Privacy Policy

Effective Date: May 19, 2026

1. Introduction

Welcome to Palio Privato (https://palioprivato.com/), operated by Top Five – AD (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, apply for an invitation, or purchase our luxury hospitality experiences.

2. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked to you (“Personal Data”). The types of data we collect include:

Identity & Contact Data: First name, last name, email address, phone number, and billing/shipping address, collected when you request an invitation or complete a transaction.
Financial Data: Payment details are collected securely via our third-party payment processor (Stripe). We do not view or store your full credit card information on our servers.
Technical & Usage Data: IP address, browser type, device information, operating system, and data about how you interact with our website.

3. How We Use Your Information

We use the information we collect for the following purposes:

To evaluate applications and manage your exclusive event invitations.
To process and fulfill your transactions and send related administrative emails (e.g., invoices, itineraries, and booking confirmations).
To communicate with you regarding your booking, customer support, or inquiries.
To send you marketing communications (if you have opted in), which you may opt out of at any time.
To analyze website usage and improve our digital and physical services.

4. Third-Party Services & Payment Processing

We employ trusted third-party companies to facilitate our services. These third parties have access to your Personal Data only to perform specific tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Payment Processing: We use Stripe for secure payment processing. Their use of your personal information is governed by their Privacy Policy, which you can view at stripe.com/privacy.
Email Communications: We use third-party email service providers to manage and send communications securely.

5. Tracking Technologies, Analytics, and Remarketing

We use cookies and similar tracking technologies to track activity on our website and store certain information.

Google Analytics: We use Google Analytics to monitor and analyze web traffic. Google uses the data collected to track and monitor the use of our service.
Remarketing (Facebook/Meta Pixel): We use remarketing services to advertise to you on third-party websites after you visited our site. We and our third-party vendors (such as Meta/Facebook) use cookies to inform, optimize, and serve ads based on your past visits to our service.

6. Your GDPR Data Protection Rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). Top Five – AD aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Your rights include:

The right to access, update, or delete the information we have on you.
The right of rectification: You have the right to have your information rectified if that information is inaccurate or incomplete.
The right to object: You have the right to object to our processing of your Personal Data.
The right of restriction: You have the right to request that we restrict the processing of your personal information.
The right to data portability: You have the right to be provided with a copy of the information we have on you in a structured, machine-readable format.
The right to withdraw consent: You have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

To exercise any of these rights, please contact us using the details provided below.

7. Data Retention & Security

We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, and to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements. We use commercially acceptable, industry-standard security measures (including SSL encryption) to protect your Personal Data, but no method of transmission over the Internet is 100% secure.

8. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top.

9. Contact Us / Impressum

If you have any questions about this Privacy Policy, please contact us:

Top Five – AD
BG206654432
1510 Sofia, zh.k. Hadzhi Dimitar, bl. 120, ent. B, apt. 29, Bulgaria
[email protected]