Privacy policy

Updated 27 October 2026.

Who handles your information

Martin Iliev operates Set It Once at setitonce.com. For privacy requests, contact miliev@setitonce.com. This policy covers this website, enquiries, customer accounts, orders and CareLocal agency onboarding.

Information we use and why

When you contact us, we use your name, email, website and message to respond and discuss the requested service. At checkout we collect billing and contact details, the order and payment status, and information needed to deliver your purchase. Account information supports access to purchased services. Technical information, including IP addresses and browser details, helps operate the site, maintain sessions and prevent misuse.

CareLocal onboarding collects the agency name, website, number of offices, owner phone number and the recorded agreement to receive alerts. We use these details to arrange setup, support the agency and manage the purchased service period. Do not send patient information, identity documents, passwords or API keys through checkout or ordinary email.

Processing is based on responding to your request and performing the agreed service, applicable legal obligations for transaction records, and legitimate interests in security and reliable operation. Optional cookies and optional features use consent where required. You can withdraw optional consent without affecting earlier lawful processing.

CareLocal enquiries and owner alerts

The agency is responsible for the information it collects from families through its own website. Before connecting a live agency, we agree access, data handling and the permitted recipients with that agency. The service handles enquiry details to keep an enquiry copy and notify the approved owner. The SMS contains the office, name, phone number and a private enquiry link; the form message stays out of the SMS. Alerts go to the opted-in owner, not to the person submitting the form. Applicant alerts are off by default.

Requests about an enquiry submitted to an agency should normally go to that agency. We assist with requests concerning the information we handle for it under the agreed service arrangements.

Payments and service providers

Revolut processes card and Revolut payments. Card details are entered through the payment provider’s interface; do not send them to us by email or in an enquiry. We retain order details, payment status and transaction references needed for fulfilment and support.

Hosting and website services support storage and operation. Email providers process correspondence. CareLocal uses the connected hub and n8n workflow to route alerts, and Twilio to deliver SMS through the agency’s account. Providers receive the information needed for their role. Authorised administrators access customer information for setup and support. We do not sell your personal information.

Cookies and external features

Necessary cookies support login, security, shopping cart, checkout and privacy choices. Use Privacy settings on the site to review optional cookie choices. External features such as chat or embedded content may involve their providers when loaded; external websites have their own privacy policies.

Retention and international processing

We keep information for the time needed to handle the request, provide the service, resolve problems and meet applicable record-keeping obligations. Unneeded information is reviewed for deletion. Transaction records and backups may have different retention needs. Contact us for details about a particular record or to request deletion.

Service providers may process information outside your country, including in the United States. Before onboarding an agency, the service arrangements must address the providers, processing locations and applicable safeguards. Contact us if you need further information about a transfer.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability, object to processing, or withdraw consent. Email us with enough information to identify the relevant account or request, but do not send identity documents unless we arrange a suitable verification method. You may complain to the Bulgarian Commission for Personal Data Protection or your local supervisory authority.

For purchase conditions, see Purchase terms and refunds.

Business outreach

I, Martin Iliev, run Set It Once as an individual (not a company) from 21 Ilarion Makariopolski St, Varna, Bulgaria. Sometimes I email businesses about problems I’ve found on their websites. For this I use only data the business publishes itself: its name, website, business email and phone. I also use the results of a public speed and SEO check of the site. My lawful basis is legitimate interests (UK/EU GDPR Art. 6(1)(f)). In the UK I email limited companies only.

If you reply “no”, I stop and delete your details. I keep only your email address on a do-not-contact list so I never write to you again. If you don’t reply, I delete your details within 6 months.

You can ask for access, correction or deletion, or object, at miliev@setitonce.com. You can also complain to the ICO (UK) or КЗЛД (Bulgaria).

Privacy & cookie notice

Privacy & cookies

Updated 5 October 2026. This notice covers the public Set It Once marketing website and its enquiry form.

Who is responsible?

Martin Iliev operates Set It Once and is responsible for the personal data collected through this website. For privacy questions or to exercise your rights, email miliev@setitonce.com or use the contact form. You do not need to provide a website address for a privacy request.

What we collect and why

When you send an enquiry, we receive your name, email address, optional website address and message. We use these to respond and take steps towards a possible service agreement at your request (GDPR Article 6(1)(b)). Security and abuse prevention rely on our legitimate interest in protecting the website (Article 6(1)(f)). The form temporarily uses a keyed hash of your IP address to limit repeated submissions for 60 seconds. Hosting infrastructure processes connection information such as IP addresses and requested URLs to deliver and protect the site.

There is no marketing subscription, sale of enquiry data or automated decision-making about you. Do not send passwords, API keys or sensitive client information.

Who can access the information?

Enquiries are stored in the private WordPress administration area and accessed by authorised administrators. Namecheap provides our website and email hosting and processes data to operate these services. Email addressed to miliev@setitonce.com is also forwarded to a Gmail account operated by Google so Martin can receive and handle correspondence. Their privacy notices explain their processing: Namecheap and Google. External links such as LinkedIn load only when you follow them; those websites have their own privacy notices.

International processing

Namecheap and Google may process information outside your country, including in the United States. Namecheap describes the contractual safeguards for covered services in its Data Processing Addendum. Google describes processing locations and safeguards in its Privacy Policy. Contact us if you need details about the processing of your enquiry.

How long we keep information

We retain enquiries while handling the request and necessary follow-up. We review enquiries after six months and remove closed enquiries that are no longer needed. Records required for an active service, a legal obligation or a legal claim may be retained for that purpose. This review covers WordPress records and related email copies; it is a manual review, not automatic deletion. Hosting logs and backups have separate retention arrangements with the provider. You can ask us for information about your particular record or request deletion.

Your rights

You may request access, correction, erasure, restriction, objection and portability where applicable. You may withdraw optional browser-storage consent through Privacy settings without affecting earlier lawful processing. We normally respond to rights requests within one month; legal exceptions may apply. You may complain to your local supervisory authority, including the Bulgarian Commission for Personal Data Protection.

Cookies and browser storage

Google Analytics 4 is optional and loads only after your explicit consent. It measures page visits and basic engagement, using browser/device information and an online identifier. Google processes the network address to provide the service; GA4 does not log or store individual IP addresses. We do not enable advertising features, Google Signals or automatic form tracking. Page URLs and referrers sent by this website exclude query strings and fragments; form contents are not sent. No third-party geolocation service is used. Fonts and images are hosted on this website. Necessary WordPress authentication and security cookies may be used when you sign in. These are separate from optional analytics and currency memory.

LocalStorage is browser storage rather than a cookie; the same preference controls cover it. Automatic currency suggestion uses your browser time zone locally. It is approximate and is not sent to a geolocation provider. If browser storage is unavailable, your choices apply only to the current page.

Online payment processing is not active on this page. Payment-provider information and purchase terms will be added before checkout is enabled.