Privacy Policy

Who we are (Data Controller)

The platform is operated under the brand BOMI Lab. A formal legal entity is in the process of being established; until incorporation is complete, the platform is operated by its founders, who act as the data controllers responsible for your personal data.

• Operator / brand: BOMI Lab ("BOMI")
• Website: bomilab.com
• Location: Ukraine
• Contact for privacy matters: privacy@bomilab.com

You can reach us about any privacy question using the email address above.

What personal data we collect

Information you provide directly. When you apply through our form or contact us, we may collect:

• identification and contact details (name, email address, phone number where provided);
• professional information (company or project name, role, LinkedIn or other profile links, background and experience);
• the content of your application or submission, including ideas, descriptions, pitch materials, links and attachments you choose to share;
• any other information contained in messages you send us by email or through the Site.

Information collected automatically. When you use the Site, we may automatically collect technical data, including:

• IP address (which may be treated as personal data) and approximate geographic location;
• browser type and version, device and operating system information;
• pages viewed, referral source, navigation paths, and time spent on the Site;
• data stored in or read from cookies and similar technologies (see Section 8).

Information from third parties. We may receive limited information from analytics providers, advertising platforms, social networks (where you interact with our pages or links), and service providers that help us operate the Site.

We do not intentionally collect special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health, or biometric or genetic data). Please do not include such information in your submissions.

How and why we use your data (purposes and legal bases)

We process personal data only where we have a lawful basis to do so:

• Reviewing and responding to your application or enquiry: performance of / steps prior to entering a contract; our legitimate interest in evaluating opportunities.
• Communicating with you about your submission or our platform: legitimate interest; consent where required.
• Operating, securing and improving the Site: legitimate interest.
• Analytics and understanding how the Site is used: consent (via cookie settings).
• Sending newsletters or marketing communications: consent (you can withdraw at any time).
• Complying with legal obligations and protecting our rights: legal obligation; legitimate interest.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Sharing your data

We do not sell or rent personal data. We may share it with:

• Service providers who process data on our behalf under contract — for example website hosting and infrastructure (such as our hosting and deployment providers), analytics, email delivery, and customer relationship / application management tools;
• Professional advisers (legal, accounting, consultants) where reasonably necessary;
• Partners or co-investors involved in evaluating or building ventures, where relevant and subject to appropriate confidentiality;
• Authorities or third parties where required by law, to comply with legal process, or to protect our rights, safety and property.

All processors are bound by contractual obligations to protect your data and process it only on our instructions.

International transfers

Because we operate globally and use service providers that may be located outside your country (including outside the EEA and Ukraine), your data may be transferred internationally. Where we transfer personal data across borders, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or transfers to countries recognised as providing an adequate level of protection.

How long we keep your data

We retain personal data only for as long as necessary for the purposes set out in this Policy:

• Application data: kept for the duration of our review and, where there may be future opportunities, for up to 24 months after our last contact, unless you ask us to delete it sooner.
• Communications: kept for as long as needed to address your enquiry and a reasonable period afterwards.
• Analytics / technical data: kept for the period set out in our cookie settings and provider configurations.

When data is no longer needed, we delete or anonymise it.

Your rights

Subject to applicable law, you have the right to:

• access your personal data and obtain information about how it is processed;
• rectify inaccurate or incomplete data;
• eraseyour data ("right to be forgotten") where it is no longer needed or processing was unlawful;
• restrict processing in certain circumstances;
• object to processing based on legitimate interests, and to direct marketing at any time;
• data portability — receive your data in a structured, commonly used, machine-readable format;
• withdraw consent at any time where processing is based on consent;
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any of these rights, contact us at privacy@bomilab.com. We will respond within the timeframes required by law (generally within 30 days).

You also have the right to lodge a complaint with a supervisory authority — in the EU, your local data protection authority; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights (Ombudsman).

Cookies and similar technologies

We use cookies and similar technologies to operate the Site, remember your preferences, analyse traffic, and (where applicable) support marketing.

• Essential cookies are necessary for the Site to function and do not require consent.
• Analytics, functional and marketing cookies are only set with your prior consent, which you give through our cookie banner / settings.

You can change or withdraw your cookie preferences at any time via the cookie settings on the Site, and you can block or delete cookies through your browser settings. Blocking some cookies may affect how the Site works.

We use analytics tools (such as Google Analytics or equivalent) to understand how visitors use the Site. Where these tools rely on cookies or set identifiers, they are activated only after consent.

Children

The Site and our application process are directed at adults (founders, operators and professionals) and are not intended for children under the age of 16 (or the minimum age set by local law). We do not knowingly collect personal data from children through this Site. If you believe a child has provided us data, please contact us and we will delete it.

Note: education products that BOMI builds or operates may be directed at students, including minors. Those products are governed by their own separate privacy notices, not this Policy.

Security

We apply generally accepted technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or destruction. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant authorities and, where required, affected individuals, in line with applicable law.

Third-party links

The Site may contain links to third-party websites and services (including social media). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal data.

Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated version on the Site and update the "Last updated" date. Your continued use of the Site after changes take effect indicates that you have reviewed the updated Policy.

Contact us

BOMI Lab
Email: privacy@bomilab.com
Website: bomilab.com