Privacy Policy

Saltframes Studio ('we', 'us') is committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection law.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have.

The data controller for your personal data is Saltframes Studio, based in Varna, Bulgaria.

Contact: studio@saltframes.com

We collect personal data only when you voluntarily provide it to us, primarily through our contact form. This includes: your first and last name, email address, phone number, and the content of your message. Providing a company name and region is optional.

We do not collect sensitive categories of personal data (e.g. health data, political opinions).

If you enable analytics cookies, Google Analytics collects anonymised data about how you use our website, including pages visited, session duration, and general geographic location (country/region level). This data does not directly identify you.

Contact form data: to respond to your enquiry and, if a project proceeds, to fulfil our contractual obligations.

Analytics data (only with your consent): to understand how visitors use our website, which helps us improve the content and user experience.

We do not use your data for unsolicited marketing, profiling, or automated decision-making.

Contact form submissions: our legal basis is legitimate interest (to respond to a business enquiry) and, where a contract follows, contractual necessity.

Analytics cookies: processed only on the basis of your explicit consent, which you can withdraw at any time via the Cookie Settings page.

Rate limiting and spam protection: legitimate interest in protecting our systems from abuse.

Resend (email delivery): contact form submissions are delivered via Resend, a transactional email service. Data is processed under their privacy policy and data processing agreement.

Cloudflare Turnstile: used to verify that contact form submissions are made by humans. Cloudflare processes a minimal challenge response; no personal data is stored by us from this process.

Google Analytics (GA4): if you consent to analytics cookies, anonymised usage data is sent to Google Analytics. IP addresses are anonymised. No advertising or remarketing features are enabled. Google's data processing terms apply.

Upstash: used for server-side rate limiting of the contact form. IP addresses are processed transiently and not retained beyond the rate-limiting window.

We do not sell your personal data to any third party.

Contact form data is retained for up to 3 years from the date of your enquiry, after which it is deleted. If a project contract is entered into, data may be retained for the duration required by applicable law.

Analytics data (where consented) is retained according to Google Analytics' default retention settings (up to 14 months).

Your cookie consent preference is stored in your browser for up to 12 months.

Under GDPR, you have the right to: access your personal data; request correction of inaccurate data; request erasure of your data ('right to be forgotten'); object to processing based on legitimate interest; request restriction of processing; and receive your data in a portable format.

You also have the right to withdraw consent for analytics cookies at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at studio@saltframes.com. We will respond within 30 days.

If you believe your rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of Bulgaria (www.cpdp.bg).

We use cookies to make the website function correctly and, with your consent, to analyse usage. For a full list of cookies we use and how to manage your preferences, please see our Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The current version is always available on this page. Material changes will be communicated where we hold your contact details.

For any privacy-related questions or to exercise your rights, please contact us at: