Clarity. Transparency. Trust.
Privacy Policy
Clear information about the personal data connected to this website and the conversations we have with you.
Last updated
Company identification is awaiting confirmation. Registered name, registration number, and the full address will be added before these notices are finalized.
01
Who is responsible for your data
Raketa Labs is the business name used by our Bulgaria-based software design and development company. For website administration and our own business correspondence, the company operating Raketa Labs determines how personal data is used and acts as controller.
Contact us about privacy at tech@raketalabs.com. Our company identification details are maintained in the Legal Notice. The registered legal name, company registration number, and registered address are awaiting confirmation; this notice remains incomplete until those details are added.
This notice concerns raketalabs.com and inquiries made to Raketa Labs. MeetBridge and UserTourly have their own product notices and terms. Where we handle personal data on a client’s instructions, the relevant project agreement and data processing agreement govern that processing.
02
The information involved
When you send an email or call us, we receive the details you choose to provide, such as your name, contact details, company where relevant, project description, and correspondence. This applies to business and individual clients. Avoid including special-category personal data or confidential third-party data in an initial inquiry.
Business contact details may also be supplied by a colleague or client organization for a project discussion. We use them for that correspondence and provide the information required for data obtained from another source.
When you submit a project inquiry through the website, our server receives your name, email address and project message. After security verification, the inquiry is stored in our self-hosted Supabase database with a submission reference, time, relevant service, source page path and internal handling status. The source path does not include URL query parameters. Sending a form does not subscribe you to marketing.
The Turkish education page provides course information to parents and legal representatives. Its inquiry form receives the adult’s name and email, the student’s age (9–15), a parent/legal-representative declaration, and any optional question. We use these details to answer the adult’s course and registration inquiry and store them with the same inquiry reference and security controls. We do not request the child’s name, date of birth or contact details in this initial form, and submitting it does not subscribe either person to marketing.
Serving the website and its images involves technical data such as IP addresses, requested URLs, browser information, and request timestamps. Hosting and content-delivery providers may handle technical request and security logs. Essential browser storage is described in the Cookie Policy.
Optional analytics is disabled in the current website configuration. No Google/Firebase Analytics collection is initialized by this application while it is disabled. If analytics is introduced, this notice and the cookie information must first be updated for the actual setup, and collection must wait for your permission.
03
Form security and Cloudflare Turnstile
Our inquiry forms use Cloudflare Turnstile in invisible mode to help prevent automated abuse. Verification runs when you attempt to submit a form. Cloudflare processes technical browser and connection signals to provide this check; its processing is explained in the Turnstile Privacy Addendum linked below.
Our server validates the short-lived verification token with Cloudflare before storing an inquiry. Your name, email and project message are not included in that server-side verification request, and the token is not saved with the inquiry. We do not enable Turnstile pre-clearance.
A short-lived, keyed hash of the submitted email address is used in server memory to limit repeated submissions over a ten-minute window. This is a security measure, not a marketing profile. Our inquiry record does not include an IP address.
04
Why we use data and the legal basis
| Purpose | Information involved | Legal basis |
|---|---|---|
| Respond to an inquiry and prepare a requested proposal | Contact details and project correspondence | Article 6(1)(b) GDPR where you are the prospective contracting party; Article 6(1)(f) for correspondence with business representatives. |
| Manage a project or client relationship | Client contact details, agreed project records, and communications | Article 6(1)(b) for a contract with you; Article 6(1)(f) for coordinating work with a client organization. |
| Deliver and protect the website | Technical request data and security records | Article 6(1)(f): our interest in a functioning website, investigating misuse, and protecting systems. |
| Meet applicable accounting, tax, and legal duties | Relevant contractual and financial records | Article 6(1)(c), where the obligation applies. |
| Remember your privacy choice | A versioned preference record in your browser | Article 6(1)(f): our interest in remembering and respecting your requested privacy choice. The record contains no marketing identifier. |
For legitimate-interest processing, the interests identified above must be balanced against your rights. You may object to that processing. We do not use this website to make solely automated decisions with legal or similarly significant effects on you.
06
Processing outside the EEA
The business is based in Bulgaria. Infrastructure and communication providers may operate in other countries. Processing outside the European Economic Area requires an applicable GDPR transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, together with any necessary assessment and supplementary measures.
You can request information about relevant recipients and copies or details of transfer safeguards at tech@raketalabs.com. Provider-specific transfer information is awaiting confirmation before this notice is finalized.
07
How retention is determined
Retention decisions consider the purpose, whether the record is still needed, applicable statutory periods, and any active dispute or legal hold.
- Inquiry correspondence: for handling the request and any resulting business discussion, then only where continued retention is needed for a documented legal or business purpose.
- Project and contract records: for performing the engagement and any applicable statutory recordkeeping or legal-claim period. Client-controlled project data follows the agreed instructions and deletion or return arrangements.
- Financial records: for the retention period required by applicable Bulgarian accounting and tax rules.
- Technical records: according to the confirmed provider configuration and the need to investigate security incidents. These settings must be verified before this notice is finalized.
- Privacy preference cookie: up to 180 days; you can change the choice earlier. Browser appearance preferences remain until changed or cleared.
08
Your data protection rights
Subject to the applicable GDPR conditions, you may request access, correction, deletion, restriction, or portability, and may object to processing based on legitimate interests. Consent can be withdrawn without affecting earlier lawful processing.
Send requests to tech@raketalabs.com. We may need proportionate information to verify identity. The normal response period is one month; where the GDPR permits an extension, we explain it within the initial period.
You may complain to the Bulgarian Commission for Personal Data Protection (CPDP), or the supervisory authority in your place of habitual residence, work, or the alleged infringement. Contacting us first is not a condition of that right.
09
Security and careful handling
Personal data must be protected with technical and organizational measures appropriate to the processing and its risks. These include limiting access to the relevant work, handling project data under agreed instructions, and addressing security incidents under applicable legal duties.
An initial project inquiry should not contain passwords, payment card details, or unnecessary sensitive personal data. No website or communication method can promise absolute security.
10
Your choices and supplying information
You can browse without sending an inquiry. Giving contact information is voluntary, but without a reply address we cannot respond. Specific information may be necessary if you later choose to enter a contract; we will identify it in that context.
The corporate website and Turkish course inquiry form are addressed to adults, including parents and legal representatives. Children should not submit personal data through these contact forms. If you believe a child has done so, let us know so that the circumstances can be reviewed. Any later student enrolment, learning tools or course recordings require their own appropriate notices and arrangements.
Privacy settings remain available through the Cookie settings link in the footer. An essential preference record does not authorize optional analytics or marketing.
11
Updates and contact
The date above identifies the latest revision of this notice. Material changes to the processing described here require updated information, and a new consent where the law requires it. Browsing after an update is not treated as consent to new processing.
For questions about this notice or our handling of an inquiry, contact tech@raketalabs.com or +359 87 946 6396.
Legal framework
Official references
These sources explain the relevant legal framework. The business-specific information and practices described above still need to match the actual company and service configuration.
General Data Protection Regulation (EU) 2016/679Bulgarian Personal Data Protection Act — CPDPA direct conversation
Need to clarify something?
Contact us about this notice or a particular project.