Privacy policy

This policy explains how TravelMaker (“we”, “us”) collects and uses personal data when you visit travelmakerbg.com, contact us, or book our services. We are based in Sofia, Bulgaria, and we handle personal data under the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.

What we collect

• When you send the inquiry form: your name, phone or WhatsApp number, email (optional), travel dates, number of adults and children, what you are interested in, and your message.
• When you message us on WhatsApp, Facebook or by email: your name, number or address, and what you write to us.
• When you book: what we need to arrange the service, such as travellers’ names, hotel or pickup address, flight times for airport transfers, special requests (for example child seats or accessibility needs), and payment and invoicing details. We ask for passport or ID details only when a hotel or partner requires them.
• When you browse the site: our hosting provider, Cloudflare, processes technical data such as your IP address, browser type and the pages you open, to deliver the site and protect it from attacks.

We don’t use analytics, advertising or tracking tools on this site, and we don’t set cookies ourselves. Cloudflare may set strictly necessary security cookies. Our fonts are served from our own site.

Why we use it

Purpose	Legal basis (GDPR)
Answering inquiries and preparing quotes you ask for	Steps before a contract, Art. 6(1)(b)
Providing the services you book and coordinating with drivers, guides and hotels	Performance of a contract, Art. 6(1)(b)
Invoicing and keeping accounting records	Legal obligation, Art. 6(1)(c)
Keeping the site secure and handling questions or disputes	Legitimate interests, Art. 6(1)(f)

We never sell your personal data.

Who we share it with

• The partners who deliver your trip: drivers, guides, hotels and attraction operators. They get only what they need, for example a name, pickup time and place, and the number of travellers.
• Providers who work for us: Google (Google Workspace email, and Google Sheets where form inquiries are stored) and Cloudflare (website hosting and security).
• WhatsApp and Facebook (Meta): when you contact us through them, Meta processes those messages under its own privacy policy.
• Authorities, when the law requires it.

Transfers outside the EU

Google, Cloudflare and Meta may process data outside the European Economic Area, including in the United States. These transfers are covered by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

How long we keep it

• Inquiries that don’t lead to a booking: up to 24 months, then we delete them.
• Bookings: as long as needed to provide the service and handle any questions or claims.
• Invoices and accounting records: for the periods required by Bulgarian accounting and tax law.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, limit or object to how we use it, or give it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to [email protected] and we’ll reply within one month.

You can also complain to the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, www.cpdp.bg, or to the data protection authority in the EU country where you live.

Children

Our services are booked by adults. We receive information about children, such as their ages for child seats or pricing, only when a parent or guardian gives it to us as part of a family booking.

Security

We limit access to personal data to the people who need it, use providers with strong security, and serve the whole site over an encrypted (HTTPS) connection.

Other websites

Our site links to WhatsApp, Facebook and other websites. Their own privacy policies apply there.

Changes

We may update this policy. The date at the top shows when it last changed.

Contact

Questions about your data: [email protected], or WhatsApp +359 87 899 8806.