Privacy Policy

Last updated: February 2026

ECOMM LTD ("we", "us", "our") respects your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have.

1. Data Controller

The data controller is:

ECOMM LTD
EIK: 201938158 · VAT: BG201938158
Ruse, Bulgaria · EU
Email: office@ecomm.bg

2. What Data We Collect

2.1 Contact form submissions

When you submit our contact form, we collect:

• Your name
• Your email address
• Your website URL (if provided)
• Your message
• Your IP address and submission timestamp (for security and spam prevention)

2.2 Chat data (if applicable)

If we implement an AI chat assistant on this website, interactions with the chat may be logged. This includes:

• Messages you send to the chat
• Responses generated by the assistant
• Any contact details you voluntarily provide within the chat

2.3 Analytics data (only after consent)

If you consent to non-essential cookies, we may collect anonymized usage data such as pages visited, time on site, and referring source. No analytics data is collected without your explicit consent.

2.4 Cookie data

See our Cookie Policy for full details on cookies used.

3. Why We Collect Your Data

• Contact form: To respond to your inquiry, provide a quote, or discuss a potential project. Legal basis: legitimate interest (responding to your request).
• Chat data: To provide helpful responses during your visit and to follow up on your request. Legal basis: legitimate interest.
• Analytics: To understand how visitors use our site and improve it. Legal basis: your consent.
• Cookies: Essential cookies operate on legitimate interest; non-essential cookies require your consent.

4. How We Use Your Data

We use your data only to:

• Respond to your inquiries and provide services
• Send project-related communications (quotes, invoices, updates)
• Improve our website (with consented analytics only)

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not send newsletters or promotional emails unless you explicitly request them.

5. Data Processors & Third Parties

Your data may be processed by the following service providers, acting as data processors on our behalf:

Service	Purpose	Location
SuperHosting.bg	Website hosting, email hosting	Bulgaria (EU)
Cloudflare	CDN, DDoS protection, DNS	Global (US-based, EU-compliant)

If we add additional processors (e.g., analytics, chat services), this table will be updated accordingly.

6. Data Retention

• Contact form data: Retained for up to 2 years after the last communication, or as required for ongoing business relationships.
• Chat logs: Retained for up to 12 months, then deleted.
• Analytics data: Anonymized and aggregated; individual sessions are not stored beyond 14 months.
• Cookie consent preference: Stored locally on your device for up to 12 months.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — for any processing based on consent, at any time

To exercise any of these rights, contact us at office@ecomm.bg. We will respond within 30 days.

8. Security

We take reasonable technical and organizational measures to protect your data, including:

• SSL/TLS encryption on all pages
• Secure email hosting
• Access limited to authorized personnel only
• Regular software and security updates

No system is 100% secure. If we become aware of a data breach that affects your rights, we will notify you and the relevant supervisory authority as required by law.

9. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of Bulgaria:

Website: www.cpdp.bg
Address: 2, Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision. Significant changes will be noted on our website.