Privacy Policy
This notice explains how GDA TRUST Ltd. processes personal data in connection with livefeedapi.com, commercial enquiries, the free trial, customer portal, support, billing and service security.
1. Controller
GDA TRUST Ltd.11 Cherni vrah Blvd, 1421 Sofia, Bulgaria
VAT: BG206736228
Company website: gda-trust.com
Privacy contact: marketing@gda-trust.com
GDA TRUST Ltd. markets LiveFeed API and acts as controller for the processing described in this notice. The address above is the contact point for all privacy requests.
2. Scope and data categories
- Contact and organisation data: name, role, company, email, telephone, country and enquiry content.
- Account and contract data: username, customer identifiers, roles, permissions, plan, settings, acceptance records and subscription status.
- Technical and security data: IP address, user agent, time, endpoint, HTTP outcome, session identifiers, usage limits and authentication logs. Passwords and API keys are not recorded in analytics.
- Billing data: legal name, address, VAT/tax ID, transaction status and identifiers. Stripe processes full card details; LiveFeed API does not store them.
- Support data: messages, attachments and diagnostics submitted voluntarily. Do not send passwords, API keys or unnecessary data.
- Professional data from public sources: business contact, role, company, source URL and collection date, when collected under the related notice.
3. Purposes, legal bases and retention
| Purpose | Legal basis | Ordinary retention |
|---|---|---|
| Enquiries, demos and negotiations | Requested pre-contractual steps | 12 months from last contact, unless negotiations or legal defence require longer |
| Account creation, API delivery and subscription management | Performance of the contract | Contract term; operational settings deleted or anonymised within 30 days after termination, subject to legal duties and backups |
| Billing, accounting and tax | Legal obligation | For the statutory period, up to 10 years where required |
| Security, abuse prevention, continuity and legal claims | Legitimate interests of GDA TRUST Ltd. and its customers | Ordinary logs up to 12 months; longer only for incidents, disputes or law |
| Requested or optional commercial communications | Consent where required, or documented B2B legitimate interest | Until withdrawal/objection or 24 months of inactivity |
| Non-essential analytics and campaign measurement | Prior consent where required | As disclosed in the consent panel; inactive until configured |
| Suppression list | Legal obligation and legitimate interest | Minimum data, including a hash, for as long as needed to prevent further contact |
Encrypted backups may retain residual copies for up to 90 days. Data is then erased or anonymised unless law or a dispute requires retention.
4. Required and optional data
Required fields are needed to answer an enquiry, create an account or enter into a contract. Failure to provide them may prevent service delivery. Marketing and non-essential analytics are optional and do not affect purchasing.
5. Recipients and subprocessors
Authorised staff, confidential advisers and providers required for hosting, transactional email and payments may access data. The current list is in the subprocessor register. Sports-content providers do not receive customer personal data unless the contract states otherwise.
6. International transfers
The main infrastructure is hosted in the EEA. Stripe and its providers may process data outside the EEA under the mechanisms described in Stripe's DPA and Data Transfers Addendum, including adequacy decisions, the Data Privacy Framework or Standard Contractual Clauses, as applicable.
7. Cookies
The site uses technical cookies or identifiers required for authentication, security and preferences. Non-essential tools will remain disabled until the user's choice and will be described in the consent panel before activation.
8. Individual rights
Where applicable, individuals may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent without affecting earlier processing. Requests should be sent to marketing@gda-trust.com; proportionate identity verification may be required.
A complaint may be filed with the Bulgarian Commission for Personal Data Protection or the supervisory authority in the individual's EEA country.
9. Automated decisions and children
GDA TRUST Ltd. does not make decisions producing legal effects solely through automated processing covered by this notice. LiveFeed API is a B2B service and is not intended for children.
10. Security and changes
Proportionate safeguards include encryption in transit, customer separation, individual credentials, access control, logging and recovery procedures. Material changes will be notified through the site, portal or email and identified by a new version and date.