SOY TULUM
ENES
Log inSign Up
Legal

Privacy policy

Last updated: Jul 14, 2026

This Privacy Policy explains how SOY TULUM (“Platform”), available at https://soytulum.com, collects, uses, and protects personal data.

The Platform is operated by DOTSOA OOD, a company incorporated under the laws of Bulgaria, with registered address at bul. Tsarigradsko shose No 115M, European Trade Center, Building D, et. 1, Sofia, Bulgaria (“Company”, “we”, “us”, or “our”).

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR).

1. Scope

This Privacy Policy applies to:

  • visitors browsing the Platform without an account;
  • registered users who create an account;
  • local businesses, freelancers and residents who create or claim a profile (“Providers”);
  • subscribers to our email updates;
  • all interactions with the Platform via https://soytulum.com.

2. Data We Collect

2.1 Browsing Without an Account

You can browse local profiles and content without an account. When you do:

  • we do not collect personal identifying information;
  • we do not build IP-based profiles or device fingerprints;
  • only technical data strictly necessary for security and stability is processed.

2.2 Registered Accounts

When you create an account, we collect:

  • Email address (required for authentication, account access, and service communication).

An account used only to browse and contact Providers does not require your real name, phone number, or physical address. We do not collect payment card details; any payments are handled by third-party payment providers, if applicable.

2.3 Business and Provider Profiles

If you create or claim a Provider profile, we additionally collect the information you submit or that appears in the profile, such as:

  • business or professional name and address or neighborhood,
  • services offered, descriptions, photos, pricing, and working hours,
  • contact details, including WhatsApp and phone numbers and email addresses,
  • social or website links.

This information is published as part of your public profile so that customers can find and contact you. To verify a profile claim, we may send a one-time code to a listed phone number or email address.

2.4 Email Updates

If you leave your email address to receive updates (for example, in the “Stay in the loop” form), we store it to send you local tips, new arrivals, and community or launch updates. You can unsubscribe at any time using the link in any email or by contacting us.

2.5 Usage and Technical Data

We may process limited technical data strictly necessary for operation and security, including:

  • timestamps and request counts,
  • system logs related to errors or abuse prevention.

This data is minimized, not used for advertising, and not sold or shared for profiling purposes.

3. How We Use Data

We use collected data solely to:

  • provide and operate the Platform;
  • display Provider profiles and help customers connect with Providers directly (for example, via WhatsApp);
  • verify profile claims;
  • send email updates you have requested;
  • prevent fraud, abuse, or misuse;
  • improve system performance and reliability;
  • comply with legal obligations.

We do not use your data for targeted advertising, behavioral tracking, or third-party marketing.

4. Legal Basis for Processing (GDPR)

We process data under the following legal bases:

  • Consent – email updates you subscribe to;
  • Contractual necessity – providing the Platform, accounts, and profiles;
  • Legitimate interest – platform security, abuse prevention, service integrity;
  • Legal obligation – compliance with applicable laws.

5. Data Retention

  • Account email addresses are retained while the account remains active.
  • Provider profile details are retained while the profile remains active or claimed.
  • Email-update subscriptions are retained until you unsubscribe.
  • You may request deletion of your account or profile at any time.
  • We do not retain data longer than required for its stated purpose.

6. Data Sharing

We do not sell or rent personal data.

Data may be shared only:

  • with essential service providers (e.g., hosting, email delivery), under strict confidentiality;
  • when legally required by competent authorities.

Note that contacting a Provider through WhatsApp, phone, or a linked website happens directly between you and the Provider, outside the Platform, and is governed by those services’ own terms and privacy policies.

7. International Transfers

If data is processed outside the European Union, we ensure appropriate safeguards in accordance with GDPR (e.g., standard contractual clauses).

8. Security Measures

We implement appropriate technical and organizational measures, including:

  • encryption,
  • access controls,
  • secure infrastructure,
  • minimal data exposure by design.

No system is perfectly secure, but we continuously work to protect your data.

9. Your Rights (GDPR)

You have the right to:

  • access your personal data;
  • request correction or deletion;
  • restrict or object to processing;
  • withdraw consent (e.g., unsubscribe from email updates) at any time;
  • request data portability (where applicable).

Requests can be made by contacting us using the details below.

10. Cookies and Tracking

SOY TULUM uses only essential cookies or storage mechanisms required for session handling, security, functionality, and remembering preferences such as your language.

We do not use advertising or tracking cookies.

11. Children’s Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

Changes become effective upon publication on the Platform. Continued use constitutes acceptance.

13. Contact Information

For privacy-related inquiries or requests:

DOTSOA OOD
bul. Tsarigradsko shose No 115M
European Trade Center, Building D, et. 1
Sofia, Bulgaria
Website: https://soytulum.com