Privacy Policy

Date: 13.03.2026

1. Introduction

This Privacy Policy explains how 28 Apex OOD ("we," "our," "GO28") collects, uses, shares, and protects your personal information when you visit our website or use our services (collectively, "Services"). We are committed to protecting your privacy and handling your data in an open and transparent manner, in compliance with the EU's General Data Protection Regulation (GDPR) and Bulgarian data protection law.

2. Data Controller and Data Protection Officer

The entity responsible for processing your personal data (the data controller) is:

28 Apex OOD

UIC: 207773514

Address: 77 Hristo Botev Boulevard, 1st Floor, Vazrazhdane District, Sofia, Bulgaria

For any inquiries regarding your personal data, you can contact our Data Protection Officer (DPO):

Desislava Spasova

Email: legal@go28.io

Phone: +359897050917

3. Personal Information We Collect

We collect information to provide, maintain, and improve our Services. The types of personal information we may collect include:

  • Identity Data: Full legal name, date of birth, nationality, and government-issued identification documents and numbers (e.g., passport, national ID), including photographic images thereof, as required for our KYC process.
  • Contact Data: Residential address, email address, and telephone number.
  • Financial Data: Bank account information (IBAN, BIC), wallet addresses, and a detailed history of transactions conducted on the GO28 platform.
  • Technical Data: Internet protocol (IP) address, login data, browser type, device information, and data on how you interact with our website.
  • Profile Data: Your password, security settings, account preferences, and any feedback you provide through support tickets.

4. Your Rights Under GDPR

You have the following rights concerning your personal data:

  • The Right to Access: You can request a copy of the personal data we hold about you.
  • The Right to Rectification: You can request correction of inaccurate or incomplete data.
  • The Right to Erasure ('Right to be Forgotten'): You can request that we delete your data, subject to our legal and regulatory retention obligations.
  • The Right to Restrict Processing: You can ask us to suspend the processing of your data in certain scenarios.

To exercise any of these rights, please contact our support team.

5. Contact Us

If you have any questions or concerns about this Privacy Policy or our data protection practices, please contact our Data Protection Officer at office@go28.io.