Privacy policy

1. Who is responsible for your data

Data controller — Агенция AMBER 360, UIC 208947156, address: [FILL: legal_address].

For any questions about your data, write to hello@360-amber.com. We do not have a separate data protection officer — requests are handled by the AMBER 360 team.

2. What data we receive

• —Website forms: name, company, contact details (email, phone, WhatsApp or Telegram), task description, selected answers (task, country), page language and the consent checkbox.
• —AI assistant in the chat: the messages you write. If you agree to leave your contact details — name, preferred channel and contact, plus your answers about the task.
• —AMBER 360 Estate: answers about the purpose of purchase, country, budget and timing, name and contact — for property selection.
• —Emails and messages you send us directly.
• —Technical data: IP address, browser and device type, pages visited — seen by the website hosting and statistics, and by Google Fonts when fonts load.

We do not ask for or collect data about health, religion or other special categories of data. No payment details are entered on the website.

3. Why and on what legal basis

• —To answer your request and prepare a proposal — steps prior to entering into a contract at your request, and your consent (Art. 6(1)(b) and 6(1)(a) GDPR).
• —To perform the contract — Art. 6(1)(b) GDPR.
• —To pass your request to a partner (for example, the developer of the selected property in AMBER 360 Estate) — only with your separate consent, Art. 6(1)(a) GDPR.
• —Visit statistics and website security — our legitimate interest, Art. 6(1)(f) GDPR.
• —Accounting and tax records for contracts — legal obligation, Art. 6(1)(c) GDPR.

We do not sell data or use it for third-party advertising.

4. AI assistant

The website chat is run by an AI assistant, not a person — it says so at the start of the conversation (Art. 50 of the EU Artificial Intelligence Act). Replies are generated by Anthropic’s Claude model: for this, the text of your messages is sent to Anthropic.

The assistant notes how urgent and complete a request is so that a manager can reply in the right order. The assistant does not make decisions with legal effects for you — a person does. You can ask to be connected with a manager at any time.

5. Who we share data with

Only with providers the website and our communication with you cannot work without — to the extent needed for their task:

• —Tilda — website hosting and visit statistics.
• —Make — receiving form submissions (server in the EU).
• —Hetzner Online — AI assistant server (Finland, EU).
• —Supabase — request database (United Kingdom).
• —Anthropic — AI assistant model (USA).
• —Telegram — notifying a manager about a new request.
• —Google — loading website fonts (Google Fonts).
• —Partners (developers, agencies, companies you want to contact) — only with your separate consent.
• —Accountant and lawyers — where required by law or contract.

Some providers are located outside the EU. The United Kingdom is covered by a European Commission adequacy decision. Transfers to the USA and other countries rely on an adequacy decision (EU–US Data Privacy Framework) or the EU Standard Contractual Clauses: [FILL: verify the basis in each provider’s DPA].

6. How long we keep data

• —Requests that did not lead to a contract — [FILL: 24 months] after the last contact.
• —AI assistant conversations without contact details — [FILL: 12 months].
• —Contract data — for the term of the contract and the periods required by Bulgarian accounting law.
• —If you withdraw consent or ask us to delete your data, we delete it sooner unless the law requires us to keep it longer.

7. Your rights

At any time you can:

• —find out what data we hold about you and get a copy;
• —correct inaccurate data;
• —ask us to delete your data or restrict its processing;
• —receive your data in a machine-readable format to transfer it elsewhere;
• —object to processing based on our legitimate interest;
• —withdraw your consent — this does not affect processing carried out before withdrawal.

Write to hello@360-amber.com — we will reply within one month. If you believe we are violating your rights, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.

8. Cookies and browser storage

Your choice of light or dark theme is stored only in your browser and is not sent to us. The Tilda platform may use technical cookies and visit statistics cookies. There are currently no advertising pixels (Meta, Google Ads or similar) on the website — if any are added, we will update this policy and ask for consent.

9. Other

The website is intended for companies and adult users; we do not knowingly collect data from anyone under 16. How we protect the website and how to report a vulnerability — see our Security policy. We announce changes to this policy through the update date at the top of the page.

← Back to home