Skip to content
Legal information

Privacy Policy

Last updated: 9 August 2026

This policy explains what personal data WebCore ("we", "us") collects through webcore.bg, why we collect it and your rights in relation to it. We comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Bulgarian data protection law.

1. Who processes your data

The data controller is WebCore, Plovdiv, Bulgaria. For questions about this policy or your data, contact us at:

2. What data we collect

We collect personal data only when you provide it voluntarily or when you visit our website:

  • Contact form data: name, phone number, email address, company name (optional), selected service and budget (optional), and the contents of your message.
  • Technical and analytics data: IP address, device and browser type, pages visited, time spent on the website and acquisition source. This is collected through Google Analytics 4 and Microsoft Clarity only after your consent. See our Cookie Policy.

3. How we use the data

  • To respond to your enquiry and prepare a project proposal;
  • To provide agreed services if you become a client;
  • To understand how the website is used and improve its content and performance;
  • To meet legal obligations, including accounting requirements for concluded contracts.

4. Legal basis for processing

We process your data on one of the following legal bases:

  • Consent for analytics cookies such as Google Analytics and Microsoft Clarity;
  • Pre-contractual steps when you request a proposal;
  • Performance of a contract after you become a client;
  • Legitimate interest in maintaining the security and operation of the website.

5. Who we share data with

We do not sell or rent your personal data. We share data only with service providers that help us deliver our services:

  • Resend for contact-form email delivery;
  • Google Analytics 4 (Google Ireland Ltd.) for traffic analysis, with consent;
  • Microsoft Clarity (Microsoft Corporation) for behaviour analysis, with consent;
  • Vercel Inc. for hosting and technical infrastructure.

These providers may process data outside the EEA subject to appropriate data protection safeguards.

6. Retention period

We keep contact-form data for as long as necessary to answer your enquiry. If you become a client, we retain it for the duration of our contractual relationship and any additional legally required period. Analytics data is retained according to the default Google Analytics and Microsoft Clarity settings, usually for up to 14 to 26 months.

7. Your rights

Under the GDPR, you have the right to:

  • access your personal data;
  • correct inaccurate data;
  • request erasure of your data;
  • restrict processing;
  • data portability;
  • object to processing;
  • withdraw consent at any time without affecting prior lawful processing.

To exercise these rights, email web.core.eood@gmail.com. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, Sofia, at www.cpdp.bg.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including encrypted HTTPS connections and access limited to authorised persons.

9. Changes to this policy

We may update this policy periodically. Material changes will be published on this page with an updated date.

10. Contact

For questions about this policy, email web.core.eood@gmail.com or call +359 899 178 506.

ViberWhatsApp