Privacy Policy

Last updated: October 27, 2025

1. Introduction

This Privacy Policy explains how Ivaylo Hristov ("I", "me", or "my") collects, uses, and protects your personal information when you visit or use this website (ivayloverse.com).

I am committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Who We Are

Data Controller: Ivaylo Hristov

Contact Email: dev@ivayloverse.com

If you have any questions about this Privacy Policy or how your data is handled, please contact me at the email address above.

3. What Data We Collect

3.1 Contact Form Data

When you fill out the contact form or project brief form, I collect:

  • Your name
  • Email address
  • Project details and message content
  • Budget and timeline information (if provided)

3.2 Analytics Data

I use Vercel Analytics to understand how visitors use this website. This collects:

  • Pages you visit
  • Time spent on pages
  • Device type and browser information
  • Approximate geographic location (country-level)
  • Referral source (how you found this website)

Vercel Analytics is privacy-friendly and does not use cookies or track you across other websites. Learn more at Vercel’s Privacy Policy.

3.3 Currency Detection

To display prices in your local currency, I use IP-based geolocation (via ipapi.co) to detect your approximate country. This information is:

  • Used only to determine which currency to display
  • Not stored on my servers
  • Not shared with third parties (beyond the geolocation API provider)
  • Optional - if detection fails, prices default to USD

4. Why We Collect Your Data (Legal Basis)

4.1 Contact Form Submissions

Legal Basis: Legitimate Interest

When you submit a contact form, you are initiating communication with me for business purposes. I process your data to respond to your inquiry, discuss project requirements, and provide quotes. This is a legitimate business interest, and you reasonably expect me to use your contact information to reply.

4.2 Analytics

Legal Basis: Consent (via cookie banner) and Legitimate Interest

I use analytics to understand how visitors use this website, which pages are most helpful, and how to improve user experience. This helps me provide better service to potential clients.

4.3 Currency Detection

Legal Basis: Legitimate Interest

Displaying prices in your local currency improves your user experience and helps you understand project costs without manual conversion.

5. How Long We Store Your Data

  • Contact form submissions: Stored for 2 years or until the inquiry is resolved and any resulting project is completed, whichever is longer. After that, data is permanently deleted.
  • Analytics data: Retained by Vercel for up to 30 days in identifiable form, then aggregated anonymously.
  • Currency detection: Not stored at all - used only in real-time for display purposes.

6. Who Has Access to Your Data

Your personal data may be accessed by:

  • Me (Ivaylo Hristov): I personally review and respond to all contact form submissions.
  • Resend: Email delivery service used to send contact form submissions to my inbox. Resend is GDPR-compliant. See their Privacy Policy.
  • Vercel: Website hosting and analytics provider. Vercel is GDPR-compliant. See their Privacy Policy.
  • ipapi.co: IP geolocation service for currency detection. See their Privacy Policy.

I do not sell, rent, or share your personal information with any other third parties for marketing purposes.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to Access: You can request a copy of all personal data I hold about you.
  • Right to Rectification: You can request that I correct any inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): You can request that I delete your personal data, subject to legal obligations.
  • Right to Restriction: You can request that I limit how I use your data.
  • Right to Data Portability: You can request a copy of your data in a machine-readable format.
  • Right to Object: You can object to processing of your data based on legitimate interests.
  • Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please email me at dev@ivayloverse.com. I will respond within 30 days.

8. Cookies and Tracking

This website uses minimal cookies for essential functionality and analytics:

8.1 Essential Cookies

These cookies are necessary for the website to function and cannot be disabled:

  • Cookie consent preferences (remembers your choice to accept/reject analytics)

8.2 Analytics Cookies

Vercel Analytics uses minimal tracking to understand website usage. These require your consent and can be disabled via the cookie banner.

You can manage your cookie preferences using the cookie banner that appears on your first visit, or you can disable cookies entirely through your browser settings. Note that disabling cookies may affect website functionality.

9. Data Security

I take reasonable measures to protect your personal data from unauthorized access, loss, or misuse:

  • All data transmission is encrypted using HTTPS/SSL
  • Contact form data is sent via secure API connections
  • Email storage is protected by email provider security measures
  • Access to personal data is limited to me only

However, no method of transmission over the internet is 100% secure. While I strive to protect your data, I cannot guarantee absolute security.

9.1 Data Breach Notification

In the unlikely event of a data breach that affects your personal information, I will:

  • Notify the Bulgarian Commission for Personal Data Protection (CPDP) within 72 hours (as required by Article 33 of GDPR)
  • Notify you directly if the breach poses a high risk to your rights and freedoms (as required by Article 34 of GDPR)
  • Take immediate action to contain and remediate the breach

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), specifically:

  • United States (Vercel hosting, Resend email service)

These transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by the European Commission. Both Vercel and Resend are GDPR-compliant and provide adequate data protection.

11. Children’s Privacy

This website is not intended for children under 16 years of age. I do not knowingly collect personal information from children. If you believe I have inadvertently collected data from a child, please contact me immediately, and I will delete it.

12. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. When I make significant changes, I will update the "Last updated" date at the top of this page.

I encourage you to review this Privacy Policy periodically. Continued use of this website after changes are posted constitutes your acceptance of the updated policy.

13. Right to Lodge a Complaint

If you believe I have not handled your personal data properly, you have the right to lodge a complaint with your local data protection authority.

For Bulgaria, the competent authority is the Commission for Personal Data Protection (CPDP): https://www.cpdp.bg/en/

For other EU residents, you can find your local authority at EDPB Member List.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact me:

Email: dev@ivayloverse.com

I will respond to all requests within 30 days as required by GDPR.