1. Scope

This Notice applies to houseofedit.studio, the free STAY ÉDIT diagnostic, checkout, private reports, product emails and support communications. It explains processing under the EU General Data Protection Regulation and applicable Bulgarian law.

2. Data we process

• Identity and contact data: name, email and organisation, if provided.
• Property and diagnostic data: property type, location, unit count, URLs, commercial indicators, answers, evidence, score, report and re-scores.
• Order data: selected product, price, timestamps, Stripe session/payment references, payment status and the legal confirmations recorded at checkout.
• Technical and security data: IP address and browser/server logs generated by hosting, rate limiting, security and email delivery systems.
• Support data: messages and information you send when requesting assistance.

Please do not submit guest personal data, card details, special-category data or other unnecessary confidential information.

3. Purposes and legal bases

• Contract: create checkout, confirm payment, generate and deliver the report, preserve private access, re-score and send service check-ins.
• Legal obligations: accounting, tax, consumer-protection and compliance records.
• Legitimate interests: secure the service, prevent abuse, diagnose faults, protect legal claims and improve product reliability, balanced against your rights.
• Consent: where separately requested, for optional marketing or technologies that legally require consent. Purchasing STAY ÉDIT does not subscribe you to marketing.

4. Automated analysis

STAY ÉDIT applies a consistent scoring model to the answers and property evidence you provide. It generates a commercial score, bottleneck, priorities and plan. The output concerns a property’s commercial readiness and is not used to make a legal or similarly significant decision about a person. You may contact us for an explanation or correction if input data is wrong.

5. Recipients and processors

Data is shared only as needed with service providers acting for us, including website hosting and email infrastructure (SuperHosting.BG), payment processing (Stripe), consent-based web analytics (Google Analytics 4 / Google), and technical support providers. Stripe independently processes payment and fraud-prevention data under its own privacy information. We may also disclose data where required by law, to professional advisers under confidentiality, or in connection with a lawful business transfer.

We do not sell personal data. We do not provide card numbers to STAY ÉDIT and do not store them.

6. International transfers

Some providers may process data outside the European Economic Area. Where applicable, transfers are protected by an adequacy decision, Standard Contractual Clauses or another lawful safeguard. You may ask us for information about the safeguard relevant to your data.

7. Retention

We keep data only for as long as needed for the purpose collected. Order and accounting records are retained for the periods required by Bulgarian tax and accounting law, which may be up to 10 years. Diagnostic answers and private reports are retained while needed to provide access, re-scoring and support, then reviewed for deletion or anonymisation. Security and delivery logs are kept for shorter operational periods unless an incident requires longer retention. Google Analytics user-level event data is retained for 14 months; aggregated reporting may remain available for longer. Legal-claim records may be held until the applicable limitation period expires. You may request earlier deletion where no overriding contractual or legal need applies.

8. Cookies and local storage

Google Analytics 4 is disabled by default. Its script is not loaded and analytics storage remains denied until you choose “Accept analytics”. If you accept, Google Analytics may set _ga cookies and process the page path without query parameters, approximate location, browser and device information, interactions, and non-identifying conversion events. We do not send form contents, email addresses, property answers or advertising identifiers to Google Analytics. Advertising storage, advertising user data and advertising personalisation remain denied.

Your analytics choice is remembered for 180 days. You can reopen “Cookie settings” at any time and withdraw consent; the site then disables analytics and removes its analytics cookies from this domain. The diagnostic uses browser session storage to preserve progress on your device. Stripe may set strictly necessary payment and fraud-prevention technologies when you open hosted checkout. Google Fonts may receive technical request data such as IP address and browser information when fonts load. Clearing browser storage may interrupt the diagnostic or checkout.

9. Your rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent without affecting prior lawful processing. You may also complain to the Bulgarian Commission for Personal Data Protection or the supervisory authority in your usual EU/EEA residence or workplace.

Send requests to hello@houseofedit.studio. We may ask for proportionate information to verify your identity and normally respond within one month.

10. Security

We use access controls, private report tokens, transport encryption, server-side validation, payment webhooks and restricted storage to protect the service. No system is risk-free. Please keep report links confidential and tell us promptly if you suspect unauthorised access.

11. Updates

We may update this Notice when the service, providers or law changes. The current version and date appear on this page. Material changes affecting an active service will be communicated where required.