Legal

Website privacy notice.

How enquiry details and website request data are handled. Last updated 7 October 2026.

Controller, processors and retention

Controller
ENDIGITAL (LTD)
Registered address
16 Gurgulyat Street, Sofia, Bulgaria
Privacy contact
legal@endigitalx.com
Website host
Customer-managed Debian server (A1 Bulgaria network), Docker container behind nginx
Hosting regions
Bulgaria (Sofia), European Union
Email delivery provider
Amazon Web Services — Amazon SES
Email processing regions
Europe (Ireland), eu-west-1
International transfers and safeguards
Website hosting and enquiry delivery use EU infrastructure (Bulgaria; AWS eu-west-1, Ireland). Amazon Web Services is a US-headquartered processor; any onward access is governed by its Data Processing Addendum and EU Standard Contractual Clauses.
Enquiry retention
Unconverted enquiries are deleted 12 months after the last contact. Correspondence that becomes part of a client engagement is handled under the engagement’s applicable retention terms.
Security log retention
Website security logs are retained for no more than 30 days.

You may lodge a complaint with Commission for Personal Data Protection, Bulgaria or your local supervisory authority.

What we collect and why

The enquiry form collects your name, email address, optional company, topic and message. We use those details to respond and discuss a requested engagement. This is not a newsletter subscription or consent to unrelated marketing.

For requests relating to a prospective contract, processing is based on taking steps at your request before a contract. For other correspondence and website security, processing is based on legitimate interests in responding and protecting the service, subject to your rights.

The hosting provider may process request information such as IP address, time, requested path and technical headers to deliver and secure the website. The enquiry is passed to the configured email delivery provider and the operator’s enquiry mailbox. We do not need credentials, customer records or confidential security findings in this form.

Storage, recipients and transfers

Enquiry details are handled by the operator and service providers identified above for delivery and correspondence. The form handler does not write enquiries to a site database or log message contents. Mailbox storage, provider records, retention and international transfer arrangements are described in the configured details above. Access is limited to people handling enquiries and service administration.

Your choices and rights

You may ask for access, correction, deletion or restriction of your personal data, or object to processing based on legitimate interests, subject to applicable law. Data portability applies where its legal conditions are met. Use the privacy contact above; we may need proportionate information to verify your identity.

You may also complain to a competent data protection authority. Providing an email and message is necessary for us to answer an enquiry; the company field is optional. We do not use this form for automated decision-making or profiling.

Cookies and external links

The website application does not set cookies or use browser storage, advertising trackers or analytics. Fonts and images are served with the site. External links are opened only when you choose to follow them; those websites apply their own policies. See Cookie Policy.

Client engagements

This notice covers the website and general enquiries. Client system access, security findings and any processing on a client’s behalf require separately agreed confidentiality, security and data processing terms before access is granted.