Privacy Policy

The data controller for this website is Ventsislav Pavlov Goranov, operating as Evafangel, based in Bulgaria. This privacy policy is issued under EU Regulation 2016/679, the General Data Protection Regulation (GDPR), and applies to all personal data processed through this site.

We collect only the information needed to respond to you or schedule a call:

• Contact form: your name, email address, and message.
• Calendly bookings: name, email, phone number, and any details you provide when scheduling a call.
• Technical data: basic server logs such as IP address, browser type, and pages visited. This is used for security and performance only.
• Theme preference: this site uses localStorage — not cookies — to remember your light or dark mode choice. This is stored only in your browser and is not linked to your identity.

Your information is used to:

• Reply to inquiries and project questions.
• Schedule and manage consultation calls.
• Keep the site secure and functioning properly.
• Improve the website experience based on how visitors use it.

We do not sell your data or use it for unrelated marketing.

Under GDPR, we process personal data on the following legal bases:

• Legitimate interest — to respond to business inquiries sent through the contact form or email.
• Performance of a contract — once a project begins, to deliver the agreed services and communicate with you.
• Consent — where you explicitly agree, for example by subscribing to updates. You can withdraw consent at any time.

We do not use your data for automated decision-making or profiling.

Some of the services we use, including our hosting and infrastructure providers (Lovable, Vercel) and Calendly, may process data outside the EU/EEA, including in the United States. When this happens, we rely on Standard Contractual Clauses or equivalent safeguards approved under GDPR Article 46 to protect your data.

We rely on a small number of trusted services to run the business:

• Calendly — handles appointment scheduling. Their privacy policy applies to data entered during booking.
• Email provider — delivers and stores messages sent through the contact form.
• Hosting provider — stores site files and server logs.

Contact details and messages are kept for up to 24 months after our last communication, unless you ask us to delete them sooner. Calendly and server logs are retained according to those providers' own policies.

Under GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — request deletion of your data at any time.
• Restriction of processing — ask us to limit how we use your data.
• Data portability — receive your data in a structured, commonly used format.
• Objection — object to how we process your data, including for direct marketing.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email ventsislav.goranov@evafangel.com. We will respond within 30 days.

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the supervisory authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP). You may also contact the data protection authority in your own EU member state.

This website is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy as the business or legal requirements change. The latest version will always be posted here with the updated date.

Questions about this policy? Email ventsislav.goranov@evafangel.com.