www.utilink.xyz

Effective date: [ 01 January 2026]

Utilink respects your privacy and is committed to protecting your personal data. This Privacy Policy tells you how we look after your personal data when you visit our website, what your privacy rights are and how the law protects you. We keep it under regular review.

This Privacy Policy applies to utilink.xyz (the “Site”). The Site is operated by Utilink Ltd. („Ютилинк“ ООД), a company registered in Bulgaria under UIC 208120263 (VAT no. BG208120263), with its registered office at Manastirski Livadi – Iztok, bl. 20B. Utilink Ltd. is the controller of the personal data described here under the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.

It does not cover the Utilink platform at app.utilink.xyz, our services site utilinkstudio.com, or work we carry out under a client agreement. Each of these has its own terms and privacy information.

Privacy Notice

Utilink uses cookies on the Site. A cookie is a small file that a website stores in your browser so it can remember information between visits. Some cookies are essential for the Site to work, such as the one that remembers your cookie choices and the one Google reCAPTCHA uses to protect our contact form from spam. Our legal basis for these is our legitimate interest in running a secure, working website.

We also use Google Analytics 4 to understand how visitors use the Site, so we can better align our content with your needs and make sure the Site performs well. Analytics cookies are only set if you accept them in the cookie banner, and our legal basis for this processing is your consent. You can change your choice at any time through the cookie settings on the Site.

If you accept analytics cookies, the following information is collected as you navigate the Site:

• Your approximate location (country and city), derived from your IP address
• The date and time you accessed the Site
• Your device type, operating system and browser
• Your language preferences
• The URLs of the pages you visit
• The URL of the referring site
• A random identifier that recognises your browser on return visits

Our web server also keeps short-term technical logs, including your IP address, the time of each request and any errors, to keep the Site running and protected from abuse. Our legal basis for this is our legitimate interest in operating a secure website, and these logs are kept for up to [90 days] unless they are needed to investigate an incident.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences. We do not use your data for automated decision-making that has legal or similarly significant effects on you.

If you fill in the contact form on the Site, we collect your first and last name, email address, subject, whether you would like to book a demo, and your message. We use this information to reply to you, arrange a demo or call, and follow up on your enquiry. Our legal basis is taking steps you have asked for before a possible contract, together with our legitimate interest in answering business enquiries. We will not add you to marketing communications unless you ask us to.

To check that form submissions come from real people, the contact form uses Google reCAPTCHA, which processes your IP address, browser and device details and how you interact with the page. Google’s use of this data is also covered by Google’s Privacy Policy.

Messages sent through the contact form are stored on our own website and delivered to our team’s inbox. We may share personal data internally with Utilink staff, and with approved suppliers who help us run the Site and act on our instructions: our website host ([hosting provider]), our email provider ([email provider]) and Google Ireland Limited for Google Analytics and reCAPTCHA. We may also share data with professional advisers such as lawyers and accountants, with public authorities where the law requires it, or with a buyer or successor if Utilink is reorganised, merged or sold.

Some of our suppliers may process data outside the European Economic Area. When they do, we rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework, where the supplier is certified) or on the Commission’s Standard Contractual Clauses.

Contact and demo requests are kept for up to 24 months after our last exchange, unless they lead to a working relationship. Analytics data is kept for no longer than [14 months], as set in Google Analytics. Records linked to contracts or invoices are kept for as long as Bulgarian accounting and tax law requires. After that, we delete the data or make it anonymous.

Links To Other Websites

The Site contains links to other websites, our LinkedIn, YouTube and Spotify pages. Once you have used these links to leave the Site, you should note that we do not have any control over those websites.

Therefore, we cannot be responsible for the protection and privacy of any information you provide while visiting them, and it is not governed by this Privacy Policy. You should look at the privacy statement that applies to the website in question.

Controlling Your Personal Information

Under the GDPR, you can ask us at any time to:

• give you a copy of the personal information we hold about you
• correct information that is inaccurate or incomplete
• delete your information, where we have no reason to keep it
• restrict how we use it while a question is being resolved
• send your information to you or another organisation in a portable format
• stop using it where we rely on legitimate interests, and always for direct marketing

Where we rely on your consent, you can withdraw it at any time, for example by changing your cookie settings. This does not affect anything we did before you withdrew it.

We will not sell, distribute or lease your personal information to third parties unless we have your explicit permission or are required by law to do so.

To make a request, please email business@utilink.xyz . There is no fee. We will reply within one month, or tell you if a complex request needs longer, and we may ask you to confirm your identity first.

The Site is intended for businesses and professionals. It is not aimed at anyone under 16, and we do not knowingly collect their data.

Security

Utilink takes the security of your personal information seriously. We take sensible precautions to keep the information we collect secure and inaccessible to anyone who should not see it.

Access Control

We use internal access controls so that only a limited number of people, who need it for their work, have access to your information.

Modern Protection

The Site uses HTTPS encryption throughout, and we choose suppliers with recognised security standards. If a personal data breach occurs, we will notify you and the supervisory authority where the law requires us to.

Changes To This Policy

We will update this Privacy Policy when our tools or practices change. The effective date at the top always shows the current version, and we will flag significant changes on the Site.

Contact Us

If you have any questions or concerns about how we collect data, please contact us: business@utilink.xyz

You have the right to make a complaint at any time to the Commission for Personal Data Protection (CPDP), the Bulgarian supervisory authority for data protection issues (2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, www.cpdp.bg), or to the authority in the country where you live. We would, however, appreciate the chance to deal with your concerns before you approach the CPDP, so please contact us in the first instance.