Legal
Website privacy notice.
How enquiry details and website request data are handled. Last updated 7 October 2026.
Controller, processors and retention
- Controller
- ENDIGITAL (LTD)
- Registered address
- 16 Gurgulyat Street, Sofia, Bulgaria
- Privacy contact
- legal@endigitalx.com
- Website host
- Customer-managed Debian server (A1 Bulgaria network), Docker container behind nginx
- Hosting regions
- Bulgaria (Sofia), European Union
- Email delivery provider
- Amazon Web Services — Amazon SES
- Email processing regions
- Europe (Ireland), eu-west-1
- International transfers and safeguards
- Website hosting and enquiry delivery use EU infrastructure (Bulgaria; AWS eu-west-1, Ireland). Amazon Web Services is a US-headquartered processor; any onward access is governed by its Data Processing Addendum and EU Standard Contractual Clauses.
- Enquiry retention
- Unconverted enquiries are deleted 12 months after the last contact. Correspondence that becomes part of a client engagement is handled under the engagement’s applicable retention terms.
- Security log retention
- Website security logs are retained for no more than 30 days.
You may lodge a complaint with Commission for Personal Data Protection, Bulgaria or your local supervisory authority.
What we collect and why
The enquiry form collects your name, email address, optional company, topic and message. We use those details to respond and discuss a requested engagement. This is not a newsletter subscription or consent to unrelated marketing.
For requests relating to a prospective contract, processing is based on taking steps at your request before a contract. For other correspondence and website security, processing is based on legitimate interests in responding and protecting the service, subject to your rights.
The hosting provider may process request information such as IP address, time, requested path and technical headers to deliver and secure the website. The enquiry is passed to the configured email delivery provider and the operator’s enquiry mailbox. We do not need credentials, customer records or confidential security findings in this form.
Storage, recipients and transfers
Enquiry details are handled by the operator and service providers identified above for delivery and correspondence. The form handler does not write enquiries to a site database or log message contents. Mailbox storage, provider records, retention and international transfer arrangements are described in the configured details above. Access is limited to people handling enquiries and service administration.
Your choices and rights
You may ask for access, correction, deletion or restriction of your personal data, or object to processing based on legitimate interests, subject to applicable law. Data portability applies where its legal conditions are met. Use the privacy contact above; we may need proportionate information to verify your identity.
You may also complain to a competent data protection authority. Providing an email and message is necessary for us to answer an enquiry; the company field is optional. We do not use this form for automated decision-making or profiling.
Cookies and external links
The website application does not set cookies or use browser storage, advertising trackers or analytics. Fonts and images are served with the site. External links are opened only when you choose to follow them; those websites apply their own policies. See Cookie Policy.
Client engagements
This notice covers the website and general enquiries. Client system access, security findings and any processing on a client’s behalf require separately agreed confidentiality, security and data processing terms before access is granted.