1. Who We Are
Rèboo EOOD ("we", "us", "our") is the data controller responsible for your personal data. We are registered in Bulgaria and operate the Rèboo booking platform. Contact us at privacy@reboo.bg for all data-related enquiries.
Privacy Policy
Last updated: April 2026 · GDPR Compliant
2. Data We Collect
We collect information you provide directly, including your name, email address, phone number, date of birth, and profile photo. We also collect data about your use of the Platform, including bookings made, businesses viewed, search queries, device information, and IP address. In Phase 2, we will also collect payment and financial information necessary to operate wallet and payment features.
3. How We Use Your Data
We use your data to provide and improve the Platform, process and manage your bookings, send you booking confirmations and reminders, enable communication between you and businesses, personalise your experience, prevent fraud and ensure Platform security, comply with legal obligations, and where you have consented, send you promotional communications.
4. Legal Basis for Processing
We process your data under the following legal bases: Performance of a contract (processing necessary to fulfil your bookings), Legitimate interests (improving the Platform, fraud prevention), Legal obligation (compliance with Bulgarian and EU law), and Consent (marketing communications, optional features).
5. Data Sharing
We share your data with businesses when you make a booking (name, contact details, booking information), payment processors (Phase 2, as necessary for transactions), cloud infrastructure providers who process data on our behalf under strict data processing agreements, and law enforcement or regulators when required by law. We never sell your personal data to third parties.
6. Data Retention
We retain your account data for as long as your account is active. Booking records are retained for 5 years for legal and tax compliance. Audit logs are retained for 5 years minimum. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.
7. Your Rights
Under GDPR, you have the right to access your personal data, correct inaccurate data, request deletion of your data, object to or restrict processing, data portability, and withdraw consent at any time. To exercise any of these rights, contact us at privacy@reboo.bg. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).
8. Cookies and Tracking
We use essential cookies necessary for the Platform to function. On our web platform, we also use analytics cookies to understand usage patterns, which you may decline. We do not use advertising or tracking cookies from third-party advertisers.
9. International Transfers
Your data is stored on servers within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Security
We implement industry-standard security measures including encryption in transit (HTTPS), encrypted storage, row-level security on our database, regular security audits, and access controls. No system is completely secure; if you become aware of a security issue, please contact security@reboo.bg immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The date of the latest revision is shown at the top of this policy.