Privacy Policy

Last updated: January 1, 2025

1. Introduction

NARA ("we", "us", "our"), operating at greecebulgarialove.eu, is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our dating platform.

This policy is compliant with the EU General Data Protection Regulation (GDPR) (Regulation 2016/679) and the Greek Data Protection Law.

2. Data Controller

The Data Controller is NARA, operating at greecebulgarialove.eu.
Contact: support@greecebulgarialove.eu

3. Data We Collect

We collect the following categories of personal data:

Category Data Collected Purpose
Account Data Name, email address, password (hashed), birthdate, gender Account creation and authentication
Profile Data City, country, bio, height, eye/hair color, languages, photos Building your dating profile
Communication Data Messages sent and received on the platform Providing messaging service
Payment Data Transaction references (not card details — handled by Stripe) Subscription management
Technical Data IP address, browser type, device info, last active timestamp Security and fraud prevention
Usage Data Pages visited, search queries, favorites added Service improvement

4. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Contract performance: To provide the dating service you registered for;
  • Legitimate interests: For fraud prevention, security, and improving our service;
  • Consent: For marketing communications (you may withdraw consent at any time);
  • Legal obligation: Where required by law.

5. How We Use Your Data

  • To create and manage your account;
  • To display your profile to potential matches;
  • To facilitate messaging between members;
  • To process subscription payments;
  • To verify female profiles and ensure community safety;
  • To send service notifications and updates;
  • To prevent fraud and ensure platform security;
  • To comply with legal obligations.

6. Data Sharing

We do not sell your personal data. We may share data with:

  • Payment processors (Stripe) — only transaction references, not full card data;
  • Hosting provider (OVH) — for server infrastructure;
  • Law enforcement — where required by court order or legal obligation.

Profile information you make public (name, photo, city, country) is visible to other registered members.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records for 7 years).

8. Your Rights (GDPR)

Under GDPR, you have the following rights:

  • Right of access: Request a copy of your personal data;
  • Right of rectification: Correct inaccurate data;
  • Right of erasure: Request deletion of your data (right to be forgotten);
  • Right of restriction: Restrict how we process your data;
  • Right of portability: Receive your data in a portable format;
  • Right to object: Object to processing based on legitimate interests;
  • Rights related to automated decision-making: We do not make automated decisions with legal effects about you.

To exercise any of these rights, email us at support@greecebulgarialove.eu. We will respond within 30 days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

9. Cookies

We use session cookies necessary for authentication and site operation. We do not use tracking cookies or third-party advertising cookies. By using the site, you consent to essential cookies.

10. Data Security

We implement technical and organizational security measures including:

  • HTTPS encryption for all data in transit (TLS 1.2+);
  • Bcrypt password hashing — passwords are never stored in plain text;
  • SQL injection prevention via PDO prepared statements;
  • CSRF protection on all forms;
  • Regular security reviews.

11. Children's Privacy

NARA is not directed at children under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately.

12. International Transfers

Your data is processed and stored within the European Economic Area (EEA). We do not transfer your data outside the EEA.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes. Continued use of the site constitutes acceptance of the updated policy.

14. Contact

For any privacy-related questions or to exercise your GDPR rights:
Email: support@greecebulgarialove.eu
Response time: within 30 days