Privacy Policy 

1. Who is the data controller

The controller of personal data processed through this website is ITS Lab LTD. (АЙ ТИ ЕС ЛАБ), UIC 208520407, registered in Bulgaria at Промишлена 33.

For any question about this Privacy Policy or about your personal data, you can contact us at info@websites-builder.com or +359 894 929 899.

No Data Protection Officer is currently appointed.

2. What personal data we collect

We collect only the information you choose to submit through the inquiry and website-review forms, together with basic context that your browser sends with the request:

• name
• company name (optional)
• email address
• phone number (optional)
• existing website address (optional)
• project type, project goals and information about an existing website
• indicative budget and timeline (optional)
• the free-text project description or message you write
• interface language and market version of the site you used
• the page the form was submitted from and the referring address, where the browser provides it
• UTM campaign parameters, where they are present in the address you arrived with

3. What we do not collect

This website does not collect payment card details, account passwords, government identification documents, uploaded files, newsletter preferences or ecommerce customer orders. There is no checkout, no user account and no file upload on websites-builder.com.

4. Why we process the data

We use the information you provide in order to:

• respond to your inquiry
• prepare a quotation for the requested work
• discuss the services you asked about
• take steps at your request before a possible service contract is concluded
• manage the related business correspondence
• establish, exercise or defend legal claims where this becomes necessary
• comply with applicable legal obligations where relevant

5. Legal bases

For project inquiries and quotation requests, processing is necessary in order to take steps at your request before entering into a possible contract (Art. 6(1)(b) GDPR).

Where processing goes beyond that, we rely on our legitimate interests in managing genuine business correspondence and in protecting legal claims (Art. 6(1)(f) GDPR), and on compliance with legal obligations where the law requires processing (Art. 6(1)(c) GDPR).

Ordinary use of the contact and website-review forms is not based on consent, and no consent checkbox is required to send an inquiry.

6. Required and optional fields

Fields marked as required — your name and email address, and the message field in the contact form — are needed so that we can identify the request and reply to it. All other fields are optional and can be left blank; providing them simply helps us prepare a more accurate answer.

7. Recipients

Access to inquiry data is limited to what is necessary and may involve:

• persons working for or on behalf of ITS Lab LTD. who handle inquiries and projects
• the technical hosting and database infrastructure required to operate the website and receive inquiries, currently Lovable Cloud / Supabase
• professional advisers, or competent public authorities, where required by law or necessary to establish or defend legal claims

8. No sale of personal data

We do not sell personal data and we do not share inquiry data with advertisers or advertising networks.

9. International transfers

Where a technical provider requires personal data to be processed outside the European Economic Area, the safeguards required by applicable data-protection law are used where such transfers occur.

10. Retention

Inquiry data is kept only for as long as reasonably necessary in order to handle and follow up the inquiry, manage a potential business relationship, maintain the relevant business correspondence, establish, exercise or defend legal claims, and comply with applicable legal obligations where relevant.

Data is reviewed periodically and should not be kept longer than is necessary for those purposes. The website does not run an automated deletion schedule, so removal is handled on review or on request.

11. Your rights

Subject to the conditions of applicable data-protection law, you have the right to:

• access your personal data
• have inaccurate data corrected
• request erasure of your data
• request restriction of processing
• object to processing based on legitimate interests
• receive your data in a portable format
• withdraw consent, where processing is actually based on consent
• lodge a complaint with the competent supervisory authority

12. Supervisory authority

For Bulgaria, the competent supervisory authority is the Commission for Personal Data Protection (Комисия за защита на личните данни, CPDP) — cpdp.bg. You may also contact the supervisory authority of your own country of residence.

To exercise any right, write to info@websites-builder.com. We may need to verify your identity before acting on a request.

13. Automated decision-making

This website does not use automated decision-making or profiling to decide whether a project inquiry is accepted. Every inquiry is read and answered by a person.

14. Security

ITS Lab LTD. uses appropriate technical and organizational measures intended to protect personal data against unauthorised access, loss or misuse. No method of transmission or storage can be guaranteed to be completely secure.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our services, our technical setup or applicable law change. The current version is always published on this page with its update date.

16. Analytics and marketing technologies

After your consent, this website may process website-usage information through Google Analytics 4 (Analytics: site performance and usage measurement) and Meta Pixel (Marketing: measurement of website activity for advertising and conversion analysis).

These technologies are activated only after the relevant consent, and the legal basis for this optional processing is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time through Cookie settings; withdrawal does not affect the lawfulness of processing carried out before it.

This does not change the legal basis for handling inquiries submitted through the forms, which is described above. Further detail on categories and storage is in our Cookie Policy.