Prisma Ltd. (“SoMerch,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our website at somerch.co and any related pages, forms, or services available through it.

This website and our services are intended for business users only. We operate entirely in a B2B context.

1. Who we are

Company name: Prisma Ltd.
Registered address: Pleven, Dimitar Konstantinov 23A
Contact email: [email protected]

If you have any questions about this Privacy Policy or want to exercise your privacy rights, you can contact us at [email protected].

2. Scope of this Privacy Policy

This Privacy Policy applies to all areas of the SoMerch website, including any pages, forms, and interactions available through https://somerch.co/.

3. What data we collect

Because we work entirely with businesses, we primarily collect company information and work-related contact details.

Depending on how you interact with us, we may collect:

• company name
• business email address
• business phone number
• contact person name
• job title
• company-related inquiry details
• project, quote, or order-related information you submit through our contact form
• technical and usage data collected through cookies and analytics tools, including Google Analytics

We do not intentionally collect special categories of personal data, and we ask that you do not submit such information through our website unless strictly necessary and requested by us.

4. How we collect data

We collect data directly from you when you:

• fill in our contact form
• contact us through the website
• communicate with us about a quote, project, or order
• subscribe to receive marketing communications

We also collect certain technical information automatically through cookies and analytics technologies, including Google Analytics.

5. Why we use your data

We use personal data for the following purposes:

• to respond to inquiries
• to prepare and send quotes
• to communicate with business contacts
• to process and manage orders
• to provide our services
• to improve our website and understand how visitors use it
• to send marketing communications where permitted by law
• to maintain the security and integrity of our website and business operations
• to comply with legal, tax, and accounting obligations

6. Legal bases for processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

• Pre-contractual steps: when you contact us to request information, pricing, or a quote
• Performance of a contract: when processing is necessary to fulfill an order or provide our services
• Legitimate interests: for managing business relationships, responding to B2B inquiries, improving our services, and operating our website
• Consent: where required, such as for certain cookies or marketing communications
• Legal obligation: where we must keep records or comply with applicable laws

7. Marketing communications

We may send marketing emails about our services, updates, or offers relevant to business users.

You can opt out of marketing communications at any time by:

• clicking the unsubscribe link in the email, where available, or
• contacting us at [email protected]

We will not send marketing communications where consent is required unless we have a valid legal basis to do so.

8. Cookies and analytics

Our website uses cookies and similar technologies, including Google Analytics, to understand website usage and improve performance.

These technologies may collect information such as:

• IP-related data
• device and browser information
• pages visited
• session duration
• traffic source
• general interaction data

Where required by law, we will request your consent before placing non-essential cookies on your device.

You can also control cookies through your browser settings. Disabling some cookies may affect website functionality.

9. Sharing your data

We do not sell personal data.

We may share personal data with trusted service providers where necessary to operate our website and business, including:

• analytics providers such as Google Analytics
• hosting, IT, or website support providers, if applicable
• other service providers where necessary to respond to inquiries, prepare quotes, or process orders

These third parties may process personal data on our behalf and only under appropriate contractual and confidentiality obligations, where required.

10. International data transfers

Some of the third-party services we use may process data outside the European Economic Area (EEA), including in countries that may not provide the same level of data protection as your local jurisdiction.

Where personal data is transferred internationally, we will take appropriate steps to ensure that suitable safeguards are in place, such as:

• adequacy decisions issued by the European Commission, where applicable
• Standard Contractual Clauses or other lawful transfer mechanisms

If you would like more information about international data transfers, please contact us at [email protected].

11. How long we keep data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

As a general rule, we retain inquiry and contact data for up to 6 months.

We may retain data for longer where necessary:

• to establish, exercise, or defend legal claims
• to comply with tax, accounting, or legal obligations
• where an inquiry becomes an active customer relationship or order

12. Data security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

13. Your rights

If the GDPR applies to you, you may have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• request restriction of processing
• object to certain processing
• request data portability, where applicable
• withdraw consent at any time, where processing is based on consent
• lodge a complaint with a competent data protection authority

To exercise any of these rights, contact us at [email protected].

We may need to verify your identity before responding to your request.

14. Children

Our website and services are not directed to children, and we do not knowingly collect personal data from children.

15. Third-party websites

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies separately.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, legal requirements, or website functionality. Any updates will be posted on this page with a revised effective date.

17. Contact us

If you have questions about this Privacy Policy or about how we handle personal data, please contact:

Prisma Ltd.
Sofia, 3019 Str., 34
Email: [email protected]