Privacy policy

Last updated: 2026-10-21

Who we are

This website is run by Svetium, Bulgaria. You can reach us at team@svetium.com.

What we collect

When you send the contact form we receive your name, your work email, your company if you give it, what you need, when you want to start, your budget if you give it, and the details you write.

To keep out spam, the form also passes your IP address and browser details to Cloudflare's spam check, and keeps a scrambled (hashed) form of your IP address for 20 minutes to limit how many messages can be sent from one address.

The website sets no cookies and does not track you. We count visits with Cloudflare Web Analytics, which works without cookies or stored identifiers.

You do not have to give us any details. To reply through the form we need your name, your email, what you need and a few words about the project; without the form you can write to team@svetium.com.

Why we use it

We use your details to answer your enquiry, to keep the form safe from spam and, if we work together, to prepare and carry out that work. The legal bases are steps taken at your request before a contract, and our legitimate interest in answering business enquiries and keeping the website secure.

We make no decisions about you by automated means alone. If the spam check blocks you by mistake, write to team@svetium.com.

Who handles it

Cloudflare hosts the website, checks the form for spam, counts visits and forwards email sent to our svetium.com addresses. Brevo delivers the form to our inbox and sends you a short confirmation. Our inboxes are on Gmail, run by Google.

Cloudflare and Google are US companies, so your details may be processed in the United States. Both are certified under the EU-US Data Privacy Framework, which the European Commission has found to give adequate protection.

We do not sell your details or share them with anyone else, unless the law requires it.

How long we keep it

We keep your enquiry in our inbox for as long as we need it to answer you. If we do not start working together, we delete it within 12 months of our last message. If we do, we keep it for the length of that work and the time the law requires afterwards.

The website itself keeps only two scrambled (hashed) values: your IP address for 20 minutes, to limit repeat messages, and your email address for 48 hours, so we send you at most one confirmation a day.

Your rights

You can ask us at any time what we hold about you, to correct or delete it, to restrict how we use it, or to receive the details you gave us in a portable format. You can also object at any time to our use of your details based on our legitimate interest. Write to team@svetium.com; we reply within one month.

You can also complain to the Bulgarian Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, cpdp.bg.