GDPR Compliance Policy

SMS Plus (“we,” “our,” or “us”) is fully committed to ensuring compliance with the General Data Protection Regulation (GDPR). This document outlines how we collect, process, store, and protect personal data in accordance with GDPR requirements.

1. What is GDPR?

The General Data Protection Regulation (GDPR) is a European Union law designed to protect the privacy and personal data of EU citizens. It applies to all organizations that process or store personal data of individuals within the EU.

2. What Data Do We Collect?

  • Personal Data: Name, email address, phone number, and other identifying information provided during registration.
  • Client Data: Information provided by businesses about their clients, including names, phone numbers, and appointment details.
  • Usage Data: Data about how users interact with our platform.

3. How We Process Your Data

We process personal data to provide our services, including SMS notifications, appointment management, and integrations with third-party platforms like Google Calendar. Data processing is performed in accordance with legal bases outlined in GDPR (e.g., user consent, contract performance).

4. Data Protection Measures

We have implemented robust security measures to safeguard personal data, including encryption, secure access controls, and regular audits. All data is stored on secure servers within the EU or other GDPR-compliant regions.

5. User Rights Under GDPR

  • Right to Access: You can request a copy of your personal data.
  • Right to Rectification: You can update inaccurate or incomplete data.
  • Right to Erasure: You can request the deletion of your personal data (“Right to be Forgotten”).
  • Right to Data Portability: You can request your data in a structured, machine-readable format.
  • Right to Object: You can object to the processing of your data for specific purposes.

To exercise your rights, please contact us at contact@smsplus.bg

6. Data Retention

We retain personal data only as long as necessary to provide our services or comply with legal obligations. Once data is no longer needed, it is securely deleted.

7. Sharing Data with Third Parties

We may share personal data with trusted third-party providers to facilitate our services, such as SMS delivery services and integrations (e.g., Google Calendar). All providers comply with GDPR requirements.

8. Breach Notification

In the event of a data breach that affects personal data, we will notify affected users and relevant supervisory authorities within 72 hours, as required by GDPR.

9. Changes to This Policy

We may update this policy to reflect changes in data protection laws or our practices. Updated policies will be posted on this page with the revised effective date.

10. Contact Us

If you have questions or concerns about this GDPR Compliance Policy, please contact us:

  • Email: contact@smsplus.bg
  • Address: Bulgaria, Stara Zagora, Yagoda, ul. Cherni Vrah 30