Privacy Policy

The data controller for this website is Ventsislav Pavlov Goranov, operating as Evafangel, based in Bulgaria. This privacy policy is issued under EU Regulation 2016/679, the General Data Protection Regulation (GDPR), and applies to all personal data processed through this site.

We collect only the information needed to respond to you or schedule a call:

• Email: if you contact us by email, we receive your name, your email address, and whatever you choose to include in your message. An automated acknowledgement is sent back to confirm we received it.
• Calendly bookings: name, email, phone number, and any details you provide when scheduling a call.
• Technical data: basic server logs such as IP address, browser type, and pages visited. This is used for security and performance only.
• Theme preference: this site uses localStorage (not cookies) to remember your light or dark mode choice. This is stored only in your browser and is not linked to your identity.

This site does not use cookies itself. Our booking tool, Calendly, may set its own cookies when you use the scheduling widget to manage your session. These are set and controlled by Calendly, not by us. See Calendly's privacy policy for details. Google Fonts does not set cookies, but loading the typefaces does send your IP address to Google. This is described in the third-party services section below.

Your information is used to:

• Reply to inquiries and project questions.
• Schedule and manage consultation calls.
• Keep the site secure and functioning properly.
• Review basic server logs to understand site performance and improve the experience.

We do not sell your data or use it for unrelated marketing.

Under GDPR, we process personal data on the following legal bases:

• Legitimate interest: to respond to business inquiries sent to us by email.
• Performance of a contract: once a project begins, to deliver the agreed services and communicate with you.
• Consent: where you explicitly agree, such as when you opt in to project communications. You can withdraw consent at any time.

We do not use your data for automated decision-making or profiling.

We use industry-standard measures, including encryption in transit (TLS/SSL) and access controls, to help protect your data.

Some of the services we use may process data outside the EU/EEA, including in the United States. This includes our hosting and infrastructure providers (Lovable, Vercel), Calendly, and Google, which serves the typefaces used on this site. Where such a transfer takes place, we rely on Standard Contractual Clauses or equivalent safeguards approved under GDPR Article 46 to protect your data.

We rely on a small number of trusted services to run the business:

• Calendly: handles appointment scheduling. Their privacy policy applies to data entered during booking.
• Email provider: delivers and stores email you send to us, and sends the automated acknowledgement of receipt.
• Hosting provider: stores site files and server logs.
• Google Fonts: the typefaces used on this site are loaded from Google's font servers. When a page loads, your browser requests those files from Google, and your IP address is transmitted to Google as part of that request. No cookies are set and no account or profile is involved.

Contact details and messages are kept for up to 24 months after our last communication, unless you ask us to delete them sooner. Server logs are automatically purged after approximately 30 days. Calendly retains data according to its own policy.

As a small business, we have not appointed a formal Data Protection Officer. For all data-related inquiries, contact us at the email below.

Under GDPR, you have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete information.
• Erasure: request deletion of your data at any time.
• Restriction of processing: ask us to limit how we use your data.
• Data portability: receive your data in a structured, commonly used format.
• Objection: object to how we process your data, including for direct marketing.
• Withdraw consent: where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email ventsislav.goranov@evafangel.com. We will respond within 30 days.

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP). You may also contact the data protection authority in your own EU member state.

A note for US visitors: Evafangel is a small overseas business that does not meet the California Consumer Privacy Act's applicability thresholds. Regardless, we're happy to honor reasonable data requests from any visitor, no matter your location. Just email us using the contact details above.

This website is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy as the business or legal requirements change. The latest version will always be posted here with the updated date.