Privacy Policy

1. Who we are

This site is operated by NINE TAPS EOOD, a company registered in Bulgaria under registration number 208634720 (VAT BG208634720). Our registered address is Mladost 2, Blok 204, 1799 Sofia, Bulgaria.

For any privacy-related questions you can reach us at contact@ninetaps.com.

2. What we collect

We process the minimum personal data necessary to operate the site and respond to enquiries:

• Contact form submissions: your name, phone number, current website, and any message you include.
• Analytics and campaign measurement: usage and advertising-attribution data via Google Analytics, Meta Pixel and PostHog, enabled by default unless you have saved a preference to disable tracking. OpenAI Pixel collects measurement data only after you explicitly enable optional tracking in the preference controls.
• Server logs: IP address and user agent for security and abuse prevention. Retained 30 days.

3. Why we process it

• To respond to your enquiry (legal basis: legitimate interest in conducting business communication).
• To measure how the site is used, attribute campaign results, and improve the site. You can control this measurement using the tracking preferences described below.

4. Third parties

We share data with the following processors only for the purposes above:

• Vercel Inc.: site hosting and CDN (USA).
• Resend: transactional email delivery for contact-form messages.
• Google LLC: Google Analytics, enabled by default unless you have disabled tracking in your saved preferences.
• Meta Platforms Ireland Limited: Meta Pixel and Conversions API for campaign measurement, enabled by default unless you have disabled tracking in your saved preferences.
• PostHog: page visits, clicks, section exposure, scroll depth, active time, form progression, technical error categories and masked session replays, processed in our EU-region project. Input values, contact messages, clipboard content, console logs and network request/response bodies are excluded. Anonymous browser identifiers connect visits and events; they do not identify every visitor. This measurement follows the same saved tracking preference.
• OpenAI: OpenAI Pixel measures visits and successfully submitted enquiries after consent. It uses an ad click reference and the __oppref attribution cookie. If automatic advanced matching is enabled in the Pixel settings, the SDK may detect contact information in forms and hash it with SHA-256 in the browser before transmission. This measurement loads after consent.
• Calendly: appointment scheduling, loaded only when you open the “book a call” panel.

All transfers outside the EEA are governed by Standard Contractual Clauses where applicable.

5. Cookies

We use a small number of cookies. A strictly necessary entry remembers your tracking preference. Google Analytics, Meta and PostHog measurement are enabled by default unless you have saved a refusal. OpenAI measurement loads only after explicit opt-in. We do not display a cookie banner automatically. You can disable tracking or enable it again at any time: change your cookie preferences.

6. Retention

Contact-form messages are retained as long as needed to respond and for follow-up, typically up to 24 months. Server logs are kept 30 days.

7. Your rights

Under the GDPR you have the right to:

• Access the data we hold about you
• Ask us to correct or delete it
• Withdraw consent at any time
• Object to processing or request restriction
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP)

To exercise any of these rights, email contact@ninetaps.com. We respond within 30 days.

8. Changes

We may update this policy as the service evolves. The “Last updated” date at the top reflects the most recent revision.