[email protected] BG
Tickabell Free demo

Privacy Policy

Effective from 13.11.2026

Българска версия · This is a translation for convenience. If it differs from the Bulgarian text, the Bulgarian text prevails.

1. Who processes the data

The controller of personal data is Домеско ЕООД (Domesko Ltd.), UIC 207716933, registered office Sofia, ul. "5028-ma", 17, D, email [email protected], phone +359 877 794 069. This policy applies to the tickabell.com website, to the clients of Tickabell and to the mobile app Tickabell for Business.

The data of the clients of the businesses that use Tickabell are kept on the website of the relevant business, and that business is their controller. For those data see the business’s privacy policy, and for our role – the Data Processing Agreement.

2. What data we collect and why

Website visitors and enquiries

  • When booking a demo: name, email, phone, the chosen date and time and the note you leave – to hold the demo (steps prior to entering into a contract, Art. 6(1)(b) GDPR).
  • When you write to us: the data you send us – to reply to you (legitimate interest, Art. 6(1)(f)).
  • A list of the people we are talking to about our services: name, business, email, phone, city, how we got in touch, how far we got and notes from the talks. It holds the people who wrote to us, booked a demo, filled in the questionnaire, signed up in the portal or took a gift, and the businesses we called or wrote to ourselves – so that no talk gets lost and we get back to you on time (steps prior to entering into a contract at your request, Art. 6(1)(b), and where we contacted you first – legitimate interest, Art. 6(1)(f)). If we contacted you first, we tell you at the first contact where we got your details and that you can say no. If you say no, we stop and delete the contact.
  • In the website questionnaire: the business name, contact details, company details, services, prices, working hours, texts and photos (logo, premises, team) you enter – to build your website (steps prior to entering into a contract and performance of the contract, Art. 6(1)(b)). The photos are available only through the questionnaire’s personal link. You confirm that you have the right to provide them.
  • For an event gift (for example a code for a free month): names, email, phone, whether you have a website and what it runs on, and whether you want a new website – to send you the code, link it to your licence and, if you asked, contact you about a website (consent, Art. 6(1)(a)). If you do not become our client, we delete these data within 12 months after the code expires. We count visits to the gift page without cookies and without keeping your IP address.
  • Cookies and similar technologies – according to your choice in the cookie banner; details in the Cookie Policy.
  • Visit data (which pages you view, device and browser, approximate location, where you came from, reactions to our ads) – only if you have agreed to statistics or marketing in the cookie banner (consent, Art. 6(1)(a)). You can withdraw consent at any time from “Cookie settings” at the bottom of the site.

Tickabell clients

  • Business and contact person details: name, company number, address, name, email, phone – to conclude and perform the contract (Art. 6(1)(b)).
  • Invoice and payment data: issued invoices, amounts, dates, method and status of payment. For card payments, the card details are entered with the payment service provider and we do not see them. We keep these data to meet our accounting and tax obligations (Art. 6(1)(c)).
  • Personal number (EGN) – only when invoices are made out to a private person rather than a company. Bulgarian law requires it on the invoice (Art. 114(1)(8) of the VAT Act and Art. 84 of the Tax and Social Security Procedure Code). We use it only for invoices and the books and keep it encrypted (Art. 6(1)(c)).
  • Technical data when checking the licence and updates: the site address, the licence key, the versions of Tickabell, WordPress and PHP and the server’s IP address – to deliver updates and check the Subscription (Art. 6(1)(b) and (f)).
  • Support correspondence – to solve the problem and improve the service (legitimate interest).

The Client portal (clients.tickabell.com)

  • The accounts of the people with access to the business: name, email, phone, role (Administrator or Accountant) and invitations. We do not know the password – we keep only a fingerprint (hash) of it. Sign-in codes are sent by email or generated by an authenticator app – for secure sign-in (Art. 6(1)(b)).
  • Security and contract records: actions in the portal – accepting the Terms, choosing and changing the plan, stopping the subscription, changes to details and to the people with access (date, time and IP address), and in the server logs – the requests to the portal. To protect accounts from unauthorised access and to be able to prove statements under the contract (Art. 6(1)(b) and (f)).
  • Copies of the emails we send you from the portal and the server (invoices, proformas, payment reminders, notices about changes to the account, the business and the subscription): to whom, when, the subject, the text and a fingerprint of the attached files. So that we can prove that we informed you (Art. 6(1)(b) and (f)).
  • Your choice of which emails to receive (“Profile” → “Notifications”): tips at the start, and news and offers. We send news and offers only with your consent (Art. 6(1)(a)) and keep when you gave or withdrew it. Emails about invoices, payments, the subscription and changes to the account and the business are part of the contract and always come.
  • Requests and the files you attach to them – to reply.
  • The portal uses only necessary cookies – for the sign-in session and the protection of forms. It does not use statistics or advertising cookies, so it does not ask for consent.
  • At registration, the bot check is done by Cloudflare Turnstile (see section 3).

Do you have to provide the data

Visiting the site does not require personal data. To conclude a contract, create an account in the portal and issue invoices, we need the details of the business and the contact person – without them we cannot provide the service. You give the data for a demo, the website questionnaire and the gift voluntarily, but without them we cannot hold the demo, build the website or send the code.

The mobile app

  • The app (Tickabell for Business) connects directly to the business’s website. The bookings, clients and your account are there – we do not receive them. What you see in the app depends on your permissions on the business’s website. The business is the controller of these data.
  • When connecting, the business’s website records for your phone: a connection key (only its fingerprint is kept), the phone’s name, the chosen language, when it was last used and the notification code, if you allowed notifications. These data stay on the business’s website.
  • If you allow notifications, the phone receives a notification code, which the business’s website uses to send you notifications about new and changed bookings. Notifications go through the Expo service and through Apple or Google (see section 3). They do not contain client names: only the type of event, the service and the time. The details load directly from the business’s website when you open the app.
  • Only the connection key (in the phone’s secure storage), the app settings and the day’s bookings needed for the widget stay on the phone. On iPhone, the widget and the Live Activity show the time and the name of the next client on the home and lock screens. The Live Activity is switched off in the app’s Settings, and the widget by removing it from the screen.
  • The camera is used only to scan the QR code and for photos you choose to upload; photos go only to the business’s website. Unlocking with Face ID, fingerprint or the phone’s passcode is checked entirely by the phone – the app receives no biometric data. The app asks for permission before using the camera and before sending notifications.
  • The app does not use ads, tracking or analytics services. It has no registration and no payments.
  • The connection is ended from the app’s Settings or from the business’s website admin, and also when you change your password on the website. A phone not used for 90 days is disconnected automatically. The website then deletes the phone’s record together with the notification code. Delete the app to remove the data on the phone as well.
  • For the data on the business’s website (bookings, clients, your account) contact the business. For the app itself – contact us.

3. Who we share data with

  • Our hosting and email provider (JetHost, Bulgaria).
  • The provider of the server for licences, updates and the Client portal (Hetzner Online GmbH, Germany; the server is in the European Union).
  • Cloudflare, Inc. (USA) – protection and delivery of tickabell.com, the Client portal and the licence server, and the bot check at registration (Turnstile). Cloudflare sees the IP address and technical data of the request. This is a transfer of data outside the EU based on an adequacy decision of the European Commission (the EU-U.S. Data Privacy Framework) or on the Commission’s standard contractual clauses.
  • The payment service provider for card payments (Stripe Payments Europe, Ltd., Ireland).
  • Our accountant – for the accounting documents.
  • Google Ireland Ltd. (YouTube) – only when you play a video from the site or allow videos in the cookie settings.
  • Google Ireland Ltd. (Google Analytics, Google Ads) – visit statistics and ad measurement, only if you have agreed.
  • Microsoft Corporation (Microsoft Clarity, USA) – how the pages are used (clicks, scrolling, recordings of visits without the text typed into forms), only if you have agreed to statistics. This is a transfer of data outside the EU based on an adequacy decision of the European Commission (the EU-U.S. Data Privacy Framework) or on standard contractual clauses.
  • Meta Platforms Ireland Ltd. (Facebook, Instagram) – measuring our ads, only if you have agreed.
  • 650 Industries, Inc. (Expo), Apple Inc. and Google LLC – for app notifications. This is a transfer of data outside the EU based on an adequacy decision of the European Commission or on the Commission’s standard contractual clauses.
  • Public authorities, when the law requires it.

We do not sell data and do not share them for advertising.

4. How long we keep the data

  • Data from demos and enquiries without a contract, and the contacts in the sales list – up to 12 months after the last contact; then they are deleted automatically.
  • Answers and photos from the website questionnaire – up to 12 months if the website is not ordered; after the website is built – for as long as the contract lasts, unless you ask for earlier deletion.
  • Contract data and correspondence – for as long as the contract lasts and 5 years after it ends (the general limitation period).
  • Invoices and accounting documents – for the periods under the Accountancy Act and the tax laws (up to 10 years).
  • Technical data from the licence check – for as long as the contract lasts and up to 12 months after it.
  • Server logs (requests and errors) – up to 30 days. Records of actions and statements under the contract in the portal – like the contract data.
  • Copies of sent emails – 5 years from sending; after that they are deleted automatically. Attached invoices are kept as accounting documents.

5. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing, portability and to object to processing based on legitimate interest. If you object to us contacting you with offers, we stop at once and delete you from the sales list. Where processing is based on consent, you can withdraw it at any time. Write to us at [email protected] and we will reply within one month.

You can delete your Client portal account yourself from “Profile” → “Delete the account”. We send a confirmation email. If you are the only administrator of a business with an active subscription, first stop the subscription or add another administrator. Invoices and the records the law requires us to keep stay until the end of their term.

You can lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

We do not make decisions based solely on automated processing that have legal effects for you.

6. Security

We apply technical and organisational measures to protect the data from unauthorised access, loss and alteration: encrypted connections, restricted access, protected accounts and devices, backups.

7. Changes

For significant changes we will update this page and notify our clients by email.