Slotify Privacy Policy

NEBIX OOD, Bulgarian company number 208129643, at 20–22 Pchinya Street, floor 3, apartment 8, Razsadnika-Konyovitsa, Krasna Polyana district, Sofia 1330, Bulgaria, operates Slotify. Contact for privacy matters: nebix.all@gmail.com.

NEBIX OOD is a controller for data needed for accounts, access, security and operation of its own platform. The business with which you book determines the purposes and conditions of its service and related customer data processing. Where we process that data on its documented instructions, we act as a processor. For questions about a particular service and its customer records, you can also contact the relevant business.

When you register and use Slotify, we may process your name, email, phone number, protected password hash, account identifier and notification preferences. For bookings we process the chosen service, location, specialist, date and time, status, contact details and notes you provide. Package records may include the package type, validity period, remaining visits, recorded payment method and document reference if entered by the business.

We also process technical data needed for access, security and diagnostics, such as IP address, request time and error details. We do not request health data for a standard booking. Please do not enter sensitive information in free-text fields unless the business has separately explained why it is needed.

We use data to create and manage accounts, bookings and packages, send related operational messages and provide the service where necessary for a contract or steps you request before entering one. We use limited technical data for security, abuse prevention and reliable operation on the basis of our legitimate interests.

Where the law requires retention or cooperation with authorities, the basis is a legal obligation. Optional promotional messages or tracking technologies would require a separate applicable basis, including consent where the law requires it. Operational booking messages are not promotional messages.

Booking data is available to the relevant business and its authorized staff only as needed to handle the booking. For technical operation we use providers for hosting and database services (Render and Neon), delivery and protection of web content (Cloudflare), and operational emails (Resend). Their access is limited to the services they provide.

Where data is transferred outside the European Economic Area, the safeguards required by law apply. You can request information about a particular transfer and its applicable mechanism at the contact email above.

Account data is kept while the account is active and afterwards only where needed to meet a legal obligation or establish, exercise or defend legal claims. Booking and package data is kept as needed to provide and account for the service, under the relevant business's instructions and applicable legal retention periods. Technical records are kept for the period needed for security and diagnostics.

For a specific retention period or a deletion request, email nebix.all@gmail.com. We will assess the request in light of our role in the processing and applicable retention duties.

You may request access, correction, erasure, restriction and portability of your data where the legal conditions are met. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Email nebix.all@gmail.com to exercise a right or ask a question. You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or another competent supervisory authority.

The public site uses a language-preference cookie for up to one year. The administration interface uses a login cookie for up to seven days. The customer web interface stores its login token in browser local storage. These support the functions you request. You can remove them through your browser settings, but this may sign you out or reset your language preference.

As of this version, the public Slotify website does not use advertising or analytics scripts. If we add optional tracking, we will provide separate information and a choice before using it where consent is required.

If this policy changes, we will publish a new version with an effective date. Previously published versions will remain available.