate according to our analytics provider's retention settings.

9. Your rights

Under the GDPR you can: access your data; correct it; delete it; restrict or object to processing; receive a copy (portability); and withdraw consent at any time. To exercise any of these, contact us. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (CPDP), www.cpdp.bg.

10. Changes to this policy

We may update this policy as the site evolves. The last-updated date above always reflects the current version.

Contact

Questions about your privacy? Email us: office@upreformer.com