KidzAssist Privacy Policy

1. General Provisions

This Privacy Policy governs the procedures, conditions, and principles under which Kidz Assist Ltd., UIC 208404356, with registered office and business address at 15 Sinemorets Street, Bankya, 1320, Bulgaria (hereinafter referred to as the “Controller” or “KidzAssist”), processes personal data of natural persons using the KidzAssist platform.

This Policy has been prepared in accordance with the requirements of Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act, and all applicable secondary legislation.

By using the Platform, the User confirms that they have read and accepted the contents of this Privacy Policy.

2. Data Controller and Contact Information

Kidz Assist Ltd.UIC: 208404356Address: 15 Sinemorets Street, Bankya, 1320, BulgariaEmail: [email protected]Phone: +359 879 270 762

2.1. Data Protection Officer (DPO)

At present, KidzAssist is not legally required to appoint a Data Protection Officer under Article 37 of the GDPR.

If a DPO is appointed in the future, the contact details will be published in an updated version of this Policy.

3. Categories of Personal Data We Process

3.1. Registration Data

• First and last name
• Email address
• Phone number
• City / location
• User type (Parent / KidzHelper)

3.2. Data Related to KidzHelpers

• Biography
• Education, qualifications, and certifications
• Professional experience
• Profile photo (optional)
• Available days / working hours
• Subscription and payment-related information

3.3. Data Generated During Use of the Services

• Bookings, requests, and searches
• Communication between users
• Reviews and ratings
• Security logs (IP address, device identifier)

3.4. Payment Data

• Name / company name, company registration number, billing address (for invoicing)
• Transaction number

KidzAssist does not process or store bank card numbers.

3.5. Children’s Data

The Platform provides services related to children but does not directly collect personal data from children unless voluntarily provided by a parent (for example, child name or age).

Such information is processed solely for the purposes of delivering the requested service.

4. Legal Basis for Processing

KidzAssist processes personal data only where a valid legal basis exists, including:

• Performance of a contract — to provide Platform services
• Consent — for marketing communications, newsletters, and profile photos
• Legal obligation — accounting and tax compliance
• Legitimate interest — security, fraud prevention, abuse prevention, and service improvement

5. Purposes of Processing

Personal data is processed for the following purposes:

• Registration and maintenance of user profiles
• Connecting parents with KidzHelpers (babysitters, tutors, companions)
• Managing bookings and communication
• Processing payments
• Improving Platform functionality and security
• Analytics and statistical reporting (anonymized where possible)
• Sending important system notifications
• Preventing abuse and violations

6. Categories of Data Recipients

Personal data may be shared only when necessary and where a legal basis exists with:

• Accountants or accounting firms
• Payment service providers (such as Stripe, Paysera, or other partners)
• Hosting providers and IT support under confidentiality agreements
• Competent public authorities (such as the tax authority, police, or courts) where legally required

KidzAssist does not sell, rent, or disclose personal data to advertising networks or third parties outside the cases described above.

7. Transfers of Data Outside the EU

Where transfer of personal data to a country outside the EU/EEA is necessary (for example, when using service providers with servers located outside the EU), such transfer shall occur only where one of the following safeguards applies:

• An adequacy decision by the European Commission
• Standard Contractual Clauses (SCCs) approved by the European Commission

KidzAssist ensures that all required safeguards are applied in such cases.

8. Data Retention Periods

Personal data is stored as follows:

• While the user profile remains active
• Up to 5 years after termination of the contractual relationship where required by accounting or tax laws
• Security logs — up to 1 year
• Marketing data — until consent is withdrawn

After the applicable retention period expires, data is deleted or anonymized.

9. Automated Processing and Profiling

KidzAssist does not make automated decisions that produce legal or similarly significant effects on users.

The Platform may perform automated sorting and recommendations, such as showing relevant KidzHelpers based on location and availability. This does not constitute profiling within the meaning of the GDPR.

10. Rights of Data Subjects

Each User has the right to:

• Access their personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Request restriction of processing
• Object to processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, contact us at:

Email: [email protected]Phone: +359 879 270 762

10.1. Right to Lodge a Complaint

If you believe your rights have been violated, you may lodge a complaint with the competent supervisory authority:

Commission for Personal Data Protection (Bulgaria)Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria

11. Cookies

The Platform uses cookies for:

• Core functionality
• Security
• Traffic analytics
• Personalized user experience

Full details are available in the Cookie Policy.

12. Technical and Organizational Security Measures

KidzAssist implements security measures appropriate to the level of risk, including:

• SSL encryption
• Restricted access to the admin panel
• Protection against malicious attacks (firewalls, anti-malware systems)
• Access logging
• Internal confidentiality and security procedures

13. Protection of Children’s Data

The Platform is intended for adults only, namely parents and KidzHelpers.

Children’s data is processed solely through a parent or legal guardian, who bears responsibility for providing such data lawfully.

14. Changes to This Policy

KidzAssist may update this Privacy Policy in response to legal changes or changes in data processing practices.

Users will be notified of significant changes via email or system notification.

15. Entry into Force

This Privacy Policy enters into force as of the date of its publication on the KidzAssist Platform.