Draft. This policy is being reviewed by a lawyer and may change before launch.

Privacy policy

Last updated: [date]

Who we are

The data controller is [Company name] OOD, UIC [number], registered at [address], Bulgaria ("diagnow.ai", "we"). Contact: hello@diagnow.ai.

What we collect on this website

• Contact form details: name, email, who you are writing as, organisation and message.
• Whether you asked to receive updates.
• Technical data needed to prevent abuse (IP address and browser signals used by the security check).

We do not use analytics or advertising cookies. Please do not send health information through the form.

Why, and on what legal basis

• To answer your message: your consent and steps taken at your request (GDPR Art. 6(1)(a) and (b)).
• To send you updates: only with your explicit consent, confirmed by email (Art. 6(1)(a)).
• To protect the website from spam and abuse: legitimate interest (Art. 6(1)(f)).

Who we share data with

• Cloudflare, Inc.: website hosting and security check (Turnstile).
• Intuit Inc. (Mailchimp), USA: storing contacts and sending updates. Transfers to the USA use the safeguards required by the GDPR [to confirm: Standard Contractual Clauses and/or the EU–US Data Privacy Framework].

We do not sell personal data or use it for advertising.

How long we keep data

We keep contact form messages for up to [24 months] after our last contact with you. Newsletter data is kept until you unsubscribe.

Your rights

You have the right to access, correct, delete, restrict and port your data, to object, and to withdraw your consent at any time. Write to hello@diagnow.ai. You can complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).