Privacy notice
Written to be read. If anything here is unclear, email us and we will answer in plain language rather than sending you back to this page.
Last updated 30 August 2026.
01 — Who is responsible
Aurum (Aurum AI Systems Studio), Sofia, Bulgaria, is the data controller for this website and for enquiries sent through it.
Email contact@aurumaiofficial.com · Phone +359 89 350 6929
When we build and operate a system for a client, that client is the controller of their customers' data and we act as their processor under a written agreement. This notice covers our own site and our own enquiries only.
02 — What we collect
The contact form asks for your name, business name, email address, phone number, industry, rough enquiry volume, and whatever you write in the message field. Nothing on the form is collected that we do not need to prepare your audit.
We use Plausible Analytics, which sets no cookies, stores no data on your device and does not build a profile of you. It counts page views and referrers in aggregate. This is why you are not seeing a cookie banner — there is nothing to consent to.
If you book an audit, we call your business the way a customer would. Where a call is recorded, everyone on it is told at the start, and the recording exists to produce your log. You can ask us to delete it at any point, including after you have read the findings.
We do not sell your details, share them with advertising networks, add you to a list you did not ask for, or use your enquiry to train a model.
03 — Lawful basis and retention
Under the GDPR we rely on two grounds, and only two.
Article 6(1)(b) — steps at your request before a contract. This covers everything you submit through the contact form and everything produced by the audit. Held for 24 months from our last contact, then deleted.
Article 6(1)(f) — legitimate interest. This covers aggregate site analytics, where our interest is knowing which pages are read and yours is not being tracked. Aggregate counts only, retained indefinitely because they identify nobody.
If you become a client, a separate data processing agreement governs your customers' data and takes precedence over this notice.
04 — Who else touches it
Hosts this site and receives contact form submissions. Data is processed under Netlify's standard terms with EU standard contractual clauses in place.
EU-hosted, cookieless, no personal data. Owned and operated within the European Union.
Our own email and scheduling providers hold your correspondence for as long as the enquiry is live, on the retention schedule above.
Systems we operate for clients run on EU infrastructure by default. Where a component has no EU option, we say so before it is deployed and the client decides.
05 — Your rights
You can ask us for a copy of what we hold, correct it, delete it, restrict what we do with it, take it elsewhere in a portable format, or object to processing based on legitimate interest.
Email contact@aurumaiofficial.com. We answer within 30 days and there is no charge. We will not ask you why.
If you are not satisfied with how we handled it, you can complain to the Bulgarian Commission for Personal Data Protection — Комисия за защита на личните данни, cpdp.bg, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
06 — Changes
We update this notice when what we do changes, not on a schedule. The date at the top is the date of the last change. If a change materially affects people who have already contacted us, we email them rather than relying on them re-reading this page.