Last updated: 9 August 2026
This policy explains what happens to the personal data you send us through the contact form on this site. We keep it deliberately short, because we deliberately collect very little.
The data controller is Exovoid Ltd., bul. Cherni Vrah 47A, 1404 Sofia, Bulgaria (company registration number: BG208120758).
For any privacy question, or to exercise the rights listed below, write to [email protected].
| Data | Why | Legal basis |
|---|---|---|
| Name, email address, subject (required); company (optional) | To read your enquiry and reply to it, and to send you a confirmation that we received it. | Art. 6(1)(b) GDPR - steps taken at your request before entering into a contract; and Art. 6(1)(f) - our legitimate interest in answering people who contact us. |
| Your IP address | To limit how many messages can be sent from one address, so the form cannot be abused. Held in memory for 15 minutes and never written to disk. | Art. 6(1)(f) GDPR - our legitimate interest in keeping the form working. |
| Data collected by Google reCAPTCHA | To tell real visitors apart from bots. Google receives your IP address and information about your device and browsing behaviour. This only happens once you start filling in the form. | Art. 6(1)(f) GDPR - our legitimate interest in preventing spam and abuse. |
We do not use your details for marketing, we do not add you to any mailing list, and we never sell or rent them. There is no analytics profiling tied to what you submit, and no automated decision-making.
We set no cookies of our own. The only cookies this site can place come from Google Analytics, and they are only placed if you press Accept on the cookie banner. Nothing is stored before you choose, and refusing costs you nothing - the site behaves identically.
| Cookie | Purpose | Expires | Set when |
|---|---|---|---|
| _ga | Google Analytics - distinguishes one visitor from another so visit counts are not double-counted. | 2 years | Only after you accept |
| _ga_6K2JNF5CSB | Google Analytics - keeps track of the current session. | 2 years | Only after you accept |
| exovoid-consent | Remembers your answer to the cookie banner so we stop asking. Stored in your browser's local storage, not sent to us or anyone else. Strictly necessary, so it needs no consent. | Until you clear it | When you answer the banner |
Google Analytics tells us things like which pages get read and roughly where visitors come from. Google receives your IP address and a randomly generated identifier, and acts as our processor. The legal basis is your consent, under Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive. We do not run Google Ads and do not use analytics data for advertising or to build profiles.
Where either provider transfers data outside the EU/EEA, that transfer relies on the European Commission's Standard Contractual Clauses and, for transfers to the United States, the EU-US Data Privacy Framework.
Our website itself stores nothing: the form does not write to a database and does not log what you typed. Your message lives only in our email mailbox. We keep enquiry emails for 24 months from our last exchange with you, then delete them.
If your enquiry becomes a project, the correspondence is kept for as long as we need it for that contract and for the periods Bulgarian accounting and tax law require.
Under the GDPR you can ask us to:
Write to [email protected] and we will respond within one month. There is no charge.
No. It is not a statutory or contractual requirement. But we need a name, an email address and a subject to be able to reply, so without them the form cannot be submitted. Company is optional.
If we change how we handle your data, we will update this page and the date at the top.