Privacy policy
Last updated 10 October 2026
This policy explains how best.studio collects and uses personal data when you visit this website, contact us or request a review. We keep it short and only collect what we need.
1. Who we are
best.studio is the shared brand of two Bulgarian companies. They run this website together and are joint controllers of the personal data described here (Art. 26 GDPR):
- BEST STUDIO SOLAKOV EOOD
- UIC (ЕИК)207727552
- Registered addresszh.k. Lazur, bl. 65, entr. 3, fl. 1, apt. 2, 8000 Burgas, Bulgaria
- ManagerSoner Solakov
- BEST STUDIO SAVOV EOOD
- UIC (ЕИК)207727584
- Registered addresszh.k. Izgrev, bl. 86, entr. 3, fl. 7, apt. 13, 8000 Burgas, Bulgaria
- ManagerBoris Savov
Both companies are responsible for your data, and you can exercise your rights against either of them. To make it simple, we use one contact point for every privacy question or request: contact@beststudio.agency.
2. What we collect
- Contact form: your name, email address and message, and optionally your company, the type of project and a budget range.
- Free review form: your name, email address, a link to your website or social profile, what you want reviewed and, optionally, what you would like to improve.
- Email, phone, WhatsApp or Viber: the details you share with us when you contact us directly.
- Technical data: when you visit the site, our hosting provider automatically processes your IP address, browser type and the pages requested, to deliver the site and keep it secure.
- Analytics (only with your consent): if you accept analytics cookies, Google Analytics collects information about how the site is used, such as pages viewed, time on page, device type, browser and approximate location (country or city). It does not tell us who you are.
We do not ask for sensitive data. Please do not send it to us through the forms.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your enquiry or review request | Steps you ask us to take before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering you (Art. 6(1)(f)) |
| Preparing a proposal and delivering a project | Performance of a contract (Art. 6(1)(b)) |
| Invoicing and accounting | Legal obligation (Art. 6(1)(c)), under the Bulgarian Accountancy Act |
| Delivering the website and keeping it secure | Legitimate interest (Art. 6(1)(f)) |
| Understanding how the site is used (Google Analytics) | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
We do not sell your data, use it for advertising or make decisions about you by automated means.
4. Who processes it for us
We use a small number of trusted providers. Each acts on our instructions under a data processing agreement:
- Cloudflare, Inc. hosts the website and processes technical data to deliver and protect it.
- Resend delivers the messages you send through our forms to our inbox.
- Google Ireland Ltd / Google LLC provides our email (Google Workspace) and, if you consent, website analytics (Google Analytics).
If you contact us via WhatsApp or Viber, your messages are also handled by those services under their own privacy policies.
Some of these providers are based in the United States. Where data leaves the European Economic Area, it is protected by the EU–US Data Privacy Framework where the provider is certified, or by the European Commission’s Standard Contractual Clauses.
5. How long we keep it
- Enquiries and review requests that do not lead to a project: up to 12 months, then deleted.
- Client correspondence and contracts: for the duration of the project and as long as needed to protect our legal rights.
- Invoices and accounting records: for the period required by Bulgarian law (currently 10 years).
- Analytics data: up to 14 months in Google Analytics.
- Technical logs: kept by our hosting provider for a short period for security.
6. Cookies
The website works without cookies. We only use analytics cookies if you accept them in the cookie banner:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Tells visits apart with a random ID | 2 years |
| _ga_<ID> | Google Analytics | Keeps the state of the current visit | 2 years |
We also save your choice in your browser’s local storage so we do not ask again on every page. You can change your choice at any time with the Cookie settings link in the footer. If you reject analytics, Google Analytics is not loaded at all.
7. Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format and withdraw your consent at any time. Withdrawing consent does not affect processing that happened before.
To use any of these rights, email contact@beststudio.agency. We reply within one month.
You can also complain to the Bulgarian data protection authority: Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, cpdp.bg.
8. Security
The website is served only over an encrypted connection (HTTPS). Access to enquiries is limited to the two of us, and our accounts are protected with strong passwords and two-factor authentication where available.
9. Children
This website is meant for businesses and is not directed at children. We do not knowingly collect data from children.
10. Changes
If we change this policy, we will update it on this page and change the date at the top.