What happens to your data.

What the contact form collects

Your name, your company, your email address, and whatever you write in the message field. Nothing else. There are no optional tracking fields and no profiling.

Why

To read your enquiry and reply to it, and to carry on the conversation if it leads somewhere. Nothing is used for marketing lists, and nothing is sold or shared for anyone else’s purposes.

The legal basis

Taking steps at your request before entering into a contract (Article 6(1)(b)), and otherwise our legitimate interest in responding to a business enquiry addressed to us (Article 6(1)(f)).

Where it goes

The form posts to our own endpoint, which runs on Amazon Web Services in the eu-central-1 region (Frankfurt) and sends the message as an email to our contact inbox. AWS acts as our processor. The submission is not written to a database and is not stored anywhere other than that mailbox.

How long it is kept

The email stays in our contact mailbox for as long as it is needed to handle your enquiry and any engagement that follows, and no longer than is necessary for that purpose. Where an enquiry leads to an engagement it becomes part of the client record, and records that Bulgarian accounting and tax law require us to keep are retained for those periods. Ask us to delete your enquiry and we will.

Who else sees it

Nobody outside the practice, except our infrastructure and email providers acting on our instructions, and anyone we are legally required to disclose to. There are no advertising or analytics recipients, because there is no advertising or analytics.

The form also carries a hidden field and a timestamp used only to detect automated spam submissions. Neither identifies you, and neither is kept.

Function logs

The function that sends the email writes to a log group with a 30-day retention, after which entries are deleted automatically. It logs only whether sending succeeded or failed - never your name, your email address or your message.

Web server access logs

None. Access logging is not enabled on the CDN or the API, so your IP address and the pages you viewed are not recorded by us at all.

Database

There isn’t one. Your submission is never written to storage anywhere in the pipeline - it is turned into an email and sent.

Email delivery

The message is sent through Amazon SES in the eu-central-1 region (Frankfurt). No delivery-event logging or archiving is configured, so SES retains no copy after sending.

The mailbox

The delivered email is the only place your submission persists, and it is kept no longer than the purpose it was sent for requires.