Privacy Policy

Last updated: 16 July 2026

1. Who We Are

This Privacy Policy explains how personal data is processed in connection with the SEO.Domains Mastery Summit (the “Event”), taking place on 9–11 September 2026 at Hotel Marinela Sofia, Sofia, Bulgaria, and in connection with the website seodomainsmasterysummit.com (the “Website”).

The data controller is:

SecureBackorder Ltd
VAT No.: BG206188536
Registered address: Sofia 1463, 8 Knyaz Boris I, fl. 4, app. 12, Bulgaria
Legal representative: Emil Zagorski
Email: [email protected]

(“we”, “us”, “our”, the “Organizer”)

We are a Bulgarian company and we process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and the Bulgarian Personal Data Protection Act. The Event is presented in partnership with SEO Mastery Summit and SEO.Domains (the “Co-organizing Brands”); however, SecureBackorder Ltd is the sole controller of personal data collected through the Website and at the Event, except where this Policy states otherwise.

2. What Data We Collect

Depending on how you interact with us, we may collect:

a) Ticket registration data — first and last name, email address, company name, job title (if requested at registration), and the names and email addresses of additional attendees included in your order.

b) Billing and payment data — billing name, company name, billing address, VAT number (if provided for invoicing), and payment confirmation data. Card payments are processed by Stripe; we never receive or store your full card number. Stripe processes your payment data as described in its own privacy policy (https://stripe.com/privacy).

c) Waitlist and newsletter data — email address and name (if provided) when you join the ticket waitlist or subscribe to Event updates.

d) Correspondence — the content of emails you send to [email protected] and our replies.

e) Website and technical data — IP address, browser type, device information, pages visited, and cookie data as described in Section 9 below.

f) Event attendance data — check-in confirmation at the venue and badge information.

g) Photographs — we may engage photographers in designated areas of the Event (such as the registration/check-in area and evening networking functions). Sessions are not video recorded. See Section 6.

We do not knowingly collect data from persons under 18, and the Event and Website are not intended for them.

3. Why We Process Your Data and On What Legal Basis

Purpose	Data	Legal basis (GDPR)
Processing your registration, issuing tickets, admitting you to the Event, providing support	Registration data, attendance data, correspondence	Art. 6(1)(b) — performance of a contract
Payment processing and issuing invoices	Billing and payment data	Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligations under Bulgarian tax and accounting law
Sending you essential service communications about the Event (ticket confirmations, schedule changes, venue information)	Registration data	Art. 6(1)(b) — contract; Art. 6(1)(f) — legitimate interest in informing attendees
Including a limited amount of clearly-marked sponsor content in Event emails sent by us. Sponsors never receive your contact details; you can opt out of sponsor content at any time via the link in each such email	Registration data	Art. 6(1)(f) — legitimate interest in funding and organizing the Event, with an easy opt-out
Ticket waitlist and Event news emails	Waitlist/newsletter data	Art. 6(1)(a) — your consent (you may unsubscribe at any time)
Marketing communications from the Co-organizing Brands (SEO Mastery Summit and SEO.Domains)	Name, email	Art. 6(1)(a) — your separate, explicit opt-in consent, given for example via a signup form or an opt-in invitation after purchase. We do not share your data with the Co-organizing Brands for their marketing without this consent
Event photography for documentation and promotion of the Event and future editions	Photographs	Art. 6(1)(f) — legitimate interest, with clear notice and the ability to object (see Section 6)
Event security, safety, and enforcement of our Terms & Conditions	Registration and attendance data, correspondence	Art. 6(1)(f) — legitimate interest
Fraud prevention in ticket sales	Registration, billing, and technical data	Art. 6(1)(f) — legitimate interest
Website operation and non-essential cookies	Technical and cookie data	Art. 6(1)(f) — legitimate interest for strictly necessary cookies; Art. 6(1)(a) — consent for all other cookies (see Section 9)
Establishing, exercising, or defending legal claims	Any of the above, as relevant	Art. 6(1)(f) — legitimate interest

We do not use your data for automated decision-making producing legal effects, and we do not sell your personal data.

4. Who Receives Your Data

We share personal data only as needed with:

Stripe — payment processing.
HighLevel Inc. (“GoHighLevel” / LeadConnector) — the platform on which the Website, forms, email delivery, and customer records are operated.
The Event venue (Hotel Marinela Sofia) — only where necessary for access, safety, or catering arrangements.
The Co-organizing Brands (SEO Mastery Summit and SEO.Domains) — only if you have given your explicit marketing opt-in consent, or in anonymized/aggregated form (e.g., overall attendance statistics).
Professional advisers and public authorities — accountants, lawyers, tax authorities, and other bodies where we are legally required to disclose data.

We do not share attendee lists with sponsors or other third parties for their marketing purposes without your consent. Where a sponsor’s promotional content appears in an Event email, the email is sent by us from our own systems — the sponsor does not receive your contact details.

5. International Data Transfers

Some of our service providers (including Stripe and HighLevel Inc.) are based in, or process data in, the United States. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards under Chapter V GDPR, such as the EU–US Data Privacy Framework (where the provider is certified) and/or the European Commission’s Standard Contractual Clauses. You may contact us for more information about the safeguards applied.

6. Photography at the Event

Photographers engaged by us may take photographs in designated areas of the Event, such as the registration/check-in area and evening networking functions. Sessions are not video recorded. Photographs may be used to document and promote the Event and future editions on the Website, in social media, and in marketing materials of the Organizer and the Co-organizing Brands.

Areas where photography takes place will be clearly indicated. If you do not wish to be photographed, please inform the photographer or the registration desk, and we will make reasonable efforts to accommodate your request, including not using identifiable images of you upon your objection. To object to the use of a specific published photograph in which you appear, email [email protected].

7. How Long We Keep Your Data

Registration and attendance data — for the duration of the Event cycle and up to 5 years thereafter, corresponding to the general limitation period for claims under Bulgarian law.
Invoices and accounting records — 10 years, as required by Bulgarian accounting and tax legislation.
Waitlist and marketing data — until you unsubscribe or withdraw consent, after which you are removed from active mailing lists (a suppression record may be kept to honor your opt-out).
Correspondence — up to 5 years after the matter is closed.
Photographs — for as long as they remain relevant to documenting and promoting the Event and its future editions, subject to your right to object.
Cookie data — per the lifespans described in Section 9.

When data is no longer needed, it is deleted or anonymized.

8. Your Rights

Under the GDPR you have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase your data (“right to be forgotten”), where applicable;
restrict processing in certain circumstances;
object to processing based on legitimate interest, including to Event photography and to any direct marketing;
data portability for data processed by automated means on the basis of contract or consent;
withdraw consent at any time (e.g., unsubscribe links in every marketing email, or by emailing us), without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email [email protected]. We will respond within one month, extendable in complex cases as permitted by the GDPR. We may need to verify your identity before acting on a request.

You also have the right to lodge a complaint with the Bulgarian supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, www.cpdp.bg — or with the supervisory authority of your EU member state of residence.

9. Cookies

9.1 What cookies are

Cookies are small text files placed on your device when you visit a website. They are used to make websites work, to remember your preferences, and — where you consent — to analyze traffic and personalize content.

When you first visit the Website, a cookie banner lets you choose between “Accept all” and “Accept essential.” Strictly necessary cookies are set regardless of your choice because the Website cannot function without them; all other cookies are set only if you choose “Accept all.” You can change or withdraw your choice at any time via the Cookie Settings link in the Website footer, or by clearing cookies in your browser (which will cause the banner to reappear).

9.3 Cookies we currently use

Strictly necessary cookies — set by our website platform (GoHighLevel / LeadConnector) and our payment provider (Stripe) to operate the Website, keep forms and the checkout functioning, remember your cookie choice, and protect against fraud. Legal basis: legitimate interest; consent is not required for these.

Functional/platform cookies — set by GoHighLevel / LeadConnector to support form submissions, waitlist signups, and communication features. Where these are not strictly necessary, they are set only with your consent.

9.4 Cookies we may introduce

We may in the future introduce the following tools, which will be activated only with your consent via the cookie banner, and this section will be updated before they are used:

Google Analytics (Google Ireland Ltd. / Google LLC) — traffic and usage analytics.
Meta Pixel (Meta Platforms Ireland Ltd.) — advertising measurement and audience building.
Microsoft Clarity (Microsoft Ireland Operations Ltd.) — session analytics and heatmaps.

These providers may process data in the United States; the safeguards described in Section 5 apply.

9.5 Managing cookies in your browser

You can also block or delete cookies through your browser settings. Note that blocking strictly necessary cookies may prevent parts of the Website (including checkout) from working.

10. Data Security

We apply appropriate technical and organizational measures to protect personal data, including encrypted connections (HTTPS), access controls limiting data access to authorized personnel, and reliance on established service providers (Stripe, GoHighLevel) that maintain their own security programs. No method of transmission or storage is completely secure, but we take reasonable steps to protect your information and will notify you and the competent authority of any personal data breach where required by the GDPR.

11. Changes to This Policy

We may update this Policy from time to time. The current version is always available on the Website with its “Last updated” date. Material changes will be communicated to registered Participants by email where appropriate. If we introduce new cookies or new processing purposes, we will update this Policy and, where required, request your consent before they take effect.