Privacy Policy

When you work with Glowly Energex, we collect information that helps us provide better financial analysis services. Here's what we gather and why:

We don't collect sensitive personal information unless absolutely necessary for our financial analysis services. When we do need additional data, we'll always explain why and ask for your explicit consent.

Your information serves specific purposes that directly benefit your experience with our services. We've organized these uses into clear categories:

• Delivering customized financial analysis reports tailored to your business needs
• Communicating project updates, findings, and recommendations
• Maintaining accurate records of our work together for future reference
• Improving our analytical methods based on aggregated, anonymized data
• Ensuring website security and preventing unauthorized access
• Complying with Bulgarian financial service regulations and legal requirements
• Processing invoices and maintaining business relationship records

We operate under strict professional standards. Every team member who handles your information has signed confidentiality agreements and receives regular training on data protection practices.

When we use your data for service improvements, it's always in anonymized form where individual businesses cannot be identified. This helps us develop better analytical tools while protecting your competitive information.

We maintain strict limits on information sharing. Here are the only circumstances where we might share your data:

We never share your business information for marketing purposes or sell contact lists. Your competitive data and financial information remain strictly confidential within our organization.

Under Bulgarian and EU data protection laws, you have significant control over your personal information. Here's what you can do:

To exercise any of these rights, contact us using the information below. We'll respond within one month and won't charge fees unless requests are clearly unfounded or excessive.

You also have the right to lodge a complaint with Bulgaria's Commission for Personal Data Protection if you believe we've mishandled your information.

We take data security seriously because your business information deserves the highest protection. Our security measures include:

• End-to-end encryption for all data transmission and storage systems
• Regular security audits and penetration testing by certified professionals
• Multi-factor authentication requirements for all team access
• Automated backup systems with encrypted off-site storage
• Employee training programs on data protection and security protocols
• Restricted access controls ensuring only necessary personnel handle your data
• Regular software updates and security patches across all systems

Despite our best efforts, no online service can guarantee 100% security. If we ever experience a data breach that affects your information, we'll notify you within 72 hours and explain exactly what happened, what information was involved, and what steps we're taking.

We maintain cyber liability insurance and work with leading security firms to stay ahead of emerging threats. Your trust in us drives our commitment to maintaining the highest security standards.

We keep your information only as long as necessary to provide our services and meet legal obligations. Here's our retention schedule:

When retention periods expire, we securely delete your information using industry-standard data destruction methods. For electronic records, this means cryptographic erasure and multiple overwrites. Physical documents are shredded and disposed of through certified destruction services.

You can request early deletion of your information, though we may need to retain certain records to comply with legal obligations or complete ongoing work you've contracted us to perform.

Our website uses cookies and similar technologies to improve your experience and understand how our services are used. We believe in transparency about what these technologies do:

We don't use advertising cookies or share tracking data with marketing companies. Our analytics focus on improving our services rather than building advertising profiles.

You can control cookies through your browser settings, though disabling certain cookies might affect website functionality. Most browsers also offer "Do Not Track" options, which we respect.

While we primarily operate within Bulgaria and the European Union, some situations may require international data transfers. Here's how we handle this:

• We prioritize EU-based service providers and data storage to minimize international transfers
• When transfers are necessary, we use providers with adequate data protection certifications
• All international transfers are protected by Standard Contractual Clauses approved by the European Commission
• We conduct regular assessments of third-country data protection standards
• You'll be notified if your data needs to be transferred outside the EU for service delivery

Currently, most of our data processing occurs within EU borders. The few exceptions involve specialized financial software providers who meet strict security standards and have appropriate data protection agreements.

If data protection laws change or we need to use new international services, we'll update this policy and notify affected clients before making any transfers.

Glowly Energex provides business financial analysis services intended for adults and business entities. We don't knowingly collect personal information from children under 16 years of age.

If we discover that we've collected information from a child under 16, we'll delete it immediately and terminate any associated accounts. Parents or guardians who believe we might have collected their child's information should contact us right away.

Our website and services aren't designed to appeal to children, and our content focuses exclusively on business financial topics appropriate for professional audiences.

We review and update this privacy policy annually or when significant changes occur in our services or legal requirements. Here's how we handle updates:

• Major changes will be communicated directly via email to all active clients
• We'll post notices on our website for 30 days before significant changes take effect
• Updated policies include clear explanations of what changed and why
• You'll have time to review changes and exercise your rights before new policies take effect
• Previous policy versions remain available upon request for reference

We understand that privacy policies can be complex. If you have questions about any changes, we're happy to explain them in plain language during a brief call or email exchange.