Privacy Policy

Last updated: 11 November 2026

This policy explains what personal data this website processes, why, and what your rights are under the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.

1. Who is responsible

[Your full name], trading as ALEXANDRA STUDIO, [Street, postcode, city], Bulgaria. Contact: alex.ugc.work@gmail.com, +359 899 138 819.

2. Visiting the website

When you open the site, your browser sends technical data (IP address, date and time, page requested, browser and device type) to the hosting provider, Netlify, Inc., San Francisco, USA (netlify.com/privacy). Netlify may process this data in the USA. This is needed to deliver the pages and keep them secure (Art. 6(1)(f) GDPR). Netlify keeps these server logs only as long as needed for operation and security, under its own privacy policy. They are not used to identify you.

There is no analytics, no advertising tracker, no social media plugin and no embedded video or map on this website.

3. Fonts

The website currently loads its fonts from Google Fonts, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To deliver the fonts, your browser connects to Google’s servers and Google receives your IP address; Google may process data in the USA. Google Fonts does not set cookies. Legal basis: Art. 6(1)(f) GDPR (a consistent look of the website). More: policies.google.com/privacy.

4. Contact form

If you send the contact form, it processes your name and email address (required) and, only if you fill them in, your business name, business type, package, budget, current website and message. These are used only to reply to your enquiry and, if you wish, to prepare a quote (Art. 6(1)(b) GDPR). The form contains a hidden anti-spam field and no tracking.

The form is delivered by FormSubmit (formsubmit.co), a form-forwarding service that passes your message to my email inbox. FormSubmit may process the data outside the EU/EEA. Please don’t enter sensitive data (such as health information) in the message.

5. Email, phone and Instagram

If you write by email or call, I process the details you share to reply (Art. 6(1)(b) or (f) GDPR). Emails are stored in a Gmail account provided by Google Ireland Limited. The Instagram link only opens Instagram; nothing from Instagram loads on this website until you click it, after which Meta’s privacy policy applies.

6. Clients

If we work together, I process the contact, project and invoicing data needed for the contract (Art. 6(1)(b) GDPR) and keep accounting records as long as Bulgarian accounting and tax law requires (Art. 6(1)(c) GDPR).

7. How long data is kept

Enquiries that don’t lead to a project are deleted within 12 months of the last contact, or earlier if you ask. Client and invoicing data is kept for the statutory retention periods.

8. Who receives data

Only the service providers named above (hosting, FormSubmit, Google for email and fonts) and, for clients, an accountant if one is used. Data is never sold or used for advertising. Where a provider processes data outside the EU/EEA, this relies on the safeguards that provider offers, such as an adequacy decision or Standard Contractual Clauses.

9. Your rights

You can ask for access, correction, deletion, restriction or a copy of your data (portability), and you can object to processing based on legitimate interests. Just email alex.ugc.work@gmail.com. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (КЗЛД), cpdp.bg, or to the authority in your EU country.

10. Storage in your browser

The website sets no cookies. It stores two small technical values in your browser; see the Cookie Policy.

11. Changes

This policy is updated when the website or the services it uses change. The date at the top shows the latest version.