Privacy Policy

Who we are

Thrivelia LTD (UIC BG206551902), 38 Stroitel St., Dobrich 9300, Bulgaria (“we”, “us”).
Contact: office@thrivelia.com

What this covers

This notice explains how we collect, use, share, and protect personal data when you visit our websites, contact us, or pay us (including via Stripe Payment Links and ACH Direct Debit).

Data we collect

Identity & contact: name, company, role, email, phone, billing address.
Account & comms: messages, meeting notes, preferences.
Usage: device info, IP, pages viewed, and similar analytics cookies (e.g., Google Analytics).
Payments: handled by Stripe. For cards, Stripe processes card details. For US bank payments (ACH Direct Debit) we may request, via Stripe Financial Connections, tokenized bank account and routing numbers and—if you consent—account ownership details. We do not store your full bank or card numbers on our servers.

Why we use your data (legal bases)

Provide services & take payment (contract).
Operate, secure, and improve our sites (legitimate interests).
Marketing communications (consent/legitimate interests—unsubscribe anytime).
Comply with law (tax, accounting, fraud prevention).

Sharing your data

Processors: infrastructure, email, CRM, analytics, file storage, and payment providers (including Stripe, Inc. and its affiliates) acting under our instructions.
Legal/Corporate: to comply with law or in a merger/acquisition.
We don’t sell personal data.

International transfers

Your data may be processed outside the EEA/UK. Where required, we use safeguards such as the EU Standard Contractual Clauses and comparable mechanisms.

Retention

We keep:

Client/accounting records: up to 10 years (legal obligations).
Marketing data: until you opt out or after reasonable inactivity.
Operational logs: typically 12–24 months.
We delete or anonymize when no longer needed.

Your rights (EEA/UK)

You can access, correct, delete, restrict, transfer, or object to processing; and withdraw consent where used. You may lodge a complaint with your local authority; in Bulgaria: the Commission for Personal Data Protection.

Cookies & tracking

We use necessary cookies and, with consent (where required), analytics cookies to understand site usage and improve performance. You can manage cookies in your browser or via our cookie banner (if present).

Payments via Stripe & ACH

When you pay, you’ll be redirected to Stripe’s hosted pages. Stripe acts as our payment processor and may act as an independent controller for some activities. For ACH Direct Debit, Stripe may verify your bank via Financial Connections (instant login) or micro-deposits. We receive only tokens and limited verification data; sensitive bank credentials never pass through our servers. See Stripe’s Privacy Policy for details.

Children

Our services aren’t directed to children under 16, and we don’t knowingly collect their data.

Changes

We may update this notice from time to time. The “Last updated” date reflects the latest version.

Last updated: 6 Nov 2025