Privacy policy

This policy explains how we process your personal data when you use creatiumlab.com and send us an inquiry, in line with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act. The Bulgarian version of this policy prevails.

1. Who processes your data

The data controller is Creatium Lab, company ID (EIK) [ЕИК], address: [адрес на управление]. For questions about your personal data, write to hello@creatiumlab.com.

2. What data we collect

  • Data you send us through the contact form: name, phone number, the service you are interested in, and your message if you write one.
  • How you got to the site (for example from Google or from an ad), if the site receives it from your browser or from the link you followed. We store it with your inquiry so we know which channels work.
  • Technical data needed to run and secure the site: IP address and request data in the server logs.
  • Data about your visit from analytics and advertising tools, only if you have allowed them (see section 6).

3. Why and on what legal basis

  • To reply to your inquiry and send you an offer: based on your consent and on taking steps at your request before entering into a contract (Art. 6(1)(a) and (b) GDPR).
  • For security and to prevent misuse of the site: based on our legitimate interest (Art. 6(1)(f) GDPR).

4. How long we keep your data

Inquiries are kept for no more than 12 months after our last contact, unless we sign a contract. In that case the data is kept as long as the contract and accounting law require. Server logs are kept for a limited time.

5. Who has access

We do not sell your data or share it with third parties for their marketing. Only our team members and the providers that help us operate (hosting, email and, with your consent, the tools in section 6) have access.

6. Cookies and measurement

The site uses strictly necessary cookies (session and form protection against abuse). These do not require consent.

We use Google Tag Manager to load analytics tools (such as Google Analytics 4 and Microsoft Clarity) and ad measurement tools (such as Meta Pixel). They set cookies and send their providers information about your visit (pages, device, approximate location from your IP address, submitted inquiry) only if you allow them in the cookie banner, separately for analytics and marketing. Legal basis: your consent (Art. 6(1)(a) GDPR).

Google, Microsoft and Meta may transfer data to the United States. They are certified under the EU-US Data Privacy Framework and use standard contractual clauses.

You can withdraw or change your consent at any time in Cookie settings.

You will find the full list in the Cookie policy.

7. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object, and to withdraw your consent at any time. Write to us at the email above. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

Last updated: 3 October 2026