Privacy policy
Last updated October 19, 2026
This explains what personal information SharkStrat collects, why we collect it, who else sees it, and what you can make us do about it. It is written in plain English on purpose.
Who we are
SharkStrat is a trading name of Emilio Moratti Ltd, a company registered in Bulgaria under number BG206624236, at 149A Peshtersko Shose Blvd., 4001 Plovdiv.
For data protection law, that company is the data controller for information collected through this website. You can reach us at [email protected].
What we collect
| What | When | Why |
|---|---|---|
| Name, email, phone number, business name, and anything you type about your business | When you book a call or email us | To run the call and give you a quote |
| IP address, browser type, pages viewed, time of visit | Automatically, in our web server logs | Security and keeping the site up |
| Anything you send us afterward | Email, messages, shared documents | To do the work you hired us for |
We do not collect special category data. Do not send us health information, financial account numbers, government ID numbers or anything similar. We do not need it and we do not want it.
What we do not do
- We do not sell your personal information. Not now, not ever.
- We do not run advertising trackers on this website. See the cookie policy.
- We do not add you to a mailing list because you booked a call.
Our lawful basis for using it
- To take steps before a contract. When you book a call, we use your details to hold that call and to quote.
- To perform a contract. Once you are a client, we use your information to do the work.
- Legitimate interests. Keeping the site secure and our records straight. We have weighed this against your rights and think it is fair. Tell us if you disagree.
- Legal obligation. Tax and accounting records we are required to keep.
Who else sees it
We use other companies to run parts of our business. They only get what they need, and they are not allowed to use it for their own purposes.
| Who | What they handle |
|---|---|
| Our booking tool, Calendly | The name, email and details you enter when booking a call |
| Our email provider, Namecheap | Emails between us |
| Our web host, Vercel | Server logs |
If you become a client, we may also use tools on your behalf, such as an advertising platform or a messaging provider. We will tell you which ones before we set anything up.
We will also hand over information if a court or the law requires it. We will tell you first unless we are not allowed to.
Where your information goes
We work with clients across the United States and Australia. Our suppliers are mostly based in the United States. That means your information is likely to be stored or handled outside your own country.
If you are in Australia, we take reasonable steps to make sure any overseas recipient handles your information in line with the Australian Privacy Principles before we send it to them. If you are anywhere that requires a specific transfer safeguard, such as the UK or the EEA (the EU plus Iceland, Liechtenstein and Norway), we rely on Standard Contractual Clauses or an equivalent approved mechanism.
How long we keep it
- You booked a call and did not become a client: 12 months, then deleted.
- You are or were a client: for the length of the work, then 7 years for tax and accounting records.
- Server logs: 90 days.
Your rights
Wherever you live, you can ask us to do all of the following, and we will do it free of charge within 30 days.
- See it. Get a copy of what we hold about you.
- Fix it. Correct anything wrong.
- Delete it. Unless we are legally required to keep it.
- Limit it. Ask us to stop using it while we sort something out.
- Take it with you. Get it in a format you can hand to someone else.
- Object. Tell us to stop using it where our basis is legitimate interests.
- Withdraw consent. Where we asked for it, you can take it back at any time.
Email [email protected] and say what you want. We do not require a special form.
If you are unhappy with how we answer, you can complain to a regulator. In Australia that is the Office of the Australian Information Commissioner. In the United States it is your state Attorney General. Because our company is registered in Bulgaria, you can also complain to the Bulgarian Commission for Personal Data Protection. We would much rather you told us first and gave us a chance to fix it.
If you are in Australia
We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988, whether or not the Act currently binds a business of our size.
You can ask us for access to your information or ask us to correct it, and we will not charge you for it. If you think we have mishandled it, email us first. If we do not resolve it, you can complain to the Office of the Australian Information Commissioner.
We will not use a government identifier, such as a tax file number or a driver's license number, as our own reference for you. Please do not send us one.
If you are in the United States
A growing number of states give residents privacy rights, including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, New Jersey, Delaware, Maryland, Minnesota and New Hampshire, with more starting every year.
Most of those laws only bind companies handling data on tens of thousands of people. We are smaller than that. We give you the rights anyway. Ask us to see, correct, delete or export your information and we will do it, wherever in the United States you live, whether your state has a law yet or not.
We have not sold or shared personal information for cross-context behavioral advertising, and we do not intend to. Because we do not sell or share it, there is no "Do Not Sell or Share My Personal Information" link on this site.
If you are in New York, note that we follow the security requirements of the SHIELD Act for any private information we hold about New York residents.
Email [email protected] to exercise any of this. We may ask you to confirm who you are first.
Marketing messages
If you book a call or email us, we reply about that. We do not add you to a marketing list for it.
We only send marketing texts or emails to people who have asked for them. Every one identifies us and carries a working unsubscribe. If you opt out, we act on it right away, and we keep a record of your opt-out so it is not undone later.
This is separate from work we do for clients. Where a client asks us to build messaging for their business, consent, identification and opt-out are their legal obligations as the sender, and we build the system to support them.
Children
This site is for businesses. It is not for anyone under 16, and we do not knowingly collect information about children. If you think we have, email us and we will delete it.
Security
We use reputable suppliers, keep accounts behind strong passwords and two-factor authentication, and give access only to people who need it. No system is perfect. If something goes wrong that puts you at risk, we will tell you and the relevant regulator within 72 hours of finding out.
Changes to this policy
If we change anything important, we will update the date at the top and, where it affects you directly, tell you by email.
Contact
Email [email protected]. We are an online business, so email is the way to reach us.
Back to the homepage