Legal information and privacy
Last updated: 12 October 2026
1. Provider and data controller details
This website presents the activities of Mebeli Leshovi and is operated by the following company:
- Legal name
- LESHOWI EOOD
- Unified Identification Code (EIK), Bulgarian Commercial Register
- 205203572
- Registered office and management address
- 8 Gotse Delchev Street, 2790 Yakoruda, Bulgaria. This is the company's legal address.
- Workshop and visitor address
- Ring Road, 2790 Yakoruda, Bulgaria. Visits are by prior arrangement.
- Contact details
- +359 89 862 1449 · mebeli.leshovi@gmail.com
LESHOWI EOOD is the controller of personal data processed through this website. For questions about personal data, contact us at mebeli.leshovi@gmail.com.
2. What data we collect
a) Contact form
When you fill in the contact form, we collect the following data that you provide voluntarily:
- Name
- Email address
- Phone number
- Town or village
- Project type and timescale
- Message content (project description, questions, etc.)
Your name, message and at least one contact method are required so we can respond. All other fields are optional. The form cannot be submitted without the required information.
b) Analytics and cookies
Only after you consent, this website uses Google Analytics 4 (GA4). Google processes technical and website usage data, including approximate location, browser and device type, pages visited, events and session duration. The IP address is used to determine approximate location and is not logged or stored by GA4 as a separate field.
The site also uses Umami Cloud for aggregate statistics without cookies. It processes pages visited, referring website, browser, operating system and device type, country, and actions such as clicks on phone, Viber or email links and successful form submissions. Enquiry content is not sent to Umami.
c) Technical data
IP addresses are processed temporarily in server memory for the sole purpose of protecting against abuse (rate limiting). This data is not written to the database and is not retained.
3. Purpose of processing and legal basis
Contact form
Purpose: Responding to your enquiry, preparing a quote and communicating about your specific project.
Legal basis: Art. 6(1)(b) GDPR: taking steps at your request before entering into a contract. For general questions that do not lead towards a contract, the basis is our legitimate interest in responding to a voluntarily submitted message under Art. 6(1)(f).
Google Analytics
Purpose: Understanding how the website is used in order to improve it.
Legal basis: your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time using the controls in section 4, without affecting processing carried out before withdrawal.
Umami
Purpose: Counting visits and enquiries by phone, Viber and form, including from visitors who decline cookies.
Legal basis: Art. 6(1)(f) GDPR: our legitimate interest in measuring the website's aggregate performance with minimal technical data and no tracking cookies. You may object to this processing by contacting us.
We do not use your personal data for automated decision-making or profiling.
4. Cookies
After consent, Google Analytics 4 sets the analytics cookies _ga and _ga_* to distinguish browsers and measure visits. They are stored for up to 2 years. Your choice is kept in a necessary cookie-consent localStorage record until you change it or clear this site's data. Umami does not set cookies.
You can accept or decline analytics cookies at any time using the controls below. If you decline, we stop Google Analytics and delete GA cookies accessible to this website. You can also manage stored data in your browser settings.
Current choice: you have not chosen yet
5. Third-party data processors
We work with trusted service providers who process data on our behalf. They are bound by data processing agreements and are required to comply with GDPR.
| Provider | Purpose | Data |
|---|---|---|
| Resend | Sending email notifications on enquiry | Name, email, phone and message. Data may be processed in the US under an applicable GDPR Chapter V mechanism, including the EU-US Data Privacy Framework or Standard Contractual Clauses. |
| Google Analytics | Web analytics | Technical data and on-site behaviour, only after consent. Data may be processed in the US under an applicable GDPR Chapter V mechanism, including the EU-US Data Privacy Framework or Standard Contractual Clauses. |
| Umami | Aggregate web statistics without cookies | Pages visited, referrer, browser, device, country and events without form content. Data may be processed in the US under an applicable GDPR Chapter V mechanism. |
| Vercel | Website hosting and delivery | Technical request data, including IP address and headers. Data may be processed in the US under an applicable GDPR Chapter V mechanism, including the EU-US Data Privacy Framework or Standard Contractual Clauses. |
Contact form data is not shared with any other third party beyond those listed above.
6. Retention period
Contact form data is kept while we handle the enquiry and for up to 2 years after receipt, unless a longer period is needed to perform a contract, meet a legal obligation or defend legal claims. It is then deleted or anonymised. Data from enquiries that do not become projects is not used for marketing. Google Analytics data is kept for up to 14 months and aggregate Umami statistics for up to 6 months.
7. Your rights
Under GDPR (Regulation (EU) 2016/679) you have the following rights:
- Right of access: to receive information about whether we process your data and a copy of it.
- Right to rectification: to request correction of inaccurate data.
- Right to erasure: to request deletion of your data (the "right to be forgotten").
- Right to restriction: to request restriction of processing under certain conditions.
- Right to data portability: to receive your data in a structured, machine-readable format.
- Right to object: to object to processing based on legitimate interests.
- Right to withdraw consent: for Google Analytics at any time using the controls in section 4.
To exercise your rights, contact us at: mebeli.leshovi@gmail.com. We respond within 30 days.
8. Complaints
If you believe we are processing your data in violation of applicable law, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP), website: www.cpdp.bg.
9. Changes to this policy
We reserve the right to update this policy as necessary. The date of the last update is indicated at the top of this page.