Privacy Policy.

01Who we are

Nimblesoft is the trade name of Nimble Soft OOD, a company registered in Bulgaria under UIC 206342094 and based in Plovdiv. We decide how the personal data described here is used, so we are its controller under the GDPR.

For anything about your data, write to contact@nimblesoft.co.

02What we collect and why

We collect three kinds of data, each for one purpose.

• When you write to us or send a project brief: your name, email, phone, company, website and what you tell us about the project. We use it to answer you and to prepare a proposal. The legal basis is the steps you ask for before a contract (GDPR Art. 6(1)(b)).
• When you agree to analytics or advertising cookies: how you use the site, through Google Analytics, Google Ads and the Meta pixel. We use it to see what works and to measure our ads. The legal basis is your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Every visit: technical data such as your IP address and browser, processed by Cloudflare to deliver and protect the site. The legal basis is our legitimate interest in a safe, working site (Art. 6(1)(f)).

03The forms on this site

When you send the Start a project or the Nimble Audit form, what you wrote is saved in our own database at Cloudflare, sent to us by email and kept as a contact in our email tool (Brevo), so we can answer you and keep track of the conversation. We do not send you newsletters from it.

If you agreed to analytics cookies, the form also carries the pages you read on this site before it, how long you stayed on each, how you first arrived (for example a search engine or an ad) and your Google Analytics ID. This is kept only in your own browser until you send a form. Without that consent, the form carries only the page it was sent from and the address you came from.

We keep a request for as long as we work with you, or up to two years if we never do, and delete it sooner if you ask.

04Who helps us

We use a few trusted providers. Each one only gets what it needs for its job.

• Cloudflare: hosting, security and the consent tool (Zaraz).
• Google: Analytics and Ads, only with your consent.
• Meta: the pixel and the Conversions API, only with your consent.
• Brevo: sends the forms to us by email and keeps your contact details.
• Proton: our email, where your messages arrive.

05Data outside the EU

Some providers process data in the United States. They do it under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

06How long we keep it

We keep your messages and briefs while we talk and for as long as a contract with you needs them, then we delete them.

Analytics and advertising data is kept for the period set in each tool, and you can stop it at any time from the cookie settings.

07Your rights

You can ask us to show you your data, correct it, delete it, limit how we use it or give it to you in a usable file. You can object to its use and withdraw your consent at any time.

Write to contact@nimblesoft.co. You can also complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

08Changes to this policy

When we change this policy, we update the date at the top of this page.