Privacy Policy

1. Overview Bondorra s.r.o. (“Bondorra,” “we,” “us,” or “our”) is committed to respecting and protecting your privacy in accordance with this Privacy Policy (“Privacy Policy”). This policy outlines how we collect, use, and manage your Personal Information when you visit our website at , interact with us, or when we otherwise process your Personal Information (collectively referred to as the “Platform”), except as noted below in cases where we act solely as a processor.

This Privacy Policy does not apply to Personal Information we process on behalf of our customers’ data subjects as part of the services provided to those customers. Our customers leverage the Platform to handle data related to their own clients, for example to develop websites and applications, deliver products or services, send electronic messages, or otherwise collect, use, or process Personal Information. In these situations, we serve only as a data processor and service provider (the “Processor Services”). When you provide your data to one of our customers or when we collect it for them through Processor Services, the privacy policy of that customer—not this Privacy Policy—governs our processing of your Personal Information.

Please read this Privacy Policy carefully to understand our approach to your Personal Information. If you do not agree with these practices, do not use the Platform. By accessing or using the Platform, you accept and consent to the terms of this Privacy Policy.

2. Information That Bondorra Collects About You We collect Personal Information about you in the following ways:

Directly from you. When you subscribe to communications, create an account, make a purchase, or request information from Bondorra, we may ask for your name, contact information (email address and phone number), billing/shipping details, and account credentials to fulfill your request. You may provide similar information if you book an appointment through the Platform, attend events or trade shows with us, or contact us directly. If you submit Personal Information relating to other individuals, you are responsible for ensuring you have the necessary permission and authority for us to use that information as described in this Privacy Policy (e.g., by obtaining their consent).

From third parties. We may receive information from marketing partners (such as ad networks, affiliates, and social media platforms), data providers, event organizers, public databases, or research collaborators. This can include your name, contact details, professional information, or publicly accessible content. We may also obtain data through partnerships or joint data projects as part of our operations.

Automatically through Platform usage. We collect data on your interactions with the Platform, such as device information (e.g., IP address and technical identifiers), your actions on the site, and information gathered via cookies, pixel tags, and similar tracking technologies (collectively “cookies”). For more details, please refer to our separate Cookies Policy.

3. How Bondorra Uses Information It Collects About You We use the Personal Information we collect or that you provide for the purposes listed below:

To operate and improve the Platform. This includes delivering, personalizing, and enhancing the Platform—such as enabling network connectivity, analyzing usage, diagnosing issues, ensuring security, conducting testing and development, identifying trends, generating reports, and delivering automatic updates to maintain current features and security.

To deliver AI-enhanced features. Certain Platform functionalities use artificial intelligence to improve performance. We apply AI only to provide you with the specific services you request and do not use your Personal Information to train general-purpose public AI models. We engage specialized subprocessors under strict contractual limits that restrict their data use to delivering the requested service.

For customer support. To assist you with Platform-related inquiries and issues.

For internal business purposes. Including accounting, auditing, billing, contract compliance, and related operational activities.

For communication. To send Platform updates, account notifications, service alerts (e.g., security notices or subscription changes), respond to support requests, conduct voluntary surveys or research, and share marketing or informational content (such as newsletters) in line with your preferences.

To ensure security. To detect, prevent, and respond to fraud, unauthorized access, or other security threats.

For marketing and advertising. To personalize content and offers, manage promotions, perform targeted advertising, evaluate campaign effectiveness, and leverage affiliate referral data for relevant promotions.

For analytics and Platform enhancement. To compile usage statistics and reports that help us understand user behavior, anticipate needs, and improve the overall experience.

To meet legal and compliance obligations. To fulfill regulatory, legal, or contractual requirements and protect our rights.

LEGAL BASIS FOR PROCESSING: In jurisdictions such as the EEA, UK, or Brazil, we must have a lawful basis to process Personal Information. This may include your consent, necessity for performing a contract, compliance with legal obligations, or our legitimate interests (e.g., business administration, marketing, product improvement, fraud prevention, and security)—unless your rights and freedoms override those interests.

We will clearly indicate when providing information is mandatory (e.g., for legal or contractual reasons) and explain any consequences of refusal. Where we rely on legitimate interests, we provide transparent notice about those interests.

Bondorra s.r.o. is the Data Controller for Personal Information collected directly through the Platform in the EEA and UK (except for Processor Services, where we act as Data Processor), unless a different policy applies. Our contact details are listed in the “HOW TO CONTACT US” section.

For more information on the legal basis for any specific processing activity, contact us using the details below.

4. How Bondorra Protects Your Information We apply reasonable administrative, technical, and organizational measures to protect Personal Information from risks including unauthorized access, loss, destruction, or unlawful processing. We require comparable safeguards from our vendors and service providers. Platform users are also responsible for securing their own devices, networks, and accounts. While we strive for strong protection, no system is completely secure. If you suspect a breach (e.g., compromised login details), please notify us immediately via the “HOW TO CONTACT US” section.

5. When Bondorra Shares Your Information We may disclose Personal Information to:

Affiliates and subsidiaries — for purposes consistent with this Privacy Policy.

Service providers — to perform contracted services (e.g., hosting, analytics, IT support, auditing). We may share anonymized or aggregated data for trend analysis and service development. Contracts require protection and restricted use of the data.

Business partners — for joint promotions, product integrations, or affiliate referrals (e.g., sharing name, email, and plan details with referring affiliates).

Advertising and marketing partners — to deliver and personalize ads/content, assess performance, and use location or cookie-based data (manage preferences via device settings or contact us; see “Your Choices & Rights”).

Third-party services you connect — when you link accounts or install apps (e.g., YouTube/Google API), their privacy policies govern; you can revoke access through their settings.

Corporate transactions — in connection with mergers, sales, reorganizations, or similar events.

Legal and regulatory purposes — when required by law, subpoenas, investigations, or to protect rights.

With your consent or direction — when you explicitly authorize or instruct disclosure.

We do not share your phone number or opt-in consent records with third parties without your express written permission. Bondorra utilizes trusted subprocessors for infrastructure hosting, analytics, payment processing, communication delivery, and platform functionality. These providers process data under contractual safeguards and only on our instructions.

6. Data Retention We retain Personal Information only for as long as necessary to achieve the purposes for which it was collected, to satisfy legal, tax, accounting, or reporting obligations, or as otherwise described here. Retention may be extended in cases of disputes or anticipated legal action. We assess retention based on data volume, sensitivity, risks, purposes, and legal requirements. In some cases, you may request deletion (see “YOUR LEGAL RIGHTS”). We may anonymize data for research or statistics, allowing indefinite use without further notification.

7. Information From Children We do not knowingly collect Personal Information from individuals under 16 years old. If we become aware of such collection, we will promptly delete the data. Children under 16 should not provide any Personal Information to us. If you believe a child under 16 has submitted data, please inform us using the contact methods in “HOW TO CONTACT US.”

8. Links to Other Websites and Services We are not responsible for the privacy practices or content of third-party websites, services, or organizations linked from or to the Platform, including social media platforms, app developers, or device providers. Links do not constitute endorsement.

9. Do Not Track The Platform does not respond to browser “Do Not Track” signals at this time.

10. YOUR LEGAL RIGHTS Your rights regarding Personal Information depend on your location. These may include access, correction, deletion, or marketing opt-outs. Contact us via “HOW TO CONTACT US” for more details if your region is not specifically covered below.

11. European Privacy Rights Under the GDPR, UK GDPR, or Swiss nFADP, you may have rights including:

Access, portability, correction, or deletion (subject to necessary retention for legal or transactional purposes).

Objection to or restriction of processing.

Withdrawal of consent (without affecting prior lawful processing).

Complaints to supervisory authorities (e.g., ICO in the UK, local EU/Swiss authorities) or JAMS for DPF-related issues.

Manage marketing preferences through the contact methods below; transactional/service messages may continue.

12. U.S. Privacy Rights Residents of states with applicable privacy laws (e.g., California, Colorado, Virginia, etc.) may have rights to opt out of “sales,” “sharing,” or targeted advertising (via the “Do Not Sell or Share My Information” link or contact us), access/correction/deletion, non-discrimination, appeals, and agent designation. We limit sensitive data use and avoid significant automated decision-making. Categories of Personal Information that may be collected or processed include identifiers, commercial information, internet activity, and inferred preferences for business and advertising purposes with affiliates, providers, and partners , commercial information, and inferences—for business and advertising purposes with affiliates, providers, and partners.

13. Australian Privacy Rights Australian residents may request access or correction (typically within 30 days, possible fee) or lodge complaints with us or the OAIC.

14. Canadian Privacy Rights Under PIPEDA, you may request access or correction (with identity verification, possible fee). Consent may be withdrawn (no effect on prior processing). Quebec residents may have additional rights—contact us for clarification.

15. International Data Transfers As a company based in the Czech Republic, we may transfer Personal Information to affiliates, partners, or service providers in other countries (including outside the EU). Transfers comply with applicable law. For data from the EEA, UK, or Switzerland transferred outside these areas, we rely on mechanisms such as the EU-U.S. DPF (where relevant), standard contractual clauses, or other approved safeguards.

16. Data Privacy Framework Where relevant, Bondorra relies on lawful transfer mechanisms including Standard Contractual Clauses or other approved safeguards for cross-border data transfers. Bondorra does not claim certification under the EU-U.S. Data Privacy Framework unless explicitly stated.

17. Privacy Policy Updates We may update this Privacy Policy from time to time. If required by law, we will notify you of material changes. Your continued use of the Platform following updates constitutes acceptance—please review periodically.

18. How To Contact Us About This Privacy Policy For questions or to exercise your rights, contact us at [email protected] or by mail at:

Bondorra s.r.o. Legal Department Rybna 24 Prague 1, CZ-11000 Czech Republic

For EU/UK/Swiss DPF-related inquiries or complaints, please email [email protected] . We aim to resolve concerns promptly.