Privacy Policy

Last updated: July 2, 2026 - GDPR and Bulgarian data protection notice

1. Who We Are

Rèboo EOOD ("we", "us", "our") is the data controller responsible for your personal data. We are registered in Bulgaria and operate the Rèboo booking platform. Contact us at privacy@reboo.bg for all data-related enquiries.

2. Data We Collect

We collect information you provide directly, including your name, email address, phone number, account details, support messages, and booking information. We also collect data about your use of the Platform, including businesses viewed, search queries, device information, and IP address. If paid booking features are enabled, payment data is handled by payment processors where necessary for transactions.

3. How We Use Your Data

We use your data to provide and improve the Platform, process and manage your bookings, send booking confirmations and reminders, enable communication between you and businesses, personalise your experience, prevent fraud and ensure Platform security, comply with legal obligations, and, where you have consented, send promotional communications.

4. Legal Basis for Processing

We process your data under the following legal bases: performance of a contract, legitimate interests, legal obligation, and consent for optional features or marketing communications.

5. Data Sharing

We share your data with businesses when you make a booking (name, contact details, booking information), payment processors where necessary for transactions, cloud infrastructure providers who process data on our behalf under data processing agreements, and law enforcement or regulators when required by law. We never sell your personal data to third parties.

6. Data Retention

We retain account data while your account is active. Booking records may be retained for legal, tax, audit, and dispute-resolution purposes. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.

7. Your Rights

Under GDPR, you have the right to access your personal data, correct inaccurate data, request deletion of your data, object to or restrict processing, data portability, and withdraw consent at any time. To exercise these rights, contact privacy@reboo.bg. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

8. Cookies and Tracking

We use essential cookies necessary for the Platform to function. Where analytics cookies or similar technologies are used, they are intended to help us understand usage patterns and improve the product.

9. International Transfers

Where data is transferred outside the European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses or equivalent protections required by applicable law.

10. Security

We use security measures such as HTTPS, access controls, database protections, and operational monitoring. No system is completely secure; if you become aware of a security issue, please contact security@reboo.bg immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will show the latest revision date on this page and may notify you of significant changes through email or in-app notification where appropriate.