Last updated: 15 July 2026
This policy explains how MBY Events handles personal data submitted through this website.
Who controls your data
MBY Events is the controller for data submitted through this website. You can contact us using the details shown on this site for any privacy request.
What we collect and why
When you send an event request, we collect the fields you choose to provide, including contact details, company, event timing, participant estimates and your message. We use this information only to respond, prepare a proposal and manage the resulting business relationship.
Our legal basis is your consent and, when you ask for a proposal, taking steps at your request before entering a contract. We do not use inquiry data for unrelated marketing without separate permission.
Processors, transfers and retention
Form submissions may be processed by our hosting, security, rate-limiting, email delivery and automation providers. Depending on configuration, these may include Vercel, Cloudflare Turnstile, Upstash, Resend, Zapier and Google Sheets. Turnstile receives technical request data to prevent abuse, while Upstash stores a pseudonymous HMAC-hashed rate-limit identifier for the active ten-minute window. Appropriate contractual safeguards should be confirmed before launch.
We keep unsuccessful inquiries for up to 12 months unless a longer period is required to establish or defend legal claims. Client records follow contractual, accounting and legal obligations.
Your rights
You may request access, correction, deletion, restriction, portability or object to processing, and you may withdraw consent at any time. You may also complain to Bulgaria’s Commission for Personal Data Protection at cpdp.bg.