Privacy policy

Last updated: 12 September 2026

This policy describes how personal data is processed when you use this website and when you purchase online programs or book consultations with SUNNY LIFE ACADEMY LTD. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Data controller

The controller of personal data is:

SUNNY LIFE ACADEMY LTD
Business identifier (UIC / other): 16896940
Address: 48 Romney Road Hayes Middlesex UB4 8PU
Email: svetoslavas87@gmail.com
Phone: +447490300516

2. What data we process

Depending on how you use the site, we may process, for example:

name and email address submitted through a contact form or at payment;
data needed to issue an invoice, if the law requires invoicing;
technical data from a site visit (e.g. IP address, browser type, approximate request time) via hosting and site infrastructure;
information about your cookie choice, stored in your browser (e.g. in localStorage);
data related to a booked consultation (time, contact channel, notes you provide).

3. Purposes and legal bases

We process data for:

Answering inquiries and organizing consultations — steps at the request of the data subject before a contract or a concluded contract (Art. 6(1)(b) GDPR).
Payments and access to online programs — performance of a contract (Art. 6(1)(b) GDPR) and, where applicable, legal accounting and VAT obligations (Art. 6(1)(c) GDPR).
Basic operation of the site and security — legitimate interest in keeping a stable and secure site (Art. 6(1)(f) GDPR), in line with your rights.
Optional analytics or advertising tools — only if implemented and only after explicit consent through the cookie banner (Art. 6(1)(a) GDPR).

4. Payments through Stripe

Online payments are processed by Stripe Payments Europe Ltd. (or a related Stripe company depending on your region). We do not store full card data on our own servers. Stripe processes the data as an independent controller under its own privacy policy: https://stripe.com/privacy.

5–9. Consultations, Zoom, email, cookies, analytics

Booking currently happens through the contact channels on the site. If we introduce an external calendar system, we will update this policy. For Zoom meetings we may process name, email, join/leave time and duration for organization and internal statistics. If you subscribe, we may store your data to send service-related information; every marketing email includes an unsubscribe option. Cookie details are in the Cookies page. Optional Google Analytics 4 and Meta Pixel load only after explicit consent.

10. Storage period

We keep data only as long as needed for the purposes for which it was collected: contract performance, answering inquiries, accounting and tax duties (usually until the statutory periods expire) and protection of legitimate interests in possible disputes. After that, data is deleted or anonymized unless the law requires longer storage.

11. Transfers outside the EEA

Some providers (including Stripe) may process data outside the European Economic Area with appropriate GDPR safeguards (e.g. standard contractual clauses). Information on this is in the provider’s documents.

12. Your rights

You have the right to request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with the Commission for Personal Data Protection in Bulgaria (www.cpdp.bg). To exercise your rights, contact svetoslavas87@gmail.com.

13. Security

We apply appropriate technical and organizational measures against unlawful access, loss or destruction of personal data, according to the nature of the processing.

14. Changes

We may update this policy when services or the law change. The current version is always published on this page with the last-updated date.