# Privacy Policy | Pontis > How Pontis Ltd. collects, uses and protects personal data, in accordance with the GDPR and applicable European Union data protection law. Canonical: https://pontis.company/privacy This is a plain-text rendition of the live page for AI agents and text tools. The HTML page above is the canonical, authoritative source. --- 1. [Home](/) 2. Privacy Policy Legal # Privacy Policy How Pontis Ltd. collects, uses, shares and protects personal data when you visit pontis.company or contact us — and the rights you hold over that data. Last reviewed 1 February 2026 **Pending legal review.** This document is carried over from the policy published on 1 February 2026 and is being re-verified against the current build of this site — its consent manager, its hosting and the processors actually in use. Where it describes cookies and analytics, the live position is set out in the [cookie policy](/cookies); on this site no non-essential cookie loads before you opt in. On this page 1. [ Introduction](#introduction) 2. [ Data controller](#data-controller) 3. [ Information we collect](#information-we-collect) 4. [ How we use your information](#how-we-use) 5. [ Data sharing and third parties](#data-sharing) 6. [ International data transfers](#international-transfers) 7. [ Data retention](#data-retention) 8. [ Cookies and tracking technologies](#cookies) 9. [ Your rights under the GDPR](#your-rights) 10. [ Data security](#data-security) 11. [ Children's privacy](#childrens-privacy) 12. [ Links to third-party websites](#third-party-links) 13. [ Changes to this policy](#changes) 14. [ Supervisory authority](#supervisory-authority) 15. [ Contact us](#contact-us) ## 1\. Introduction Welcome to Pontis. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable European Union data protection laws. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website pontis.company and use our services. Please read this policy carefully to understand our practices regarding your personal data. ## 2\. Data controller The data controller responsible for your personal data is: **Pontis Ltd** Alexander Malinov 31 Blvd. Sofia 1729, Bulgaria Email: [contact us](mailto:privacy@pontis.company) ## 3\. Information we collect ### Information you provide directly - **Contact information:** name, email address and company name when you submit enquiries through our contact form. - **Communication data:** any information you include in messages sent to us. ### Information collected automatically When you visit our website, we automatically collect certain information, including: - **Device information:** browser type, operating system, device type. - **Usage data:** pages visited, time spent on pages, click patterns, scroll depth. - **Technical data:** IP address (anonymised where possible), referring URLs. - **Location data:** general geographic location based on IP address, at country or region level. ### Cookies and similar technologies We use cookies and similar technologies to collect and store information. Section 8 below sets out the categories we use. The full inventory — cookie names, providers and lifetimes — is maintained on the [cookie policy](/cookies), and non-essential cookies now load only after you have opted in. ## 4\. How we use your information We process your personal data for the following purposes. ### To respond to your enquiries - Processing and responding to contact form submissions. - Providing information about our services. - **Legal basis:** legitimate interest in responding to enquiries; contract performance where applicable. ### To improve our website and services - Analysing website usage patterns and user behaviour. - Identifying technical issues and improving functionality. - Understanding how visitors interact with our content. - **Legal basis:** legitimate interest in improving our services. Where this relies on cookies or similar technologies that are not strictly necessary, it also depends on your consent — see the [cookie policy](/cookies). ### For marketing and communications - Sending relevant updates about our events and services, only with your consent. - Personalising your experience based on your interests. - **Legal basis:** consent; legitimate interest for existing business relationships. ### To comply with legal obligations - Meeting regulatory requirements. - Responding to lawful requests from authorities. - **Legal basis:** legal obligation; legitimate interest. ## 5\. Data sharing and third parties We share your personal data with the following categories of recipients. ### Service providers The processors listed here are those disclosed in the policy published on 1 February 2026. They are being re-verified as part of the pending legal review: the analytics and marketing entries describe tools that only ever run with your consent, and the cookie policy records what this site actually loads today. #### Cloudflare — form processing and hosting - **Purpose:** processing contact form submissions and storing data securely. - **Data collected:** name, email, company, message and form metadata. - **Privacy policy:** [cloudflare.com/privacypolicy (opens in a new tab)](https://www.cloudflare.com/privacypolicy/) #### Resend — email delivery - **Purpose:** delivering contact form notification emails. - **Data collected:** name, email, company, message content. - **Privacy policy:** [resend.com/legal/privacy-policy (opens in a new tab)](https://resend.com/legal/privacy-policy) #### Google Analytics - **Purpose:** website analytics and usage tracking. - **Data collected:** anonymised usage data, device information. - **Loads only with consent:** requested through Google Tag Manager after you opt in to the analytics category, never before. - **Privacy policy:** [policies.google.com/privacy (opens in a new tab)](https://policies.google.com/privacy) #### No session recording, and no advertising pixel - **Microsoft Clarity:** not in use. This site runs no session recording or heatmap tooling, so no reconstruction of your individual browsing session is captured. - **Meta (Facebook) Pixel:** not in use. There is no advertising pixel on this site and no conversion data is shared with any advertising network. - Both were referenced by the previous version of this site. If either is ever reintroduced, it will appear in the list above, be added to the [cookie policy](/cookies), and require its own consent before loading. #### Cloudflare — hosting, security and performance - **Purpose:** website hosting, security and performance. - **Data collected:** technical data for security and delivery. - **Privacy policy:** [cloudflare.com/privacy (opens in a new tab)](https://www.cloudflare.com/privacy/) ### Legal disclosures We may disclose your information where required by law, in response to legal process, or to protect our rights, privacy, safety or property. ## 6\. International data transfers Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including: - European Commission adequacy decisions. - Standard Contractual Clauses (SCCs). - Certification under approved frameworks. ## 7\. Data retention We retain your personal data only for as long as necessary for the purposes outlined in this policy: - **Contact form submissions:** 3 years from the date of submission, unless an ongoing business relationship exists. - **Analytics data (Google Analytics):** 26 months. - **Session recordings (Microsoft Clarity):** 30 days. - **Marketing data:** until you withdraw consent or unsubscribe. - **Your cookie choice:** approximately 6 months, after which we ask again. See the [cookie policy](/cookies). The analytics and session-recording periods above are carried over from the previous policy and are pending confirmation against the vendor configurations currently in force. ## 8\. Cookies and tracking technologies ### What are cookies? Cookies are small text files placed on your device when you visit our website. They help us provide you with a better experience and allow certain features to function. ### The categories we use Nothing outside the strictly necessary category is requested until you have made a choice. Analytics and marketing are denied by default, and the choice is revocable from “Cookie settings” in the footer of every page. - **Strictly necessary:** required for the site to work — remembering your cookie choice and protecting the contact form from abuse. First-party, and they cannot be switched off. - **Analytics:** helps us understand which pages are useful and where people get stuck. Loaded through Google Tag Manager only after you opt in. No form contents are ever collected. - **Marketing:** measures whether a campaign led to an enquiry. Off unless you opt in, and never used to build a profile of you across other websites. The full inventory — cookie names, providers, purposes and lifetimes — is maintained on the [cookie policy](/cookies), which is the single source of truth for what this site sets. ### Managing cookies You can change your choice at any time on the [cookie policy](/cookies) page, or through your browser settings. Please note that disabling certain cookies may affect website functionality. - **Chrome:** Settings → Privacy and security → Cookies - **Firefox:** Settings → Privacy & Security → Cookies - **Safari:** Preferences → Privacy → Cookies - **Edge:** Settings → Privacy, search and services → Cookies ## 9\. Your rights under the GDPR Under the GDPR, you have the following rights regarding your personal data. ### Right of access You have the right to obtain confirmation of whether we process your personal data and to request a copy of that data. ### Right to rectification You have the right to request correction of inaccurate personal data or completion of incomplete data. ### Right to erasure (“right to be forgotten”) You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected. ### Right to restriction of processing You have the right to request that we limit the processing of your personal data in certain circumstances. ### Right to data portability You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller. ### Right to object You have the right to object to processing of your personal data based on legitimate interests, including profiling and direct marketing. ### Right to withdraw consent Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. For cookies, withdrawing consent takes one click from “Cookie settings” in the footer. ### How to exercise your rights To exercise any of these rights, please [contact us](mailto:privacy@pontis.company). We will respond to your request within one month, as required by the GDPR. This period may be extended by two further months where necessary, taking into account the complexity and number of requests. ## 10\. Data security We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures include: - Encryption of data in transit (HTTPS/TLS). - Secure data storage with access controls. - Regular security assessments. - Staff training on data protection. While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security. ## 11\. Children’s privacy Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please [contact us](mailto:privacy@pontis.company) immediately, and we will take steps to delete such information. ## 12\. Links to third-party websites Our website may contain links to third-party websites and services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit. ## 13\. Changes to this policy We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last reviewed” date. We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our website after any modifications indicates your acceptance of the updated policy. ## 14\. Supervisory authority If you are not satisfied with our response to your privacy concerns, or believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority. For matters related to Pontis, you may contact: **Commission for Personal Data Protection (CPDP)** Bulgaria’s data protection authority 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria Website: [cpdp.bg (opens in a new tab)](https://cpdp.bg/) Email: [kzld@cpdp.bg](mailto:kzld@cpdp.bg) You may also lodge a complaint with the supervisory authority in your country of residence or place of work within the European Union. ## 15\. Contact us If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us: **Pontis Ltd** Sofia, Bulgaria Email: [contact us](mailto:privacy@pontis.company) Build with Pontis ## Turn a strategic gap into a working ecosystem. Bring us a concrete use case, a market failure or a capability gap. We will help define the context, the stakeholders and the format needed to move it towards a decision. [Start a conversation](/contact) For problem owners, problem solvers, capital providers and market standard-setters.