Privacy Policy

Who we are

VoxTraffic is operated by StartVent OOD, a limited liability company registered in Bulgaria (UIC / ЕИК 207984493), with its registered seat and address of management at ul. Rilski Ezera 14, fl. 5, ap. 23, Lozenets district, 1407 Sofia, Bulgaria. It runs voxtraffic.com. For the purposes of the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act, StartVent OOD is the data controller for the personal data described here. You can reach us about any privacy matter at [email protected]; our full company details are on the Legal notice page.

What we collect and why

The information below describes the website and enquiries about our services.

• Enquiries — name, email address, optional company and budget, and your message. We use these to answer you and discuss a proposal. Name, email and a message are required to use the form; you can also email or call us directly. Legal basis: taking steps at your request before a contract when you are the prospective contracting party; otherwise our legitimate interest in responding to business enquiries.
• Project communications — correspondence and contact details needed to manage our work together. Sending an enquiry does not subscribe you to promotional messages. Legal basis: contractual necessity for our individual clients, legitimate interests in managing business-client relationships, and legal obligations for required records.
• Bookings — Cal.com receives connection data only when you choose to load the calendar here or use the external booking link. If you load it, the calendar appears in an iframe on voxtraffic.com; it is provided by Cal.com and may set or read its own cookies. Cal.com also receives any name, contact information, meeting time and notes you provide. We use booking details to arrange and attend the meeting. Closing the calendar removes the iframe and prevents further embedded requests in that page, but cannot undo data or cookies already sent or set. Legal basis for our use: requested pre-contractual steps or our legitimate interest in arranging a business discussion. Cal.com describes its processing in its privacy policy.
• Optional Google Analytics — cookie identifiers, page visits, device/browser information, approximate location and interactions such as a submitted enquiry or a booking-link click. We use these to assess site usage. The site does not send your form fields to Google through its conversion events. Advertising consent stays denied and Google signals and ad personalisation are disabled in our website configuration. Legal basis: your consent. See the Cookie Policy.
• Hosting, security and performance — Cloudflare handles connection and technical data, such as IP address, browser information and request details, to deliver and protect the site. Turnstile checks whether form traffic is automated; verification can include your IP address. Cloudflare Web Analytics provides cookieless performance and usage measurements. Where personal data is processed, legal basis: our legitimate interest in operating a secure, reliable website and preventing abuse.

We do not run Meta or TikTok pixels or personalised advertising on this site. We do not knowingly collect children's data or use these website details for decisions made solely by automated processing that have legal or similarly significant effects. Please do not include sensitive personal information in an enquiry.

How long we keep it

• Unsuccessful enquiries and related bookings: up to 24 months from the last substantive project discussion, unless you request earlier deletion and no overriding legal reason requires retention.
• Client correspondence and records: for the engagement and afterwards only where needed for the applicable accounting, tax or legal-claims period. The relevant obligation, record type and any ongoing dispute determine that period.
• Browser analytics identifiers and consent preferences: up to 180 days under this site's configuration. Rejecting analytics removes the accessible Google Analytics cookies on this site. Browser limits may shorten these periods.
• Provider-side analytics and security records: their retention is separate from browser-cookie expiry and depends on the provider's service and account settings. We assess whether records remain needed for traffic comparisons, diagnosing faults or investigating abuse; records needed for a specific unresolved incident may be kept until it is resolved. Contact us for the current settings and retention period relevant to your request.

Service providers and sharing

We do not sell your personal data. The services used for these activities include:

• Cloudflare: hosting, content delivery, Turnstile spam protection, cookieless web analytics and Email Routing for our business addresses.
• Resend: delivery of contact-form submissions to our business inbox. This includes the form fields you submit and delivery information.
• Business email and calendar services: receiving and retaining correspondence, replying to enquiries, and managing requested meetings.
• Google: optional Google Analytics 4, after you allow analytics.
• Cal.com: scheduling when you choose to load the inline calendar or use the external booking link.

Providers process data for their respective services; their own notices also describe processing for purposes such as account administration and security. We may disclose relevant records to professional advisers or authorities where needed for legal obligations or the establishment, exercise or defence of legal claims.

International transfers

Service providers may process data outside the European Economic Area, including in the United States. The transfer mechanism depends on the recipient and service: an applicable adequacy decision or safeguards such as the European Commission's Standard Contractual Clauses.

Information about supplier safeguards is available in the Resend Data Processing Addendum, Cloudflare Customer Data Processing Addendum and Google Data Processing Terms. Email [email protected] to ask which safeguards apply to your data or to request a copy, subject to necessary redactions protecting other parties.

Your rights

Subject to the conditions in the GDPR and similar laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data where there is no overriding reason to keep it.
• Restriction — ask us to limit how we use your data in certain cases.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Portability — receive the data you provided in a structured, machine-readable format.
• Withdraw consent — withdraw any consent you gave, without affecting processing already carried out.
• Complaint — lodge a complaint with a supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (Комисия за защита на личните данни — cpdp.bg), Sofia; you may also complain in the EU country of your residence or workplace, or where the issue arose.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work to keep risk low and to act quickly if anything goes wrong.

How to exercise your rights

To exercise any of the rights above, email us at [email protected]. We will respond within the time the law allows — normally one month — and may ask you to confirm your identity first. Exercising your rights is free in most cases.

Cookies

Google Analytics loads only after you allow it. Use Cookie settings in the footer to change your choice. Withdrawing permission refreshes the page to stop the loaded analytics software; it does not retrospectively erase data already collected. You can request erasure separately. See our Cookie Policy for details.

Changes to this policy

We may update this policy as our practices or the law change. When we do, we will revise the date at the top of this page and, where appropriate, let you know directly.