Effective date: 2026-06-08 • Version: 1.0
Who is responsible for processing your data
ICFOX acts as controller for personal data processed through this website. The available controller contact details are listed on the provider details page.
What data we process
- name, email, phone number, company name, and message submitted through enquiry forms;
- technical data such as IP address, browser data, and security logs generated by the website infrastructure;
- commercial and contractual data when communication develops into a service relationship.
Why we process data
- to answer enquiries and prepare offers;
- to deliver agreed services;
- to protect the website, forms, and communications from abuse;
- to comply with legal, accounting, and regulatory obligations.
Legal bases
- consent, where this is the applicable basis;
- steps prior to entering into a contract and performance of a contract;
- legitimate interest for security, fraud prevention, and communication management;
- legal obligation where retention or disclosure is required by law.
Retention periods
- enquiries are usually kept for up to 24 months unless a service relationship continues;
- technical and security logs are retained for a limited operational period;
- invoices and contractual records are kept for the period required by Bulgarian law.
Recipients of data
- hosting and infrastructure providers;
- email service providers;
- IT and professional service providers where needed to deliver services;
- public authorities when disclosure is legally required.
International transfers
We do not intend to transfer personal data outside the EU/EEA unless this becomes necessary for a specific service setup and an appropriate legal mechanism is in place.
Your rights
You may request access, rectification, erasure, restriction, objection, portability, and withdrawal of consent where applicable. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection.