Privacy Policy

Last updated: 21 October 2026

This Privacy Policy explains how Venos Trade Ltd ("Venos Trade", "we", "us") collects, uses and protects personal data when you visit venostrade.com, contact us, or work with us as a client. We are a digital marketing agency based in Bulgaria and we process personal data in line with the EU General Data Protection Regulation (GDPR) and Bulgarian data protection law.

1. Who is responsible for your data

The data controller is:

For any question about this policy or your personal data, use the contact form on this website or write to us by post at the address above.

2. What data we collect

• Contact form. When you send us a message we receive your name, email address, the company or website you choose to share, the service you are interested in and the content of your message.
• Technical data. Like every website, our hosting provider automatically records basic technical information when you load a page: IP address, browser type, the page requested and the time of the request. These logs are used for security and to keep the site running.
• Client work. If you become a client, we process the business contact details of the people we work with and, on your instructions, the data inside your advertising, analytics and email accounts. For that data we act as a processor on your behalf, under our agreement with you.

We do not ask for, and ask you not to send, sensitive data such as health information or payment card details through the contact form.

3. How and why we use it

• To reply to your enquiry and prepare a proposal (legal basis: steps taken at your request before entering into a contract).
• To deliver the services agreed with our clients and to communicate about them (legal basis: performance of a contract).
• To keep the website secure and free from spam and abuse (legal basis: our legitimate interest).
• To keep accounting and tax records required by Bulgarian law (legal basis: legal obligation).

We do not sell personal data, we do not use it for automated decision-making, and we do not add form enquiries to marketing lists.

4. Cookies

This website does not use cookies: no analytics, advertising or tracking cookies, and none for the contact form. If we ever add analytics or advertising cookies, we will ask for your consent first and update this policy.

5. Who we share data with

We share personal data only with service providers that help us run our business, and only as far as they need it:

• Vercel Inc. hosts this website.
• Google provides our business email (Google Workspace), through which contact form messages reach us.
• Our accountant and public authorities, where Bulgarian law requires it.

Some of these providers may process data outside the European Economic Area, in particular in the United States. Such transfers are protected by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Enquiries that do not lead to a contract: up to 12 months after our last exchange, then deleted.
• Client correspondence and contract records: for the duration of the contract and up to 5 years after it ends.
• Accounting documents: for the period required by Bulgarian accounting law (currently 10 years).
• Hosting logs: kept by the hosting provider for a short period, normally no longer than 30 days.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• ask us to correct inaccurate data or to delete it;
• restrict or object to our processing of your data;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To use any of these rights, contact us through the contact form or by post at our registered office. We will answer within one month. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни, www.cpdp.bg) or with the data protection authority in your own EU country.

8. Security

The website is served only over an encrypted connection (HTTPS). Access to our email and to client accounts is limited to the people who need it and protected with two-step verification. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

9. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows when it was last revised. Significant changes will be highlighted on this page.