Last updated: 9 August 2026
This policy explains what personal data WebCore ("we", "us") collects through webcore.bg, why we collect it and your rights in relation to it. We comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Bulgarian data protection law.
1. Who processes your data
The data controller is WebCore, Plovdiv, Bulgaria. For questions about this policy or your data, contact us at:
- Email: web.core.eood@gmail.com
- Phone: +359 899 178 506
2. What data we collect
We collect personal data only when you provide it voluntarily or when you visit our website:
- Contact form data: name, phone number, email address, company name (optional), selected service and budget (optional), and the contents of your message.
- Technical and analytics data: IP address, device and browser type, pages visited, time spent on the website and acquisition source. This is collected through Google Analytics 4 and Microsoft Clarity only after your consent. See our Cookie Policy.
3. How we use the data
- To respond to your enquiry and prepare a project proposal;
- To provide agreed services if you become a client;
- To understand how the website is used and improve its content and performance;
- To meet legal obligations, including accounting requirements for concluded contracts.
4. Legal basis for processing
We process your data on one of the following legal bases:
- Consent for analytics cookies such as Google Analytics and Microsoft Clarity;
- Pre-contractual steps when you request a proposal;
- Performance of a contract after you become a client;
- Legitimate interest in maintaining the security and operation of the website.
5. Who we share data with
We do not sell or rent your personal data. We share data only with service providers that help us deliver our services:
- Resend for contact-form email delivery;
- Google Analytics 4 (Google Ireland Ltd.) for traffic analysis, with consent;
- Microsoft Clarity (Microsoft Corporation) for behaviour analysis, with consent;
- Vercel Inc. for hosting and technical infrastructure.
These providers may process data outside the EEA subject to appropriate data protection safeguards.
6. Retention period
We keep contact-form data for as long as necessary to answer your enquiry. If you become a client, we retain it for the duration of our contractual relationship and any additional legally required period. Analytics data is retained according to the default Google Analytics and Microsoft Clarity settings, usually for up to 14 to 26 months.
7. Your rights
Under the GDPR, you have the right to:
- access your personal data;
- correct inaccurate data;
- request erasure of your data;
- restrict processing;
- data portability;
- object to processing;
- withdraw consent at any time without affecting prior lawful processing.
To exercise these rights, email web.core.eood@gmail.com. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, Sofia, at www.cpdp.bg.
8. Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including encrypted HTTPS connections and access limited to authorised persons.
9. Changes to this policy
We may update this policy periodically. Material changes will be published on this page with an updated date.
10. Contact
For questions about this policy, email web.core.eood@gmail.com or call +359 899 178 506.
