Privacy & cookies
1) Who we are
Controller: Interwebs Ltd., ul. “Stefan Karadzha” 10, Floors 3 – 4, 1000 Sofia, Bulgaria.
Email for privacy requests: privacy@masterful.info
Phone: +359 876 142 746
2) Scope
This policy explains how we collect, use, share, and protect personal data when you visit our websites, use our services, or interact with our marketing.
3) What data we collect
We collect the following categories of data:
Contact data: name, email address, phone number (optional), company, role.
Communications: messages, support requests, notes from calls.
Usage and device data: pages viewed, interactions, IP address, timestamps, referrer, device and browser info.
Marketing preferences: newsletter opt-ins, consent choices, unsubscribes.
Ad/analytics identifiers: cookies and similar IDs set by us or our vendors (see Cookie Policy).
We collect data directly from you (forms, emails, calls) and automatically through cookies and similar technologies.
4) Purposes and legal bases
We process personal data only when a legal basis applies:
Provide content or services you request (e.g., lead magnets, contact replies). Legal basis: contract performance or steps prior to a contract (GDPR Art. 6(1)(b)).
Send newsletters and marketing when you opt in. Legal basis: consent (Art. 6(1)(a)). You can withdraw consent at any time.
Run analytics and measure performance. Non‑essential analytics runs only with consent. Legal basis: consent (Art. 6(1)(a)).
Run advertising, retargeting, and conversion measurement via Google Ads, LinkedIn, and Meta (Facebook/Instagram). These use cookies or similar tech and run only with consent. Legal basis: consent (Art. 6(1)(a)).
Maintain security, prevent abuse, and keep records. Legal basis: our legitimate interests (Art. 6(1)(f)).
Meet legal obligations (e.g., tax, accounting). Legal basis: legal obligation (Art. 6(1)(c)).
Where we rely on legitimate interests, we balance those interests against your rights and freedoms.
5) Cookies and similar technologies
We use cookies, pixels, and similar technologies to operate the site, analyze traffic, and run ads. Non‑essential cookies load only after you give consent in our banner. You can change or withdraw your consent at any time via Cookie Settings in the site footer. For details, see our separate Cookie Policy (includes cookie categories, purposes, and lifetimes).
6) Tools we use as processors
We use vetted vendors under data processing agreements:
Google Analytics 4 for analytics.
Google Ads for conversion tracking and remarketing.
Meta Pixel (Facebook/Instagram) for conversions and remarketing.
LinkedIn Insight Tag for conversions and remarketing.
Google Search Console for site diagnostics.
Go High Level (HighLevel LLC) for CRM and email delivery.
Vendors act as processors or independent controllers for some features. See their privacy notices for details.
7) International transfers
Some vendors are in countries outside the EEA (e.g., the United States). Transfers are protected by approved mechanisms such as the EU‑US Data Privacy Framework and/or Standard Contractual Clauses. Copies of these safeguards are available on request.
8) How long we keep data
Marketing contacts: until you unsubscribe or after 24 months of inactivity, unless a longer period is needed to comply with law. We keep a suppression list to honor opt‑outs.
Analytics data (GA4): retained according to our GA4 setting (2 or 14 months).
Advertising audiences: membership durations depend on the platform and our settings (for example, up to 540 days for certain Google audiences).
Contracts, invoices, and tax records: kept for statutory periods under Bulgarian law.
9) Who receives your data
Service providers listed in Section 6.
Professional advisors (accountants, legal counsel) when necessary.
Authorities where required by law.
We do not sell your personal data.
10) Your rights
You have the right to request:
access to your data;
correction of inaccuracies;
deletion;
restriction of processing;
portability of data you provided to us;
objection to processing based on legitimate interests;
withdrawal of consent at any time for processing based on consent.
You also have the right to lodge a complaint with the Bulgarian supervisory authority (see Section 12).
11) How to exercise your rights
Email us at privacy@mail.masterful.info from the address you used with us. We may need to verify your identity. We respond within one month as required by law.
12) Supervisory authority in Bulgaria
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Website: https://www.cpdp.bg/en/
Email: kzld@cpdp.bg
13) Children
Our services are not directed to children. In Bulgaria, if consent is the legal basis for online services offered directly to a child, parental consent is required where the child is under 14. We do not knowingly collect data from children. If you believe a child has provided personal data, contact us and we will take appropriate steps.
14) Security
We use technical and organizational measures such as TLS encryption in transit, access controls, role‑based permissions, regular software updates, and multi‑factor authentication for admin accounts. We train staff on data protection. If a breach affects your rights, we will notify you and the CPDP when required by law.
15) Automated decision‑making
We do not make decisions with legal or similarly significant effects based solely on automated processing. We use basic segmentation and ad audiences that do not produce such effects.
16) Updates
We may update this notice from time to time. The latest version is always available on this page. Significant changes will be highlighted where appropriate.
17) Contact
Interwebs Ltd.
ul. “Stefan Karadzha” 10, Floors 3 – 4, 1000 Sofia, Bulgaria
Email: privacy@mail.masterful.info
Phone: +359 876 142 746
Annex: Summary of the tools we use
Google Analytics 4: collects usage data in aggregate and does not log or store IP addresses for EU users. You can opt out with Google’s browser add‑on.
Google Ads tags: measure conversions and build remarketing audiences after consent. Audience membership may last up to 540 days depending on settings.
Meta Pixel: measures conversions and builds audiences after consent. EU users can manage ad choices in their Meta account.
LinkedIn Insight Tag: measures conversions and builds audiences after consent. LinkedIn provides ad preference controls and deletes remaining pseudonymized data within typical platform windows.
Go High Level (CRM/email): stores contact details and campaign activity to send emails you requested and operate our CRM.
See our Cookie Policy for the current list of cookies, their purposes, and lifetimes, and to update your preferences at any time.
