Privacy Policy

Last Updated: June 12, 2026

1. Introduction

Stefanov Digital ("we", "us", "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with:

GDPR (General Data Protection Regulation - EU)
UK GDPR (United Kingdom General Data Protection Regulation)
Bulgarian Personal Data Protection Act

2. Data Controller

Stefanov Digital
Email: office@stefanovdigital.com
Website: https://stefanovdigital.com

We are the data controller for the personal information we collect through our website and services.

3. What Data We Collect

3.1 Information You Provide Directly:

Contact Information: Name, email address, phone number
Business Information: Company name, job title, business needs
Communications: Content of messages you send us
Project Information: Project requirements, preferences, feedback

3.2 Information We Collect Automatically:

Usage Data: IP address, browser type, operating system
Cookies: Session cookies, preferences (see our Cookie Policy)
Analytics Data: Pages visited, time on site, referral source
Chat Data: Conversations through Tawk.to chat widget

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 Providing Services (Legal Basis: Contract)

Responding to your inquiries
Providing quotes and proposals
Delivering web development projects
Customer support and technical assistance

4.2 Communication (Legal Basis: Legitimate Interest)

Sending project updates
Responding to your questions
Sending important service notices

4.3 Marketing (Legal Basis: Consent)

Sending newsletters (with consent only)
Sharing service updates
Promotional offers (you can opt-out anytime)

4.4 Improving Services (Legal Basis: Legitimate Interest)

Analyzing website usage
Improving user experience
Developing new features

4.5 Legal Obligations (Legal Basis: Legal Obligation)

Complying with tax laws
Responding to legal requests
Protecting our rights

5. Data Sharing

We DO NOT sell your personal data. We only share data with:

5.1 Service Providers:

Vercel: Website hosting (US - Privacy Shield certified)
Tawk.to: Chat support (EU servers)
Email providers: For communication

5.2 Legal Requirements:

We may disclose data if required by law or to protect our rights.

6. International Data Transfers

Your data may be transferred and processed outside the EU/EEA. We ensure appropriate safeguards through:

Standard Contractual Clauses (SCCs)
EU Adequacy Decisions
Privacy Shield certification (where applicable)

7. Data Retention

We retain your personal data only as long as necessary:

Active Clients: Duration of business relationship
Inquiries: 2 years after last communication
Marketing Data: Until consent is withdrawn
Legal Requirements: As required by applicable law (typically 5-7 years)

8. Your Rights

Under GDPR and UK GDPR, you have the following rights:

8.1 Right to Access

You can request a copy of your personal data.

8.2 Right to Rectification

You can request correction of inaccurate data.

8.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your data under certain conditions.

8.4 Right to Restrict Processing

You can request restriction of processing your data.

8.5 Right to Data Portability

You can receive your data in a structured, machine-readable format.

8.6 Right to Object

You can object to processing of your data for marketing purposes.

8.7 Right to Withdraw Consent

You can withdraw your consent at any time.

How to Exercise Your Rights:

Email us at: office@stefanovdigital.com
We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your data:

SSL/TLS encryption
Secure servers and databases
Access controls
Regular backups
Staff training

10. Cookies

We use cookies to improve your experience. For more information, see our Cookie Policy.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for their privacy practices.

12. Children's Privacy

Our services are not intended for individuals under 16. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or website notice.

14. Contact and Complaints

For questions about this policy or your data:
Email: office@stefanovdigital.com

Right to Complain:

For EU/Bulgaria:
Commission for Personal Data Protection (CPDP)
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Email: kzld@cpdp.bg
Website: www.cpdp.bg

For UK:
Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Phone: 0303 123 1113

This privacy policy is effective as of June 12, 2026.