Privacy Policy

Information We Collect

When you interact with our platform, we collect different types of information. Some you provide directly, others we gather through your use of our services.

Information You Provide

This includes data you voluntarily share with us:

• Account registration details (name, email address, phone number)
• Payment information for subscription services
• Communication preferences and contact information
• Questions or feedback sent through our contact forms
• Learning progress and course completion data
• Profile information you choose to add

Automatically Collected Data

Our platform collects certain technical information to function properly and improve your experience:

• Device information (browser type, operating system, screen resolution)
• IP address and approximate geographic location
• Usage patterns and feature interactions
• Login times and session duration
• Pages visited and content accessed
• Referral sources and navigation paths

How We Use Your Information

We're straightforward about why we need your data. Here's what we actually do with it:

We don't sell your personal information to third parties. We don't send spam or unsolicited marketing. If you subscribe to our newsletter or educational updates, you can unsubscribe anytime.

Data Sharing and Third Parties

We work with a small number of trusted service providers to operate our platform. They only receive the minimum data necessary to do their job.

Service Providers We Work With

• Payment processors: Handle subscription payments securely (they never share full payment details with us)
• Cloud hosting services: Store platform data and ensure uptime
• Email delivery services: Send course materials and account notifications
• Analytics tools: Help us understand platform usage and improve features

All our service providers are contractually required to protect your data and can't use it for their own purposes. They process data according to GDPR standards.

When Law Requires Disclosure

We may share information if legally required to do so—for example, in response to valid court orders, to comply with Bulgarian tax regulations, or to protect against fraud. We'll notify you about such requests unless prohibited by law.

Your Rights Under GDPR and Bulgarian Law

You have substantial control over your personal data. Here's what you can do:

How to Exercise Your Rights

To make any of these requests, send an email to help@energonblaze.com with "Privacy Request" in the subject line. Include your account email and specify what you need. We'll respond within 30 days and verify your identity before processing requests.

If you're not satisfied with how we handle your request, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

Data Security and Protection

We implement industry-standard security measures to protect your information from unauthorized access, alteration, or destruction.

Technical Safeguards

• End-to-end encryption for data transmission (TLS 1.3)
• Encrypted storage for sensitive personal information
• Regular security audits and vulnerability assessments
• Multi-factor authentication options for account access
• Secure backup systems with encrypted storage
• Access controls limiting staff data access to job requirements

Organizational Measures

Our team receives regular privacy training. We maintain strict internal policies about data handling. Only authorized personnel can access personal information, and all access is logged and monitored.

Data Retention and Deletion

We don't keep your data longer than necessary. Here's our retention approach:

Active Accounts

While your account is active, we retain your profile information, learning progress, and platform usage data. This ensures continuity of service and helps you pick up where you left off.

Inactive Accounts

If you haven't logged in for 24 months, we'll send reminder emails. After 30 months of inactivity, we may archive your account. Archived accounts can be reactivated within an additional 6 months. After that, we'll delete personal data while retaining anonymized analytics.

After Account Deletion

When you delete your account, we remove personal information within 30 days. However, we may retain certain data for legal compliance:

• Financial records (invoices, payment history) for 10 years per Bulgarian tax law
• Communication records if involved in disputes or legal matters
• Anonymized usage statistics that can't identify you personally
• Information necessary to prevent fraud or enforce terms of service

Backup systems may retain deleted data for up to 90 days before permanent deletion.

International Data Transfers

Our primary servers are located within the European Union. Some service providers may process data outside the EU, but only under strict safeguards.

When data leaves the EU, we ensure protection through:

• EU Standard Contractual Clauses with all non-EU processors
• Adequacy decisions by the European Commission
• Additional technical measures like encryption during transfer
• Regular compliance assessments of international partners

You can request details about specific transfers by contacting our privacy team.

Children's Privacy

Our platform is designed for adults engaged in financial market education. We don't knowingly collect information from anyone under 16 years old. If you're under 16, please don't create an account or submit personal information.

If we discover we've accidentally collected data from someone under 16, we'll delete it promptly. Parents who believe their child has provided information to us should contact help@energonblaze.com immediately.

Changes to This Policy

We review and update this privacy policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active users via email at least 30 days before the changes take effect.

The "Last Updated" date at the top shows when we last revised this policy. Continued use of our platform after changes become effective means you accept the updated policy.

We maintain an archive of previous policy versions. You can request historical versions by emailing our privacy team.

Bulgaria-Specific Provisions

As a company operating in Bulgaria, we comply with additional local requirements:

• We're registered with the Bulgarian Commission for Personal Data Protection
• Financial records are maintained according to Bulgarian Accountancy Act requirements
• Customer data related to financial services follows Bulgarian National Bank guidelines
• All communications with Bulgarian authorities are conducted in Bulgarian language
• Dispute resolution follows Bulgarian jurisdiction and procedures

For questions specific to Bulgarian data protection law, contact the Commission for Personal Data Protection at 2 Prof. Tsvetan Lazarov blvd., Sofia 1592, Bulgaria.