Privacy Policy

Effective date: 2 September 2026

This policy explains what happens to your data while you browse takeanap.bg (the “Website”). It is short because the Website processes little data. If anything is unclear, write to privacy@takeanap.bg.

1. What it covers

The policy covers only the Website: the pages, the articles, the calculator and contacting us through the site.

The data we process when you use the Take a NAP service itself (account, shops, orders, electronic receipts, audit files) is described in a separate Service Privacy Policy. You see it at sign-up and at any time from your profile in the web app at app.takeanap.bg. It also applies to our apps in the Shopify App Store and the Wix App Market, and to the API.

2. Who is responsible for the data

The controller of the personal data processed through the Website is Softaware Ltd. (Софтауеър ООД), UIC 206609469, Republic of Bulgaria. We have not appointed a data protection officer. For anything related to personal data, write to privacy@takeanap.bg. The general address hi@takeanap.bg reaches us too.

3. What we process and why

When you open the site. Our hosting and CDN provider (Cloudflare) processes the technical data of every request: IP address, browser and device type, time and requested page. It is used to deliver the content, protect against attacks and detect abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in keeping the site secure and available. These records are kept briefly, under the provider’s rules, and we do not link them to specific people.

When you accept analytics cookies. Google Analytics collects which pages you view, where you came from, device and browser type, approximate location down to city level, and events such as button clicks. It helps us understand which content works. Legal basis: your consent (Art. 6(1)(a)). Google Analytics does not store the full IP address, and the data is kept there for at most 14 months.

When you accept marketing cookies. Google Ads and Meta (Facebook, Instagram) measure whether an ad led to a visit or a sign-up and let us show ads to people who have already visited the site. Legal basis: your consent. The data is processed by Google and Meta under their policies, and we only see aggregated results.

When you write to us. If you email us or use the contact form, we process your name, email and the content of the message in order to reply. Legal basis: steps prior to entering into a contract at your request (Art. 6(1)(b)) or our legitimate interest in answering enquiries. We keep correspondence for up to 24 months after the last message. If you become a customer, it becomes part of our relationship and is kept for the duration of the contract and up to 5 years after it ends, the general limitation period.

When you book a call. The “Book a slot” button opens the Cal.com calendar in a window on top of the site. Cal.com loads only after you press it, and on booking it processes your name, email and the chosen time to create the meeting. Legal basis: steps prior to entering into a contract at your request. We keep the call details for up to 24 months after the call.

Reviews. We publish customer reviews with the name of their shop, as given in app marketplaces or in a rating of our support. If a review of yours is on the site and you want it taken down, write to us and we will remove it.

We do not process special categories of data and do not make automated decisions with legal effect on you.

4. Cookies

Until you make a choice in the cookie window, the Website sets only one cookie: the one that stores your choice itself. Google Tag Manager, Google Analytics, Google Ads and the Meta Pixel load only after you accept the corresponding category. Before consent, all fonts and scripts come from our own domain.

You can change or withdraw your consent at any time from the “Cookie settings” link at the bottom of every page. Withdrawal does not affect processing up to that point. Consent is stored for 6 months, after which we ask again.

Cookie	Category	Provider	Expires	Purpose
cc_cookie	Necessary	takeanap.bg	6 months	Stores your cookie choice
_ga, ga*	Analytics	Google	2 years	Distinguishes visitors and sessions
_gid	Analytics	Google	24 hours	Distinguishes visitors
_gat	Analytics	Google	1 minute	Limits the request rate
_gcl_au	Marketing	Google Ads	3 months	Measures ad conversions
_fbp	Marketing	Meta	3 months	Recognises the browser for ads
_fbc	Marketing	Meta	3 months	Stores the click from a Meta ad

5. Who receives data

• Cloudflare, Inc., hosting and CDN for the Website.
• Google Ireland Ltd., Google Tag Manager, Google Analytics and Google Ads, only after consent.
• Meta Platforms Ireland Ltd., Meta Pixel, only after consent.
• Google Ireland Ltd. (Google Workspace), our email when you write to us.
• Cal.com, Inc., the booking calendar, only if you press “Book a slot”.

We do not sell personal data and do not pass it to others for their own purposes. We may disclose data if the law or a public authority obliges us to.

6. Transfers outside the EU

Cloudflare, Google, Meta and Cal.com are US companies certified under the EU-U.S. Data Privacy Framework. Where data is nevertheless processed outside the European Economic Area, this happens on that basis or under the European Commission’s standard contractual clauses.

7. How long we keep data

Technical hosting records are kept briefly, under the provider’s rules. Analytics data in Google Analytics is kept for up to 14 months. Cookie consent is stored for 6 months. We keep correspondence for up to 24 months after the last message, and with customers for the duration of the contract and up to 5 years after it ends. Details of a booked call are kept for up to 24 months after the call.

8. Your rights

Under the GDPR you can ask us for access to your data, rectification, erasure, restriction of processing, portability, object to processing based on legitimate interest, and withdraw any consent you have given. Write to privacy@takeanap.bg and we will reply within one month.

If you believe we process your data unlawfully, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, kzld@cpdp.bg.

9. Security

The Website is served only over HTTPS with HSTS enabled. We do not collect passwords, payment details or your customers’ data on the site. If you send us such data by email, we will ask you to go through a ticket in the app, where the connection is protected.

10. Children

The Website is aimed at merchants and is not intended for persons under 14. We do not knowingly collect their data. If you believe a child has sent us personal data, write to us and we will delete it.

11. Changes

When what we process changes, we update this page and the date at the top. For a material change in cookies we will ask for your consent again.

12. How to reach us

Softaware Ltd. (Софтауеър ООД), UIC 206609469 Personal data: privacy@takeanap.bg General questions: hi@takeanap.bg