Privacy policy

The data controller is the operator of BGHarvest. We process personal data to perform a contract (account and listings), on legitimate interest (security, abuse prevention), and with consent where applicable.

What we collect: name, email, password (stored as a hash), phone (optional), seller profile data (incl. EIK / Regulation 3 for verification), listing and inquiry content, technical logs.

Your phone number is shown only to registered users and never to unregistered visitors or in public page HTML.

Uploaded photos are re-encoded and stripped of metadata (including GPS coordinates).

Retention: your account and data are kept while the account is active. You may request export or deletion — on deletion the account is anonymised and personal data erased.

Your rights: access, rectification, erasure, restriction, portability and objection — contact us by email. You may lodge a complaint with the Bulgarian DPA, CPDP (www.cpdp.bg).

We use no third-party tracking cookies. Session cookies are required for login and platform operation.