Privacy Policy

1) Data controller

Controller: „БУЛГРЕЙП" ООД

UIC (EIK): 126650668

Registered address: Bratya Miladinovi St. 16A, Harmanli, Bulgaria (ул. „Братя Миладинови" 16А, Харманли, България)

Email: hello@emaildeer.com

Phone: +359 898 395 700

2) What personal data we collect

A) Contact form (inquiry data)

When you submit the contact form, we process the data you provide, which may include:

• Full name or agency name
• Preferred contact method (email / phone / WhatsApp)
• Phone number
• Email address
• Project summary / message
• Attachments you upload (optional)

B) Technical data (website usage and security)

When you visit the Website, our systems may process limited technical data such as:

• IP address, device/browser information, timestamps, and pages requested (server/security logs)

C) Anti-spam (Google reCAPTCHA)

Our contact form is protected by Google reCAPTCHA. reCAPTCHA helps us prevent spam, fraud, and abuse. When reCAPTCHA runs, Google may process technical and interaction data (e.g., IP address, device/browser signals, and user interactions) to perform risk analysis and protect the form.

Starting April 2, 2026, Google processes reCAPTCHA data as a data processor on our behalf under the Google Cloud Data Processing Addendum and the applicable Google Cloud Service Specific Terms.

3) Why we process your data (purposes)

We process personal data for the following purposes:

• Responding to inquiries and communicating with you about potential services/projects
• Protecting the Website and the contact form from spam, fraud, and abuse
• Operating and securing the Website (maintenance, troubleshooting, security monitoring)

4) Legal bases for processing

We rely on one or more of the following legal bases under GDPR, depending on the situation:

• Pre-contract steps / performance of a contract: to handle your request for a quote or services and communicate with you
• Legitimate interests: to manage inbound inquiries, operate the Website securely, prevent spam/abuse, and ensure network and information security
• Consent: only where we ask for it explicitly for a specific purpose (if applicable)

5) Who receives your data (recipients)

We do not sell or rent personal data.

We may share data only as necessary with:

• Google (reCAPTCHA data processor) for spam/abuse prevention on the contact form
• Website/IT service providers (e.g., hosting, security, maintenance) who process data on our instructions where applicable
• Public authorities where required by law

6) International transfers

Use of Google reCAPTCHA may involve processing and/or access from outside the EU/EEA. Where required, transfers are protected using appropriate safeguards under GDPR (depending on the provider and the service configuration).

7) Retention (how long we keep data)

• Inquiry messages and attachments: kept only as long as necessary to respond and follow up, then deleted or anonymised. As a standard practice, we aim to delete inquiry correspondence within 12 months after the last meaningful contact, unless a longer period is needed to establish, exercise, or defend legal claims.
• Server/security logs: retained for a limited period appropriate for security and troubleshooting, then deleted or anonymised.
• reCAPTCHA-related data: processed by Google on our behalf under the Google Cloud Data Processing Addendum and the applicable Google Cloud Service Specific Terms.

8) Your rights

Subject to legal conditions and exceptions, you may have the right to:

• Access your data
• Rectify inaccurate data
• Erase your data
• Restrict processing
• Object to processing based on legitimate interests
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)

To exercise your rights, contact us using the details in Section 1.

9) Complaints

You may lodge a complaint with a supervisory authority.
In Bulgaria: Commission for Personal Data Protection (CPDP / КЗЛД).

10) Providing data is voluntary

Submitting the contact form is voluntary, but if you do not provide the required information, we may not be able to respond.

11) Automated decision-making

We do not use automated decision-making that produces legal or similarly significant effects on you. (reCAPTCHA performs automated risk analysis to protect the form from abuse.)

12) Security

We apply appropriate technical and organisational measures to protect personal data (access controls, security monitoring, and measures suitable for a small service website).

13) Changes to this Privacy Policy

We may update this Privacy Policy. The updated version will be posted on this page with a new effective date.