Privacy Policy

Last updated: 14 September 2026

Who we are

AnnaMathys.com is operated by T.B.O. OOD under the public-facing brand Anna Mathys — The ChangeMaker. T.B.O. OOD is responsible for deciding how the personal data covered by this policy is used and is its data controller.

T.B.O. OOD
14 Pozitano Street, floor 2
1000 Sofia, Bulgaria
Company registration number: 202988413
VAT number: BG202988413
Privacy enquiries: info@tboltd.com

This policy explains how we handle information when you visit the website, send an enquiry or submit the subscription form. It describes the website’s current configuration. Information about any additional processing needed to deliver a client service will be provided before that information is collected.

Information you provide

Enquiries

When you use a contact form, we receive your name, email address, message and submission date. If you contact us by email, we receive your email address and the information you include in your message.

The contact form’s name, email and message fields are required so that we can understand and answer your enquiry. Please provide only information relevant to your request. Avoid sending detailed medical histories or sensitive information about yourself or another person through the general contact form. We will discuss an appropriate way to provide any information needed for a service.

Contact-form entries are stored in Hostinger’s Form submissions area. A separate notification copy is sent to the mailbox configured for that form. Those destinations currently include help@annamathys.com and the Gmail account used by Anna to administer the website. Our privacy contact remains info@tboltd.com.

Sending an enquiry does not subscribe you to marketing emails.

Subscription requests

The separate “Stay in touch” form invites you to request occasional notes, reflections and information about new offerings. Submitting it stores your email address in Hostinger’s Form submissions area and sends a notification to Anna’s administrative Gmail account.

There is currently no connected Hostinger Reach or other automated email-marketing service, and no confirmed automated subscription-confirmation or double-opt-in process. Submission of this form does not create a customer account or a paid subscription.

We use your address to record and manage your request for updates. Marketing emails will only be sent on the basis of valid consent. Before a newsletter service is activated, we will provide the relevant information about that service and ensure an appropriate consent and unsubscribe process is in place.

You can withdraw your subscription request or ask us to remove your address at any time by emailing info@tboltd.com. You do not need an automated unsubscribe link to make this request.

Website operation and cookies

The website is built with Hostinger Website Builder. Delivering web pages involves processing connection information, such as an IP address, and hosting infrastructure may process technical information needed to operate and protect the service. This is distinct from analytics or advertising tracking.

Based on the configuration reviewed on 14 September 2026 and the information provided by Hostinger, no active analytics or advertising tracking has been confirmed. No visitor cookies have been identified as being set by Hostinger Website Builder in this configuration. This is not a guarantee that every aspect of hosting infrastructure operates without technical data processing.

The cookie banner is currently switched off. We do not represent that an active consent banner blocks optional tracking. There are currently no third-party embedded booking forms, maps, video players or social feeds identified on the site.

We will review the privacy and consent requirements before introducing optional tracking or third-party embedded content, and update this policy accordingly. Where consent is required, the relevant technology must not be activated before that consent is obtained.

Why we use information

We use enquiry details to respond to you and manage correspondence. Where you ask about engaging our services, the legal basis is taking steps at your request before entering a contract. For other ordinary enquiries, we rely on our legitimate interest in responding to people who contact us and administering our business.

We rely on our legitimate interest in maintaining a functioning, secure website for necessary operational and security processing, subject to your rights and any consent requirements that apply to particular technologies.

We use your email address to deliver the complimentary guide you have requested and to manage any updates you have chosen to receive. Marketing communications rely on valid consent, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

Where necessary, we may retain or disclose relevant information to comply with a legal obligation or to establish, exercise or defend legal claims. We do not treat acceptance of this policy or continued browsing as consent to marketing.

Who receives information

Hostinger provides the website, form-storage and Hostinger Reach email-delivery services used for the website and complimentary guide. Notification emails and subsequent correspondence may also be processed by the providers of the relevant mailboxes, including Google for the administrative Gmail account.

Where you choose to book or pay for a service, relevant information is processed by Calendly for scheduling and Stripe for payment processing. Their handling of personal data is governed by their own privacy information and applicable data-protection obligations.

Form entries can be accessed by Anna and anyone given authorised access to the website administration. Email copies can be accessed by authorised users of the destination mailbox. Access should be limited to people who need it for the relevant task.

Our service providers may use subprocessors to operate their services. Information may also be disclosed to competent authorities where legally required, or to professional advisers where necessary for a specific legal or administrative matter.

When you choose to book a session, you are directed to Calendly, which processes the information needed to arrange and manage your appointment. When you purchase a service, you are directed to Stripe, which processes the information needed to complete and administer the payment. Calendly and Stripe process personal data according to their own privacy policies and applicable data-protection requirements. AnnaMathys.com does not receive or store your full payment-card details.

Storage and international transfers

Form entries are held in Hostinger’s Website Builder storage system, separately from the site’s ordinary File Manager. Email notifications create additional copies in the destination mailboxes.

The configuration reviewed does not establish the country in which this site’s form database or backups are stored. We therefore do not claim that all data remains in the European Economic Area, or that this site’s form data is specifically transferred to Canada or the United States.

Hostinger’s contractual arrangements allow processing by its entities and subprocessors in different jurisdictions. Processing by email, booking and payment providers is governed by the relevant provider’s own arrangements as well. Where personal data is transferred outside the EEA, an appropriate legal transfer mechanism is required. Depending on the provider and destination, this may include an applicable adequacy decision or EU Standard Contractual Clauses, with supplementary protections where necessary.

You may contact info@tboltd.com to request information about the safeguards relevant to your data and how to obtain a copy.

How long we keep information

We retain enquiry information for as long as needed to respond, complete relevant follow-up and maintain necessary records of the correspondence. In deciding whether continued retention is necessary, we consider whether the enquiry is resolved, whether a client relationship follows, and whether a legal obligation or claim requires particular information to be preserved.

Subscription information is retained while you remain subscribed or while needed to provide the communications you have requested. If you withdraw your consent or unsubscribe, your details will be removed from active marketing records, although a minimal record may be retained where necessary to document your preferences or comply with legal obligations.

Hostinger has not confirmed a fixed Website-Builder-specific retention period for submissions or backups. Entries can be deleted manually. Deleting an entry from the Builder does not itself delete notification emails, exported copies or all provider backups immediately. Relevant active copies must be handled separately, and provider backup retention remains subject to the provider’s arrangements.

We do not promise a deletion deadline for Hostinger backups that has not been established.

Your rights

Where the GDPR applies, you may request access, correction, erasure, restriction or portability of your data, subject to the conditions for each right. You may object to processing based on legitimate interests and withdraw consent at any time. You may object to direct marketing at any time.

Contact info@tboltd.com to exercise your rights. We may request proportionate information to verify your identity. We normally respond within one month; if a permitted extension is necessary, we will explain this within that month.

You may complain to the Bulgarian Commission for Personal Data Protection or another competent supervisory authority, including in the country where you habitually live or work. You do not have to contact us first.

No solely automated decisions producing legal or similarly significant effects have been identified in the website processes described here.

Security and external links

We use reasonable safeguards to protect personal information and restrict unauthorised access. No website, email service or internet transmission can be guaranteed completely secure.

If you follow a link to another website, its operator’s privacy information applies to its own processing. A link does not mean that the external service is embedded in AnnaMathys.com.

Changes to this policy

We will update this policy when our processing changes, including before activating new booking, payment, marketing or tracking services. The date above identifies the latest revision.

For questions about this policy or your personal data, contact info@tboltd.com.