Privacy Policy
Last updated: 2 April 2026
1. Data Controller
The data controller is Mebeli Leshovi, located in Yakoruda, Bulgaria. For questions related to the processing of personal data, contact us at: mebeli.leshovi@gmail.com.
2. What Data We Collect
a) Contact form
When you fill in the contact form, we collect the following data that you provide voluntarily:
- Name
- Email address
- Phone number
- Message content (project description, questions, etc.)
b) Analytics and cookies
This website uses Google Analytics 4 (GA4) to collect anonymised statistical information about visits. GA4 collects data such as: IP address (anonymised), browser and device type, pages visited, session duration. This data does not identify you personally and is used solely to improve the website.
c) Technical data
IP addresses are processed temporarily in server memory for the sole purpose of protecting against abuse (rate limiting). This data is not written to the database and is not retained.
3. Purpose of Processing and Legal Basis
Contact form
Purpose: Responding to your inquiry, preparing a quote and communicating about your specific project.
Legal basis: Art. 6(1)(f) GDPR — legitimate interests (processing is necessary to respond to a voluntarily submitted inquiry).
Google Analytics
Purpose: Understanding how the website is used in order to improve it.
Legal basis: Art. 6(1)(f) GDPR — legitimate interests (analysis of anonymised traffic data). You may opt out at any time (see section 5).
4. Cookies
This website uses cookies only through Google Analytics 4. GA4 sets cookies (e.g. _ga, _ga_*) to distinguish users and measure traffic. These cookies are stored for up to 2 years.
Opt out of analytics cookies: You can install the Google Analytics Opt-out Browser Add-on or manage cookies through your browser settings.
5. Third-Party Data Processors
We work with trusted service providers who process data on our behalf. They are bound by data processing agreements and are required to comply with GDPR.
| Provider | Purpose | Data |
|---|---|---|
| Resend | Sending email notifications on inquiry | Name, email, phone, message |
| Google Analytics | Web analytics | Anonymised IP, on-site behaviour |
| Vercel | Website hosting and delivery | Technical request data (IP, headers) |
Contact form data is not shared with any other third party beyond those listed above.
6. Retention Period
Contact form data is retained for up to 2 years from the date of the inquiry, after which it is deleted. If a project is completed, we retain only project information (without personal data) for documentation purposes. Analytics data in Google Analytics is retained for 14 months (GA4 default setting).
7. Your Rights
Under GDPR (Regulation (EU) 2016/679) you have the following rights:
- Right of access — to receive information about whether we process your data and a copy of it.
- Right to rectification — to request correction of inaccurate data.
- Right to erasure — to request deletion of your data (the "right to be forgotten").
- Right to restriction — to request restriction of processing under certain conditions.
- Right to data portability — to receive your data in a structured, machine-readable format.
- Right to object — to object to processing based on legitimate interests.
To exercise your rights, contact us at: mebeli.leshovi@gmail.com. We respond within 30 days.
8. Complaints
If you believe we are processing your data in violation of applicable law, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), website: www.cpdp.bg.
9. Changes to This Policy
We reserve the right to update this policy as necessary. The date of the last update is indicated at the top of this page.