Privacy Policy
Last Updated: January 15, 2025
At IntelliCognit, we handle your personal and financial data with the seriousness it deserves. This isn't about checking boxes—it's about building the kind of trust that real business relationships need.
We're financial workflow specialists working with businesses across Bulgaria and beyond. That means we see sensitive information every day. This policy explains exactly how we collect, use, store, and protect your data according to Bulgarian law and EU regulations (specifically GDPR and Bulgaria's Personal Data Protection Act).
If legal language makes your eyes glaze over, we get it. We've tried to explain things in plain terms while still covering what matters.
Who We Are and How to Reach Us
IntelliCognit is registered and operating in Bulgaria. Our contact details:
Business Address: Величково, бул. Памидовско шосе, Bulgaria
Phone: +35933122742
Email: contact@intellicognit.com
For privacy-specific questions, the same email works. We aim to respond within three business days, though complex requests might take longer.
What Information We Collect
Here's what we gather and why we need it. Nothing here is collected just for the sake of it—each piece serves a specific purpose in delivering financial services.
Direct Information You Provide
When you work with us, you share information through forms, emails, meetings, and phone calls. This typically includes:
- Your name, job title, and company details
- Contact information—email addresses, phone numbers, business addresses
- Financial data relevant to the services we're providing
- Payment and billing information
- Business registration numbers and tax identification details
- Communication preferences and service requirements
Information We Collect Automatically
Our website gathers some technical data when you visit. Standard stuff, but worth mentioning:
- IP address and general location data
- Browser type and device information
- Pages visited and time spent on the site
- Referring websites and navigation patterns
This helps us keep the site running smoothly and understand how people actually use it.
Information from Third Parties
Sometimes we receive data from external sources like credit reference agencies, business registries, or other service providers when necessary for due diligence or service delivery. We only request what's relevant to your specific situation.
How We Use Your Information
Every piece of data we collect has a job to do. Here's the breakdown:
| Purpose | Legal Basis | What This Means |
|---|---|---|
| Service Delivery | Contract Performance | We need your data to actually do the work you're hiring us for—financial analysis, workflow optimization, reporting |
| Client Communication | Contract Performance & Legitimate Interest | Keeping you updated on projects, answering questions, sending necessary documentation |
| Compliance & Legal | Legal Obligation | Meeting Bulgarian and EU regulatory requirements for financial services—anti-money laundering checks, tax compliance, record keeping |
| Service Improvement | Legitimate Interest | Analyzing how our services perform so we can make them better |
| Security & Fraud Prevention | Legitimate Interest & Legal Obligation | Protecting your data and our systems from unauthorized access or misuse |
We don't use your information for automated decision-making that would significantly affect you. Real people review your data and make judgment calls where needed.
Who We Share Your Data With
We're selective about who sees your information. Here's the complete list:
Service Providers
Some specialized providers help us deliver services—cloud hosting, email systems, accounting software. They only get access to what they need to do their specific job, and they're bound by strict confidentiality agreements.
Legal and Regulatory Authorities
When Bulgarian or EU law requires it, we'll share information with tax authorities, financial regulators, or law enforcement. This isn't optional—it's part of operating a legitimate financial services business.
Professional Advisors
Occasionally we need input from lawyers, accountants, or other professional advisors. They're bound by their own professional confidentiality obligations.
Business Transfers
If IntelliCognit is acquired or merged with another company, your data would transfer to the new entity. We'd notify you beforehand if this happens.
What we absolutely don't do: We don't sell your data to third parties. We don't share it with marketers. We don't use it for purposes unrelated to the services you've engaged us for.
International Data Transfers
Most of your data stays within Bulgaria and the EU. However, some of our service providers (particularly cloud infrastructure and software tools) operate servers in other countries.
When we transfer data outside the EU, we make sure there are proper safeguards in place—either the receiving country has adequate data protection laws recognized by the EU, or we use standard contractual clauses approved by the European Commission.
You can request details about specific transfers if you need them for your own compliance purposes.
How We Protect Your Information
Financial data needs serious protection. Here's what we do:
- End-to-end encryption for data transmission
- Encrypted storage for sensitive information at rest
- Access controls—only authorized team members see your data, and only what they need
- Regular security audits and vulnerability assessments
- Secure backup systems with encryption
- Employee training on data protection and confidentiality
- Multi-factor authentication for system access
- Network security monitoring and intrusion detection
No system is completely immune to breaches, but we take every reasonable precaution. If we ever experience a data breach that affects you, we'll notify you within 72 hours as required by Bulgarian law.
How Long We Keep Your Data
We don't keep information longer than necessary, but "necessary" depends on several factors:
Active Client Data
While we're working together, we keep everything needed to deliver services and maintain our relationship.
After Service Completion
Bulgarian law requires us to retain financial records for at least five years after the end of the fiscal year they relate to. Some documents need to be kept even longer depending on the type of work we've done.
Marketing Communications
If you've opted into receiving updates from us, we'll keep your contact details until you unsubscribe. Each email includes a simple unsubscribe link.
Website Analytics
Technical data from website visits is typically retained for 14 months, then anonymized or deleted.
Once the retention period expires and there's no legal reason to keep data, we securely delete or anonymize it.
Your Rights Under Bulgarian and EU Law
GDPR and Bulgarian law give you substantial control over your personal data. Here's what you can do and how to actually exercise these rights:
Access Your Information
You can request a copy of all personal data we hold about you. We'll provide it in a commonly used electronic format within 30 days. There's no charge for your first request in a 12-month period.
Correct Inaccurate Data
If something we have on file is wrong or outdated, let us know and we'll fix it. This is especially important for financial services where accuracy matters.
Request Deletion
You can ask us to delete your data, though there are limitations—we can't delete information we're legally required to keep, or data necessary to defend legal claims. We'll explain if we can't fulfill a deletion request and why.
Restrict Processing
In some situations, you can ask us to limit how we use your data while keeping it on file. For example, if you're disputing the accuracy of information.
Data Portability
For data you've directly provided to us, you can request it in a structured, machine-readable format to transfer to another service provider.
Object to Processing
You can object to processing based on legitimate interests or for direct marketing purposes. We'll stop unless we have compelling legitimate grounds that override your interests.
Withdraw Consent
Where we're processing data based on your consent (rather than legal obligation or contract performance), you can withdraw that consent anytime.
To exercise any of these rights: Send an email to contact@intellicognit.com with your request. We may need to verify your identity before proceeding—this protects your data from unauthorized access.
We'll respond within 30 days. If your request is particularly complex, we might need an additional 60 days, but we'll let you know within the first month if that's the case.
Cookies and Website Technology
Our website uses cookies—small text files stored on your device. Most are essential for the site to work properly (session management, security), while others help us understand site usage.
You can control cookies through your browser settings. Blocking all cookies might affect site functionality, but you'll still be able to access most content.
We don't use advertising cookies or share cookie data with advertising networks. Our tracking is minimal and focused on site improvement.
Changes to This Policy
We review this policy annually and update it when our practices change or when required by law. The "Last Updated" date at the top tells you when we last made changes.
Significant changes will be communicated directly to active clients via email. For everyone else, the updated version will be posted here with a notice on our homepage for 30 days.
Continuing to use our services after policy changes means you accept the updated terms. If you disagree with changes, contact us to discuss your concerns or discontinue using our services.
Filing Complaints
If you're unhappy with how we've handled your data, please contact us first so we can try to resolve the issue. We take complaints seriously and will investigate thoroughly.
You also have the right to file a complaint with Bulgaria's Commission for Personal Data Protection (CPDP):
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: cpdp.bg
The CPDP is Bulgaria's supervisory authority for data protection matters and can investigate complaints about how organizations handle personal data.
Questions or Concerns?
Privacy policies can be dense. If something here is unclear or you have questions about how we handle your specific situation, just ask.