Information We Collect

We gather different types of information depending on how you use our site. Some you provide directly, some gets collected automatically through standard web technologies.

Information You Give Us

When you fill out forms or contact us, we collect what you share: name, email address, company details, phone numbers if provided. We also keep records of your messages and questions so we can respond properly and track conversations over time.

Automatically Collected Data

Like most websites, we use cookies and similar tracking tech. This helps us understand visitor behavior—which pages people find useful, where they're coming from, what devices they use. We collect IP addresses, browser types, referring URLs, and time spent on pages. None of this identifies you personally until you choose to contact us.

How We Use Your Information

We don't collect data for the sake of it. Everything we gather serves specific purposes related to running our business and serving clients better.

We won't sell your data to third parties. That's not our business model. We might share information with service providers who help us operate—hosting companies, analytics tools, email services—but only when necessary and under strict agreements.

Legal Basis for Processing

Under GDPR, we need legitimate grounds to process personal data. Here's what applies to us:

We also rely on legitimate business interests—like improving our website or preventing abuse. And sometimes we process data because Bulgarian or EU law requires it, particularly for tax and accounting records.

Where we need consent, we'll ask explicitly. You can withdraw that consent anytime, though it might limit what we can offer.

Your Privacy Rights

GDPR gives you substantial control over personal data. These aren't just theoretical rights—we've set up processes to handle them.

To exercise these rights, send an email to our contact address below. We'll verify your identity and respond within the timeframes required by law. If you're unhappy with our response, you can file a complaint with Bulgaria's Commission for Personal Data Protection.

Data Retention and Storage

We don't keep information forever. Different data types have different retention periods based on legal requirements and business needs.

After retention periods expire, we securely delete or anonymize data. Our servers are located within the EU, and we use reputable hosting providers that comply with GDPR standards.

Security Measures

We take reasonable precautions to protect your information from unauthorized access, loss, or misuse. Our website uses SSL encryption for data transmission. Access to personal data is restricted to employees who need it for their work.

That said, no internet transmission is completely secure. We do our best, but can't guarantee absolute security. If you suspect a breach involving your data, contact us immediately so we can investigate.

We regularly review our security practices and update them as new threats emerge. Our hosting providers undergo independent security audits, and we maintain backups in secure locations.

Cookies and Tracking

Our site uses cookies—small text files stored on your device. Most are essential for basic functionality. Others help us analyze traffic and improve user experience.

Cookie Categories

Essential cookies keep the site working—handling sessions, security, and basic features. You can't disable these without breaking functionality.

Analytics cookies track how visitors use the site. We use this aggregated data to spot problems and make improvements. These don't identify you personally unless you also submit contact information.

You can control cookies through browser settings. Blocking all cookies might affect how our site works. Most browsers accept cookies by default, so you'll need to adjust settings if you prefer otherwise.

Third-Party Services

We work with external providers for hosting, analytics, and email services. These companies process data on our behalf under contractual agreements that require GDPR compliance.

Our current third-party processors include web hosting providers within the EU, analytics platforms for traffic measurement, and email service providers for communications. We review these relationships regularly to ensure they meet privacy standards.

When you click links to external websites, you leave our site and our privacy policy no longer applies. We're not responsible for how other organizations handle data.

International Data Transfers

We primarily operate within Bulgaria and the EU. Most data stays on European servers. If we need to transfer information outside the EU, we'll use approved mechanisms like Standard Contractual Clauses or adequacy decisions.

Some analytics tools might process data in other countries. We choose providers carefully and ensure appropriate safeguards are in place before any international transfers occur.

Changes to This Policy

We'll update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll update the date at the top and may notify active clients directly.

Check back periodically if you want to stay informed about how we handle privacy. Continuing to use our site after changes means you accept the updated terms.

Children's Privacy

Our services target businesses, not children. We don't knowingly collect information from anyone under 16. If you're a parent who believes we've inadvertently gathered data about your child, contact us and we'll delete it promptly.