Privacy Policy

What we collect

Contact and consultation requests: when you submit the contact form, the consultation form, or the request_consultation tool of our public MCP server, we receive the name, email address, company name and message you provide.

Bookings: when you book a consultation through our booking pages we receive your name, email address, any notes you add, and the time slot you choose.

Correspondence: emails you send us, including their metadata.

Usage analytics: we use Google Analytics 4 and Hotjar to understand how the site is used (pages visited, approximate location, device type, interaction heatmaps). These tools set cookies and process IP addresses on our behalf. A language-preference cookie (i18n_redirected) remembers your chosen language.

Why we process it

To respond to your enquiry and prepare an offer (performance of pre-contractual steps, GDPR Art. 6(1)(b)).

To schedule and hold booked consultations (Art. 6(1)(b)).

To improve the website and our services through aggregated analytics (legitimate interest, Art. 6(1)(f)).

We do not sell personal data, and we do not use it for third-party advertising.

Who processes it for us

We use a small set of processors to run this site: Vercel (hosting), Supabase (application database and authentication), Google (Workspace email, Calendar and Analytics), Resend (transactional email), and Hotjar (product analytics). Each processes data only on our instructions. Some processors are established outside the EEA; transfers rely on the EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

Enquiries and booking records are kept for as long as needed to handle your request and, where an engagement follows, for the duration of the engagement plus the retention periods Bulgarian accounting and tax law requires. Analytics data is retained per the default retention settings of Google Analytics and Hotjar. You can ask us to delete your enquiry data at any time.

Your rights

Under the GDPR you can request access to the personal data we hold about you, ask for correction or deletion, ask us to restrict processing, object to processing based on legitimate interest, and receive the data you provided in a portable format.