Privacy Notice

Who we are

Work Upgraded is a trading name of AIIA Consulting Ltd, a company registered in Bulgaria. Registered address: 45 Preslav St, Varna, Bulgaria. Company number (EIK): 205365556. VAT number: BG205365556.

AIIA Consulting Ltd is the data controller for personal data collected through this website. For anything in this notice, contact us at hello@workupgraded.com.

What we collect and why

If you submit the inquiry form, we collect what you enter: name, work email address, company, and what you want to discuss. We use this to respond to you, assess fit, and prepare for a conversation. The legal basis is our legitimate interest in responding to business inquiries and, where applicable, taking steps at your request before entering into a contract.

You do not have to submit an inquiry. If you choose to contact us, the fields marked as required are necessary for us to understand and respond to your inquiry; without them we cannot respond.

If you book a conversation, the booking page opens in a new tab and is provided through Google Calendar under our Google Workspace account. Google processes the booking details (name, email, chosen time, any notes) as our processor under the Google Workspace Data Processing Addendum, and we receive the booking in our calendar. Your use of Google’s booking page is also subject to Google’s own privacy policy.

If you play a video, the player loads from Cloudflare Stream only after you click play. No video content or player code is loaded before that.

When you visit the website, our hosting and security provider, Cloudflare, processes limited technical data such as IP address, request information and security events as necessary to deliver and protect the website. We process this on the basis of our legitimate interest in operating a secure website.

We also use Cloudflare Web Analytics for aggregate website statistics. It does not use cookies or local storage for analytics and does not fingerprint individual visitors.

We do not sell personal data, use advertising pixels, or run profiling.

Cookies and similar technologies

This website does not set cookies for analytics or marketing. Some services we use may set strictly necessary cookies when you interact with them:

• Cloudflare (hosting, security, and the spam check on the inquiry form) may set cookies needed to serve the site securely.
• Google Calendar, if you open the booking widget, may set cookies under Google’s terms.
• Cloudflare Stream, if you play a video, may use local storage for playback state.

Because these are necessary to deliver the service you requested, we do not show a cookie banner. We do not use advertising, marketing or personalization technologies.

Who processes data on our behalf

• Cloudflare, Inc.: website hosting, content delivery, spam protection (Turnstile), privacy-first analytics, and video delivery (Stream).
• Resend, Inc.: sends the email notification of your inquiry to us and the confirmation to you.
• Google LLC: booking data and the resulting correspondence, under our Google Workspace account.

These providers act as processors under data processing agreements. Cloudflare and Google are based in the United States and certified under the EU-US Data Privacy Framework, which the European Commission recognizes as providing adequate protection; where the Framework does not apply, transfers rely on the European Commission’s Standard Contractual Clauses. Resend is based in the United States and transfers rely on Standard Contractual Clauses. You can contact us to request further information or a copy of the applicable transfer safeguards.

How long we keep data

Inquiry details, booking details and the related correspondence are kept for as long as needed to handle the inquiry and any resulting engagement, and for no longer than 24 months after our last contact, unless a contract or legal obligation requires longer.

Technical data processed by Cloudflare to deliver and protect the website (request logs and security events) is retained according to the security and operational retention periods applicable to the Cloudflare services we use, and only for as long as necessary for those purposes. Analytics data is aggregated and contains no personal data.

Your rights

Under the GDPR you can ask us to access, correct, delete, or restrict the processing of your personal data, object to processing based on legitimate interest, and receive your data in a portable format. To exercise any of these, email hello@workupgraded.com. You also have the right to lodge a complaint with a supervisory authority; in Bulgaria that is the Commission for Personal Data Protection (CPDP).

Changes

If we change how we handle personal data, we will update this notice and the date above.