1. Who we are
PagePilot is run by VPO EOOD, a company registered in Sofia, Bulgaria. We are the controller of the personal data described in this policy.
When we host and run a website for a client, the client decides what data that website collects. For that data, the client is the controller and we act as their processor, under a separate data processing agreement.
2. What data we collect
When you use a form on this site: the details you enter, such as your name, email address, phone number, company, website address and message.
When you become a client: your contact and billing details, the content of your website, the messages you send us, and the records we need for invoicing.
When you visit this site: our hosting provider keeps standard server logs, such as IP address, browser type, the page requested and the time. We do not use advertising or tracking cookies.
3. Why we use it
We use your data only for these purposes, each with a legal basis under the GDPR:
- To answer your message or request. Basis: steps you ask us to take before a contract, or our legitimate interest in replying.
- To provide the service you signed up for and to support you. Basis: our contract with you.
- To send invoices and keep accounting records. Basis: our legal obligations.
- To keep this site and our service secure and working. Basis: our legitimate interest.
- To publish your quote, if you give us one. Basis: your consent, which you can withdraw at any time.
4. Who we share it with
We do not sell your data. We share it only with service providers who help us run PagePilot, such as hosting, email delivery, form handling and accounting. They may use the data only on our instructions and must keep it safe.
The providers we use for this site are:
- Cloudflare: hosting and content delivery network (CDN) for this site.
- automation.kreativan.dev: handles the forms on this site. It is operated by kreativan.dev, our partner.
We may also share data when the law requires it, for example with tax authorities.
5. Transfers outside the EU
We prefer providers that store data in the EU. If a provider handles data outside the EU, we make sure there is an adequacy decision or other safeguards in place, such as the EU standard contractual clauses.
6. How long we keep it
We keep form messages for as long as we need them to answer you and follow up, and no longer than 24 months if you do not become a client.
Client data is kept for the length of the contract. Invoices and accounting records are kept for as long as Bulgarian law requires. Server logs are kept for a short period for security.
7. How we protect it
We use encrypted connections (HTTPS), limited access, regular updates and backups to protect your data.
8. Your rights
Under the GDPR you can ask to see your data, correct it, delete it, limit how we use it, receive a copy of it, or object to how we use it. Where we rely on your consent, you can withdraw it at any time.
To use any of these rights, write to us. We reply within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or the data protection authority where you live.
9. Changes to this policy
We may update this policy. The date at the top of the page shows when it last changed. If a change affects clients, we tell them by email.
10. Contact
For any question about your data, write to [email protected].