Privacy Policy
1. Who we are
OF-PRO Intelligence EOOD is an intelligence company registered in Bulgaria (EU). We provide OSINT and intelligence services across two tracks: Business Intelligence and Due Diligence (European market) and Threat Intelligence for High-Risk Operations (international).
Data controller: OF-PRO Intelligence EOOD, Bulgaria
Contact: operations@ofpro-intelligence.eu
2. What data we collect and why
- Enquiries (contact, Quickscan and High-Risk Operations forms): name, company, email address, phone number, the service or track you select, and your message. Used to respond to your enquiry and assess engagement fit.
- Sample report requests: name, organisation and email address. Used to give you access to the sample report and, where relevant, to follow up on your request.
- Briefing list: your email address, when you unlock a Public Intelligence Briefing and tick the consent box, or when you subscribe by email. Used to send you intelligence briefings and updates.
- Email: the content of emails you send us and your email address.
- Usage statistics (only if you accept analytics): pages visited, approximate location, device and browser information and session data, via Google Analytics 4 (see section 4).
- Server logs: when you visit the site, our hosting provider automatically processes your IP address, the requested page, date and time, and browser information to deliver the site and keep it secure.
- Engagement data: information about the principal(s) relevant to a contracted engagement. Collected only after a signed engagement agreement.
All fonts are self-hosted. No advertising networks are used. We do not sell personal data.
3. Legal basis for processing
- Enquiries and sample report requests: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Article 6(1)(f) GDPR).
- Briefing list: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
- Usage statistics: your consent (Article 6(1)(a) GDPR), given via the cookie banner.
- Server logs and site delivery: our legitimate interest in operating a secure and functioning website (Article 6(1)(f) GDPR).
- Engagement work: performance of a contract (Article 6(1)(b) GDPR) and/or explicit consent where applicable.
4. Cookies and analytics
Google Analytics 4 is loaded only after you click Accept in the cookie banner. It then sets two cookies, _ga and _ga_4RWHZ1SRVR, which contain a random identifier and are kept for up to 2 years. If you click Decline, Google Analytics is not loaded and no analytics cookies are set.
Your choice is stored in your browser (local storage, key ofpro_analytics_consent) so the banner does not reappear. This is strictly necessary to remember your choice and contains no personal data.
Withdrawing consent: click Cookie settings at the bottom of any page. This deletes the analytics cookies, stops Google Analytics on this site and shows the banner again, where you can choose Decline. You can also delete the cookies and site data for ofpro-intelligence.eu in your browser settings, or use the Google Analytics Opt-out browser add-on.
5. Processors and recipients
We use the following service providers, which process personal data on our behalf:
- Formspree, Inc. (United States): receives and stores all form submissions on this website.
- Google (Google Ireland Limited / Google LLC, United States): Google Analytics 4, only with your consent.
- Hostinger: website hosting and content delivery, including server logs.
- Proton AG (Switzerland): our email service.
Where personal data is transferred outside the European Economic Area, this takes place on the basis of an adequacy decision of the European Commission (such as for Switzerland and for companies certified under the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses. Engagement data is never shared with any third party.
6. Data retention
- Enquiries and sample report requests: a maximum of 90 days, including in Formspree, and then permanently deleted, unless an engagement commences.
- Briefing list: until you unsubscribe or withdraw your consent.
- Usage statistics: analytics data is kept in Google Analytics for a maximum of 14 months; the cookies for up to 2 years.
- Server logs: kept by our hosting provider for a limited period for security and operational purposes.
- Engagement data: engagement reports and associated data are deleted after confirmation of receipt by the client, by design and by policy. We do not maintain archives of client intelligence data.
7. Your rights under GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal
- Lodge a complaint with a supervisory authority, in Bulgaria the Commission for Personal Data Protection (cpdp.bg), or the authority in your own country
To exercise any of these rights, or to unsubscribe from the briefing list, contact us at operations@ofpro-intelligence.eu.
8. Security
All traffic to this website and all form submissions are encrypted in transit (HTTPS). Engagement data is handled under strict operational security protocols. We apply the principle of data minimisation throughout: we collect only what is strictly necessary and delete it as soon as the purpose is fulfilled.
9. Changes to this policy
When this policy changes, we update the version number and date above.