Last updated: 15-09-2026
1. Who we are
BraveAssist is a trading name of Helio Management OOD, a company registered in Bulgaria.
Str. Sofroniy Vrachanski No 8, 8-A, Fl. 2 District Odessos 9000 Varna Bulgaria VAT: BG207910062
For any question about this policy or your personal data, contact info@braveassist.com.
Helio Management OOD is the data controller for the personal data described in this policy.
2. What this policy covers
This policy explains how we handle personal data collected through braveassist.com — when you contact us, request our cost brochure, book a meeting, or apply for a role with us.
It does not cover personal data that our specialists process on behalf of a client while working in that client’s systems. In those cases the client is the data controller and we act as a processor under a separate data processing agreement.
3. What personal data we collect
When you contact us or request our cost brochure Your name, email address, company name, and anything you choose to write in your message.
When you book a meeting Your name, email address, and the details you provide when scheduling. The booking is handled through our scheduling provider.
When you apply for a role Your name, contact details, CV and any information you include in your application.
When you visit the site Standard technical data collected automatically: IP address, browser and device type, pages viewed, referring page, and the date and time of your visit. Our hosting provider also keeps server logs containing this information for security and diagnostic purposes.
Cookies and analytics We use cookies and similar technologies. Non-essential cookies, including analytics, are only set if you consent through our cookie banner. See section 9.
We do not collect special category data (such as health, religion, or biometric data), and we ask that you do not send it to us.
4. Why we use your data, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Respond to your enquiry or send the cost brochure | To answer you and provide what you asked for | Legitimate interest — responding to a request you made |
| Send you marketing emails about our services | To tell you about what we offer | Consent — you opt in, and can withdraw at any time |
| Arrange and hold meetings | To schedule and prepare for a call you requested | Legitimate interest / steps prior to a contract |
| Assess job applications | To consider you for a role | Steps prior to a contract, at your request |
| Analytics and site improvement | To understand how the site is used | Consent, given through the cookie banner |
| Site security and server logs | To keep the site available and secure | Legitimate interest — protecting our systems |
| Keep accounting and contract records | To meet legal obligations | Legal obligation |
You are never required to give us personal data. If you don’t give us your email address we can’t send you the brochure or reply to an enquiry, but nothing else follows from that.
5. Who we share your data with
We do not sell your data and we do not share it for other organizations’ marketing.
We do use service providers who process data on our behalf, under contract and only on our instructions:
- Hosting and website infrastructure — our hosting provider stores the website and its server logs
- Analytics — Google (Google Analytics and Google Search Console) where you have consented to analytics cookies
- Email — our email provider, used to receive and send correspondence
- Scheduling — our meeting booking provider
- Cookie consent management — our consent management provider
- Payment processing — where a client purchases a service, payment is handled by a payment provider; we do not store full card details
We may also disclose personal data where we are legally required to do so, or to establish or defend legal claims.
6. International transfers
Some of our service providers are based outside the European Economic Area, including in the United States. Google, which provides our analytics, processes data in the United States.
Our own team includes specialists based in the Philippines, which is not covered by an EU adequacy decision. Where personal data is accessible to them, we rely on the European Commission’s Standard Contractual Clauses together with supplementary measures.
Where a transfer outside the EEA takes place, we rely on one of the safeguards permitted under Chapter V of the GDPR — an adequacy decision, or Standard Contractual Clauses. You can ask us for details of the safeguard applying to a specific transfer by emailing info@braveassist.com.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Enquiries and brochure requests | 24 months from our last contact with you |
| Marketing contacts | Until you unsubscribe, then 30 days |
| Meeting bookings | 24 months |
| Job applications (unsuccessful) | 6 months, unless you agree to us keeping it longer |
| Client contracts and accounting records | 7 years, as required by Bulgarian law |
| Server logs | As retained by our hosting provider for security purposes |
| Analytics data | As configured in Google Analytics, currently [CONFIRM — set to maximum 14 months] |
When a retention period ends, we delete the data or anonymize it.
8. Your rights
Under the GDPR you have the right to:
- Access — get a copy of the personal data we hold about you
- Rectification — have inaccurate data corrected
- Erasure — have your data deleted, where there is no overriding reason to keep it
- Restriction — ask us to limit how we use your data
- Portability — receive your data in a portable format, where it was provided by you and processed by consent or contract
- Object — object to processing based on legitimate interests, and object to direct marketing at any time
- Withdraw consent — where we rely on consent, you can withdraw it at any time, without affecting processing that already took place
To exercise any of these, email info@braveassist.com. We will respond within one month. We may ask you to confirm your identity first.
You can unsubscribe from marketing emails at any time using the link in any email we send.
9. Cookies
We use:
- Essential cookies, needed for the site to function. These are always set.
- Analytics cookies, which help us understand how the site is used. These are only set with your consent.
You can accept or reject non-essential cookies through the banner when you first visit, and change your choice at any time through the cookie settings link.
10. Automated decision-making
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
11. Complaints
If you think we have handled your personal data improperly, please contact us first at info@braveassist.com so we can try to resolve it.
You also have the right to complain to a data protection supervisory authority. Our lead authority is the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria — cpdp.bg. You may also complain to the supervisory authority in the EU country where you live or work.
12. Changes to this policy
We may update this policy. The date at the top shows when it was last changed. If we make a significant change, we will make that clear on the site.