Privacy Policy

Last updated: 15th January 2026

This Privacy Policy describes how boldfrontier d.o.o. ("we", "our", or "us") collects, uses, and protects your personal information when you use our construction document management services and visit our website.

Data Controller Information

The data controller for your personal information is:

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you use our website and services. The types of data we collect include:

Information You Provide

• Contact information (name, email address, phone number, company name)
• Account information when you register for our services
• Communication data when you contact us for support or inquiries
• Project information and documents when using our document management services
• Payment information for billing purposes (processed by secure third-party providers)

Automatically Collected Information

• Website usage data (pages visited, time spent, click patterns)
• Technical information (IP address, browser type, device information)
• Cookies and tracking technologies as described in our Cookie Policy
• Service usage analytics to improve our document management systems

How We Use Your Information

We use your personal data for the following purposes, based on legitimate business interests, contractual necessity, or your consent:

• Service Provision: To provide and maintain our construction document management services
• Communication: To respond to your inquiries, provide customer support, and send service-related notifications
• Account Management: To create and manage your user accounts and billing
• Service Improvement: To analyse usage patterns and improve our systems and user experience
• Legal Compliance: To comply with applicable laws, regulations, and industry standards
• Marketing: To send you information about our services (with your consent where required)
• Security: To protect our systems and prevent fraud or unauthorised access

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our services contract with you
• Legitimate Interests: For business operations, service improvement, and security purposes
• Consent: Where you have given explicit consent for marketing communications or optional features
• Legal Obligation: Where required by law or regulation

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in providing our services (cloud hosting, payment processing, analytics)
• Legal Requirements: When required by law, court order, or government regulations
• Business Transfers: In connection with mergers, acquisitions, or sale of business assets
• Protection: To protect our rights, property, or safety, or that of our users

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Account Data: Retained for the duration of your account plus 3 years after closure
• Communication Records: Retained for 5 years for customer service purposes
• Website Analytics: Anonymised data retained for up to 26 months
• Legal Documents: Retained as required by applicable laws and regulations

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Access: Right to obtain confirmation of processing and access to your personal data
• Rectification: Right to correct inaccurate or incomplete personal data
• Erasure: Right to request deletion of your personal data in certain circumstances
• Restriction: Right to request limitation of processing in certain situations
• Portability: Right to receive your data in a structured, machine-readable format
• Objection: Right to object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Right to withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@boldfrontier.world. We will respond to your request within one month.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• European Commission adequacy decisions
• Standard Contractual Clauses approved by the European Commission
• Certification schemes and codes of conduct

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection and security
• Incident response procedures

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

Contact Information

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the supervisory authority if you believe our processing of your personal data violates applicable law. In Slovenia, the supervisory authority is:

This Privacy Policy is effective as of the date stated above and applies to all information collected by boldfrontier.