How we look after your information.

Who the controller is

The data controller is “Hedonica” Ltd., company number (EIK) 208871737, entered in the Bulgarian Commercial Register on 1 July 2026, registered address 99 James Bourchier Blvd., floor 5, apt. 15, Lozenets, Sofia 1407, Bulgaria. The company operates Hedonist Society, The Maison and The Collections.

What we collect, and on what basis

• Contact and private-event enquiries — name, email, telephone and the content of your message. Basis: our legitimate interest in replying, and steps taken at your request where the enquiry leads towards an agreement. Kept for up to 24 months after our last exchange.
• Invitation requests and member accounts — name, email, who recommended you and the note you wrote. Basis: our legitimate interest in considering and administering invitations. Kept while the account is active and for up to 12 months after it closes; requests that do not lead to an invitation are kept for up to 12 months.
• Event reservations and waiting lists — the evening chosen, party size, notes and contact details. Basis: performance of what we agree with you. Kept for up to 24 months, or for the statutory 5 years where an accounting document has been issued.
• Membership interest and administration — the tier chosen and its status. Basis: performance of what we agree with you and our legitimate interest in running the Society. Kept while membership is active and for up to 12 months afterwards.
• Wine launch registrations and other prelaunch lists — name and email. Basis: your consent. Kept until the launch concerned or until you withdraw consent.
• Dietary, allergy and accessibility notes — these may include health information. Basis: your explicit consent, given by sharing the note with us. Used only to prepare your table and deleted within 30 days after the event.
• Optional messages about new experiences — only with your separate, explicit consent. You can withdraw at any time, and it never affects your enquiries or reservations.

Payments

We do not currently take payments through the websites and we do not collect card details. There is no payment provider in place. This Policy will be updated before payments become available.

Who processes data for us

• Lovable (Lovable Labs Incorporated, USA) — website hosting and delivery of transactional email from notify.hedonistsociety.bg.
• Supabase (Supabase Inc.) — database and account authentication.
• Zoho (Zoho Corporation) — the maison@ and collections@hedonistsociety.bg mailboxes we read and reply from.
• We do not sell or rent personal data. We disclose it to third parties only where the law or a competent authority requires it.

Transfers outside the EEA

Some of the providers above process data outside the European Economic Area. Where they do, the transfer relies on the European Commission's standard contractual clauses or another applicable legal ground.

Cookies and similar technologies

The websites use only the technologies needed to work — sign-in, language and the record of your cookie choice. The detail, and the control over your choice, are in the Cookie Policy.

Security

Access to the data is limited to Liya and Kaloian and to the providers listed above, and connections to the websites are encrypted. No system is completely secure, so we do not offer absolute guarantees.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time. Write to maison@hedonistsociety.bg or collections@hedonistsociety.bg. If you believe your rights have been infringed, you may complain to the Bulgarian Commission for Personal Data Protection (kzld.bg).

Changes

If our processing changes — for example when payments are introduced — we will update this page and the date shown above.