Legal

Last updated: July 2026

Data Controller & Service Provider

MAK GROUP 22 LTD

Company No.: 207204267

Registered address: Sofia, Bulgaria, Panayot Hitov 34, 1510

Email: hello@nosort.com

Website: nosort.com

VAT: BG207204267

Privacy Policy — European Union (GDPR)

This policy applies to individuals located in the European Economic Area (EEA) and explains how MAK GROUP 22 LTD ("NoSort", "we", "us", "our") processes your personal data under Regulation (EU) 2016/679 (General Data Protection Regulation — "GDPR") and the Bulgarian Personal Data Protection Act.

1. Data Controller

The data controller responsible for your personal data is MAK GROUP 22 LTD, a company registered in the Republic of Bulgaria under company number 207204267, with registered address at Sofia, Bulgaria, Panayot Hitov 34, 1510.

You can contact us regarding data protection matters at: hello@nosort.com.

2. What Personal Data We Collect

We collect only the information you provide directly when you:

  • Submit the X-Ray diagnostic form (company name, industry, country, website, revenue range, document volume, current ERP system, team size, your name, job title, email address, phone number, and any notes you include).
  • Communicate with us via email at hello@nosort.com.
  • Enter into a services agreement with us (business contact details, engagement data).

We do not use: tracking cookies, advertising pixels, third-party analytics scripts, fingerprinting, or automated profiling on this website.

3. Purposes and Legal Basis for Processing

Purpose Legal Basis (GDPR Art. 6)
Responding to your X-Ray diagnostic submission and scheduling your call Pre-contractual steps (Art. 6(1)(b))
Delivering services under a signed agreement Contract performance (Art. 6(1)(b))
Sending service-related communications Legitimate interest (Art. 6(1)(f))
Complying with legal obligations (tax, accounting, regulatory) Legal obligation (Art. 6(1)(c))

4. Data Retention

We retain your personal data only as long as necessary for the purposes stated:

  • X-Ray form submissions: 24 months from submission unless a services agreement is signed, after which retention follows the engagement terms.
  • Client engagement data: Duration of the contract plus 6 years (statutory limitation period under Bulgarian law).
  • Email correspondence: 3 years from the last message in the thread.

5. Data Recipients

Your personal data may be accessed by:

  • Our employees and contractors who need it to deliver the service (bound by confidentiality).
  • Service providers acting as processors: email hosting (Google Workspace), calendar/scheduling tools, and CRM platforms — all covered by Data Processing Agreements with Standard Contractual Clauses where applicable.
  • Public authorities where required by law.

We do not sell, rent, or trade your personal data to any third party.

6. International Data Transfers

Where we use service providers based outside the EEA (e.g., United States), we ensure appropriate safeguards are in place — typically EU Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission. Contact us for details on specific transfer mechanisms.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15) — obtain confirmation and a copy of your data.
  • Right to rectification (Art. 16) — correct inaccurate or incomplete data.
  • Right to erasure (Art. 17) — request deletion ("right to be forgotten").
  • Right to restriction (Art. 18) — limit processing in certain circumstances.
  • Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
  • Right to object (Art. 21) — object to processing based on legitimate interest, including profiling.
  • Right to withdraw consent (Art. 7(3)) — where processing is based on consent.

To exercise any of these rights, email hello@nosort.com. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

8. Right to Complain

If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority — in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. The Bulgarian supervisory authority is:

Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: www.cpdp.bg

9. Automated Decision-Making

We do not use your personal data for automated individual decision-making, including profiling, that produces legal effects or similarly significantly affects you (Art. 22).

10. Cookies

This website does not deploy any cookies — not even essential/session cookies. No cookie consent banner is required. If this changes, we will update this policy and implement a compliant consent mechanism.

Privacy Policy — United Kingdom

This policy applies to individuals located in the United Kingdom and explains how MAK GROUP 22 LTD ("NoSort", "we", "us") processes your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Controller

The data controller is MAK GROUP 22 LTD, a company registered in Bulgaria (company no. 207204267). As we do not have a physical establishment in the UK, we are required to comply with the UK GDPR when offering services to, or monitoring the behaviour of, individuals in the UK (Art. 3(2), UK GDPR).

Contact: hello@nosort.com.

2. Data We Collect, Purposes, and Legal Basis

We collect the categories of personal data, for the purposes, and on the legal bases described in the EU GDPR section above. Under UK GDPR, the legal bases are equivalent: contract necessity, legitimate interests, and legal obligation.

3. International Transfers (UK)

Our operations are based in Bulgaria (EEA). The UK has granted adequacy status to EEA countries, meaning personal data can flow from the UK to the EEA without additional safeguards. Where we use processors in other third countries, we rely on the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU SCCs.

4. Your Rights Under UK GDPR

You have the same rights as under the EU GDPR: access, rectification, erasure, restriction, portability, and objection. To exercise them, email hello@nosort.com.

5. Complaints (UK)

You have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Website: ico.org.uk
Helpline: 0303 123 1113

6. Cookies

This website does not deploy cookies. No consent is required under PECR (Privacy and Electronic Communications Regulations).

Privacy Policy — United States

This policy applies to individuals located in the United States and explains how MAK GROUP 22 LTD ("NoSort", "we", "us") collects, uses, and discloses personal information.

1. California Residents — CCPA/CPRA Notice

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have the following rights:

1.1 Categories of Personal Information We Collect

Category Examples Sold/Shared?
Identifiers Name, email, phone, company name No
Commercial information Services purchased, engagement history No
Professional information Job title, company, industry No
Internet/electronic activity None — we do not track browsing N/A

1.2 Your CCPA/CPRA Rights

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
  • Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out: We do not sell or share personal information as defined by the CCPA. There is nothing to opt out of.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA right.
  • Right to Limit Use of Sensitive Personal Information: We do not collect or process sensitive personal information as defined by the CPRA.

To exercise CCPA rights, email hello@nosort.com with the subject line "CCPA Request." We will verify your identity before processing the request and respond within 45 days (extendable by 45 days with notice).

1.3 Authorized Agent

You may designate an authorized agent to make a CCPA request on your behalf. We will require written proof of authorization and may verify your identity directly.

2. Other US State Privacy Laws

For residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws, we extend the same rights described above. Contact us at hello@nosort.com to exercise your rights under your state's law.

3. Children's Privacy

NoSort services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us immediately.

Terms of Service

These Terms of Service ("Terms") govern your use of the NoSort website (nosort.com) and the services provided by MAK GROUP 22 LTD ("NoSort", "we", "us"). By accessing the website or engaging our services, you agree to these Terms.

1. Website Use

The website provides information about NoSort's services and a form to submit your company details for the X-Ray diagnostic. Submitting the form does not create a client relationship. No client relationship exists until a written services agreement is signed by both parties.

2. Services

NoSort provides back-office automation services as described in a mutually executed statement of work or services agreement. All engagements are governed by that signed agreement, not by the content of this website alone. The scope, price, timeline, and deliverables for each engagement are defined in the applicable agreement.

3. The X-Ray Guarantee

The X-Ray diagnostic engagement is governed by a separate X-Ray services agreement. Under that agreement: if the delivered report does not identify at least $50,000 per year in recoverable operational cost — as defined and mutually agreed in the agreement — the client pays nothing for the X-Ray. This guarantee applies exclusively to the X-Ray diagnostic and does not extend to subsequent build engagements.

4. Intellectual Property

All documentation, workflow designs, agent configurations, and deliverables created during an engagement are owned by the client upon full payment of all fees due for that engagement. NoSort retains ownership of its underlying platform, methodologies, pre-existing code, frameworks, and any technology developed independently of the client engagement. Nothing in these Terms grants the client any right to NoSort's pre-existing intellectual property.

5. Confidentiality

Both parties agree to maintain the confidentiality of proprietary information shared during the engagement. Client operational data — documents, ERP data, and processing records — is handled exclusively for the purpose of delivering the contracted service and is subject to the confidentiality and data processing terms in the applicable services agreement.

6. Limitation of Liability

To the maximum extent permitted by applicable law:

  • NoSort's total aggregate liability for any claim arising from services provided is limited to the fees paid by the client for the specific service giving rise to the claim.
  • NoSort is not liable for indirect, consequential, special, incidental, or punitive damages, including loss of profits, revenue, data, or business opportunity.
  • Nothing in these Terms limits or excludes liability for: (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; or (c) any liability that cannot be limited or excluded by applicable law.

7. Third-Party Services

Our services may integrate with third-party platforms (ERPs, email systems, scheduling tools). NoSort is not responsible for the availability, security, or data practices of those third-party services. Clients are responsible for ensuring their use of third-party services complies with applicable terms and laws.

8. Governing Law and Dispute Resolution

These Terms and any dispute arising from them are governed by the laws of the Republic of Bulgaria, without regard to conflict of law principles. Any dispute shall be submitted to the competent courts of Sofia, Bulgaria.

For clients in the European Union, nothing in this clause deprives you of the protection afforded by mandatory provisions of the law of your country of residence.

We encourage amicable resolution — contact us at hello@nosort.com before initiating formal proceedings.

9. Changes to These Terms

We may update these Terms from time to time. Material changes will be communicated by email to active clients and by updating the "Last updated" date on this page. Continued use of the website or services after changes constitutes acceptance of the revised Terms.

10. Severability

If any provision of these Terms is found to be unenforceable, the remaining provisions remain in full effect. The unenforceable provision will be replaced by a valid provision that most closely reflects the original intent.

11. Contact

For questions about these Terms: hello@nosort.com.

Registered office: MAK GROUP 22 LTD, Panayot Hitov 34, Sofia 1510, Bulgaria.

← Back to NoSort