Legal information
Privacy policy
This policy explains how we process personal data when you use webagency.bg or send an enquiry about a project.
Last updated:
While operating as an individual, add your full legal name and a real contact for personal-data questions. After registering a company, replace this with its legal name and registration number. Before launch, also confirm actual vendors and retention periods. This is a working foundation and should be reviewed by qualified legal counsel.
1. Data controller
Until a company is registered, the controller is [your full legal name as an individual]. After registration, add [legal entity name], company registration number [registration number] and correspondence address. For personal-data questions, contact contact@webagency.bg.
2. Personal data we process
- Name, email address, phone number and organisation details when you provide them in a form.
- Project information: goals, services, budget, timeline, current website address and messages you voluntarily send.
- Files you choose to attach to an enquiry.
- Technical data required for website security and operation, such as IP address, browser information and server logs.
3. Purposes and legal bases
Replying to an enquiry and preparing a proposal
Steps before entering into a contract — Article 6(1)(b) GDPR.
Delivering and managing a client project
Performance of a contract — Article 6(1)(b) GDPR.
Security, abuse prevention and protection of the website
Legitimate interests — Article 6(1)(f) GDPR.
Analytics or marketing, if enabled
Consent — Article 6(1)(a) GDPR.
4. Recipients and processors
Only people with a need to know can access the data, together with providers processing data on our behalf — for example hosting, email, forms/CRM, cloud storage or analytics providers. The website currently loads fonts through Google Fonts; before publishing, confirm whether you will self-host them or list Google as a provider with its purpose and transfer information. Add every other actual provider, purpose and policy link as well.
5. International transfers
If a provider processes data outside the European Economic Area, this section will identify the country, transfer mechanism and applicable safeguards.
6. Retention periods
Enquiries are retained for [insert period] after the last meaningful communication. Client-project data is retained for the contract term and applicable statutory accounting and tax retention periods. Data is deleted or anonymised when no longer needed.
7. Your rights
You have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Contact us to exercise your rights. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection. cpdp.bg.
8. Security and changes
We use appropriate technical and organisational measures based on the risk. We may update this policy when services, providers or legal requirements change; the latest revision date will always be published.
9. Cookies and settings
For details about browser storage, cookies and changing your choices, see our Cookie policy.