Privacy Policy

1. Who we are

Oalee (“Oalee,” “we,” “us,” or “our”) operates oalee.com. For personal information collected through this website, Oalee is the data controller unless a different notice states otherwise.

Privacy questions and requests must be submitted through our Contact page.

2. Information we collect

• Contact information: your name, email address, message, and the choices you make when submitting the contact form.
• Technical and security information: IP address, request time, browser and device information, requested URLs, referring pages, diagnostic data, and security events that may appear in server or network logs.
• Cookie information: the strictly necessary session information described in our Cookies Policy.

Please do not send passwords, payment details, health information, government identifiers, or other sensitive information through the contact form.

3. How and why we use information

We use personal information only when reasonably necessary to:

• receive, review, and respond to messages you send;
• operate, maintain, troubleshoot, and secure the website;
• detect spam, fraud, abuse, attacks, and other prohibited activity;
• keep appropriate records and establish, exercise, or defend legal claims; and
• comply with applicable legal obligations.

We do not currently use your contact information for marketing, automated decision-making, or profiling.

4. Legal bases

Where the GDPR or similar law applies, our legal bases may include taking steps at your request before entering an agreement, our legitimate interests in responding to inquiries and protecting Oalee, compliance with legal obligations, and consent where the law specifically requires it.

Checking the contact-form box confirms that you have read and agree to the Terms and Conditions and this Privacy Policy. This acceptance does not convert every processing activity into consent-based processing.

5. Cookies and analytics

The contact form uses a strictly necessary session cookie for security, including session integrity, CSRF protection, and the security question. Oalee does not currently place analytics or advertising cookies. See the Cookies Policy for details.

6. Service providers and disclosures

We may disclose information to carefully selected providers that support website infrastructure, security, traffic delivery, email transmission, diagnostics, or professional services. These providers may process information only for their contracted purposes and subject to applicable safeguards.

Oalee uses Cloudflare for network delivery and security. Cloudflare may process technical information as described in its Privacy Policy.

We may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate misuse, or respond to a valid legal request. We do not sell or rent personal information.

7. International processing

Cloudflare may process technical information outside Bulgaria or the European Economic Area, including in the United States. Cloudflare explains the safeguards it uses for these transfers in its Privacy Policy.

If Oalee uses another provider that transfers personal information outside the European Economic Area, the transfer will be made only through a mechanism recognized under applicable data-protection law. Questions about international processing must be submitted through our Contact page.

8. Retention

Contact messages, technical records, and related information may be retained for as long as reasonably necessary to respond to inquiries, operate and protect Oalee, maintain business records, comply with legal obligations, and establish, exercise, or defend legal claims.

9. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

You may submit a request through the Contact page. We may request reasonable information to verify identity.

10. Security

We use reasonable technical and organizational measures intended to protect personal information. However, no website, network, transmission, or storage system is completely secure. To the fullest extent permitted by law, Oalee cannot guarantee absolute security or prevent every unauthorized act.

11. Children

The website and contact form are intended for adults and are not directed to anyone under 18. We do not knowingly request personal information from anyone under 18. A parent or guardian who believes a minor has submitted information should contact us so we can review and, where appropriate, delete it.

12. Changes and contact

We may update this Policy when our services, providers, or legal obligations change. The date above identifies the current version. Questions, requests, or concerns must be sent through our Contact page.