Privacy Policy
Effective date: 1 June 2026 · Last updated: 1 June 2026
This Privacy Policy describes how Yuzalto OOD (“Yuzalto”, “we”, “us” or “our”) collects, uses, shares and safeguards personal data when you visit www.yuzalto.com (the “Website”), send us a brief, or engage our studio. We process personal data lawfully, fairly and transparently in line with Regulation (EU) 2016/679 (the “GDPR”) and the Bulgarian Personal Data Protection Act.
1. Who we are
The data controller responsible for your personal data is:
Yuzalto OOD
ul. Hristo Botev 12, office 4
5000 Veliko Tarnovo, Bulgaria
Email: privacy@yuzalto.com
Phone: +359 62 700 215
Company registration number (EIK): 208112940
VAT number: BG208112940
2. Personal data we collect
We collect data you provide directly, data generated as you use the Website, and limited data from providers acting on our behalf:
- Information you give us — when you submit the contact form, email us or engage our services: your name, company, email address, phone number, the service you're interested in, budget range and the contents of your brief or message.
- Client & project data — information needed to deliver our services, including billing details and any materials you share.
- Technical & usage data — IP address, device and browser information, pages viewed and referring URLs, collected via cookies and similar technologies (see our Cookie Policy).
- Communications — records of our correspondence with you.
We do not intentionally collect special categories of personal data. Please do not submit such information through the Website.
3. How and why we use your data
- to respond to your enquiry and provide the information or proposals you request;
- to enter into and perform contracts and deliver our services;
- to manage our client relationship, including invoicing and support;
- to operate, secure and improve the Website;
- to send service communications and, where permitted, occasional studio updates;
- to comply with our legal, tax and accounting obligations; and
- to establish, exercise or defend legal claims.
4. Legal bases for processing
| Purpose | Legal basis |
|---|---|
| Responding to enquiries / pre-contract steps | Steps at your request before a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)) |
| Delivering services and managing contracts | Performance of a contract (Art. 6(1)(b)) |
| Updates to existing clients | Legitimate interests, subject to your right to object (Art. 6(1)(f)) |
| Non-essential cookies & analytics | Your consent (Art. 6(1)(a)) |
| Accounting, tax & legal compliance | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you may withdraw it at any time without affecting processing carried out beforehand.
5. Sharing & service providers
We never sell your personal data. We share it only where necessary with:
- Processors acting on our instructions — website hosting, email delivery, analytics, advertising platforms and accounting tools — under agreements requiring appropriate safeguards;
- Professional advisers such as accountants and lawyers, where required;
- Authorities where we are legally obliged to disclose; and
- Successors in the event of a reorganisation, merger or sale, subject to this Policy.
6. International transfers
We aim to keep personal data within the European Economic Area (EEA). Where a provider processes data outside the EEA, we rely on an adequacy decision of the European Commission or appropriate safeguards such as the Standard Contractual Clauses. You may request a copy of the relevant safeguards by contacting us.
7. How long we keep data
- Enquiries that do not become clients — up to 24 months from last contact.
- Client records — for the duration of our engagement and the period required by Bulgarian accounting and tax law thereafter (generally up to 10 years for accounting documents).
- Website analytics — for the period configured in our analytics tools (see the Cookie Policy).
When data is no longer needed, we securely delete or anonymise it.
8. Your rights
Subject to the conditions in the GDPR, you have the right to access, rectify, erase, restrict or object to processing of your data, to data portability, to withdraw consent, and to lodge a complaint with a supervisory authority. To exercise any of these, email privacy@yuzalto.com. We respond within one month, as required by law, and may need to verify your identity first.
9. Cookies
We use cookies and similar technologies to operate the Website and, with your consent, to understand how it's used. For details and how to manage them, see our Cookie Policy.
10. Security
We apply appropriate technical and organisational measures — including encryption in transit, access controls and supplier due diligence — to protect personal data against unauthorised access, loss or disclosure. No internet transmission is completely secure, but we continually review our safeguards.
11. Children
The Website and our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. The latest version is always available here with a revised “Last updated” date. Material changes will be communicated where appropriate.
13. Contact & complaints
Questions or concerns? Contact us at privacy@yuzalto.com. You also have the right to lodge a complaint with the Bulgarian supervisory authority:
Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Website: www.cpdp.bg
Email: kzld@cpdp.bg