Privacy Policy

Last updated: March 1, 2026

1. Information We Collect
We collect information you provide directly when you fill out our contact form, subscribe to our newsletter, or engage with us through our website. This includes your name, email address, organization, phone number, and details about your project or inquiry.

We also collect certain information automatically when you visit our website, including your IP address, browser type, operating system, referring URLs, pages visited, and time spent on each page. This data is collected through cookies and similar technologies, as described below.

2. How We Use Your Information
We use the information we collect to respond to your inquiries and provide requested services, communicate with you about our solutions, assessments, and events, improve our website and user experience, comply with legal obligations, and protect against fraudulent or unauthorized activity.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. Cookies and Tracking Technologies
Our website uses a small number of cookies and similar technologies. Strictly necessary cookies are required for the site to function and are always active. Analytics cookies, which help us understand how visitors use the site, are loaded only after you give consent through our cookie banner.

When you first visit, a consent banner lets you accept or limit non-essential cookies. You can change your choice at any time by clearing this site’s cookies in your browser, or by adjusting your browser settings. As of the date above, we do not use advertising or marketing cookies, and we do not load analytics before you consent. For more detail, see the Cookie Notice in our Terms of Use.

4. Data Sharing and Third Parties
We may share your information with service providers who assist us in operating our website and delivering our services (such as hosting providers, email platforms, and analytics services), professional advisors including legal counsel and accountants, and law enforcement or regulatory authorities when required by law.

All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact form submissions are retained for 24 months unless an active business relationship exists. Personal data processed as part of a client engagement is governed by the separate agreement covering that engagement.

6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses TLS encryption for all data transmission, and we follow industry-standard practices for data storage and access controls.

7. Your Privacy Rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete data.
Deletion: Request that we delete your personal data, subject to legal obligations.
Portability: Request a copy of your data in a structured, machine-readable format.
Opt-out: Unsubscribe from marketing communications at any time.
How to exercise your rights. Email privacy@vitoshainc.com. We will take reasonable steps to verify your identity before responding, and we will respond within the timeframe required by applicable law (generally 45 days under U.S. state laws, extendable where permitted). We will not discriminate against you for exercising any of these rights.

California (CCPA/CPRA). California residents have the right to know what personal information is collected, used, and disclosed; the right to delete and correct; the right to opt out of the sale or sharing of personal information; and the right to limit the use of sensitive personal information. We do not sell or share personal information as those terms are defined under the CPRA, and we do not use sensitive personal information for purposes that would trigger a right to limit.

Other U.S. states. Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, and Texas, have similar rights, and the same request process applies.

8. Notice for EEA, UK & Swiss Residents
If you are in the European Economic Area, the United Kingdom, or Switzerland, Vitosha Inc acts as the controller of your personal data. We process it on the lawful bases of your consent, our legitimate interests in responding to your inquiries and operating our business, and compliance with legal obligations. You have the right to access, correct, delete, restrict, or object to processing, to data portability, and to lodge a complaint with your local supervisory authority. Where legally required, we will appoint an EEA/UK representative; contact privacy@vitoshainc.com for current details.

9. International Data Transfers
Vitosha Inc is headquartered in the United States and operates delivery centers in the United States, India (Hyderabad), and the United Arab Emirates (Dubai). Personal data you provide may be accessed by our personnel in, and transferred to, stored, and processed in, these locations. Where we transfer personal data from the EEA, UK, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. By using our website, you understand that your information may be processed in these jurisdictions.

10. Children’s Privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child, we will take steps to delete that information.

11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “Last updated” date. We encourage you to review this page periodically.

12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Vitosha Inc, 1020 W 8th Ave, Suite 2A-A, King of Prussia, PA 19406. Email: privacy@vitoshainc.com