Privacy Policy

1. Who we are

This website (bulgaria-company-setup.com) is operated by Answer 247 EOOD, a Bulgarian limited liability company registered in the Commercial Register under EIK 208420385, VAT number BG208420385, with registered office at Stara Planina 9, Varna 9000, Bulgaria ("we", "us", "our"). We act as the data controller for personal data collected through this site.

For any privacy matter, contact our data protection contact at info@bulgaria-company-setup.com.

2. What data we collect

• Contact form data — name, email address, and the content of your message, submitted voluntarily through our contact form.
• Email correspondence — when you email us directly, we receive your email address and message content.
• Technical data — IP address, browser type, device type, referring page, and pages visited, collected automatically when you use the site.
• Cookies & analytics — see our Cookie Policy for the full list.
• Client onboarding data — if you engage us as a client, we additionally process identification documents, address proof, and source-of-funds information as required by Bulgarian and EU AML legislation.

3. Why we process your data (lawful basis)

• To respond to your enquiry — Art. 6(1)(b) GDPR (steps prior to entering a contract) and Art. 6(1)(f) (our legitimate interest in handling business enquiries).
• To provide our services — Art. 6(1)(b) GDPR (performance of a contract).
• To comply with legal obligations — Art. 6(1)(c) GDPR (AML/KYC, tax, bookkeeping, retention obligations under Bulgarian law).
• Analytics & marketing cookies — Art. 6(1)(a) GDPR (your consent), which you may withdraw at any time via the cookie settings on the site.

4. How long we keep it

• Contact form enquiries that do not lead to engagement: up to 12 months, then deleted.
• Client files and accounting records: 10 years, as required by Bulgarian law.
• AML/KYC documentation: 5 years after the end of the business relationship.
• Server logs: up to 30 days for security and abuse-prevention purposes.

5. Who we share it with

We never sell your personal data. We share it only with:

• Service providers acting as processors on our instructions — our hosting provider, email delivery provider, and accounting software, all bound by data-processing agreements.
• Bulgarian authorities — Commercial Register, NRA (tax authority), banks, and notaries, where required to deliver the services you have engaged us for.
• Legal & regulatory bodies where disclosure is legally required.

Some processors may be located outside the EU/EEA. In those cases we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate data;
• Request erasure ("right to be forgotten") where applicable;
• Restrict or object to processing;
• Receive your data in a portable format;
• Withdraw consent at any time (where consent is the lawful basis);
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

To exercise any of these rights, email us at info@bulgaria-company-setup.com. We respond within 30 days.

7. Security

We use TLS encryption in transit, encrypted-at-rest databases, role-based access controls, and audit logging. No system is perfectly secure, but we apply industry-standard safeguards.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified on this page with a new effective date. The current version is dated 16 June 2026.