Privacy Policy

Who we are

VoxTraffic is a trade name of Start Vent OOD, a limited liability company registered in Bulgaria (UIC / ЕИК 207984493), with its registered seat at ul. Rilski Ezera 14, fl. 5, ap. 23, Sofia, Bulgaria, operating at voxtraffic.com. For the purposes of the EU General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act, Start Vent OOD is the data controller for the personal data described here. You can reach us about any privacy matter at info@voxtraffic.com; our full company details are on the Legal notice page.

What we collect and why

We only collect what we genuinely need. The table below sets out each category of data, why we process it, and the legal basis we rely on under the GDPR.

• Contact form submissions — your name, email address, company, budget range, and the message you send us. We use this to respond to your enquiry, prepare a proposal, and stay in touch about the project you raised. Legal basis: steps taken at your request prior to entering a contract, and our legitimate interest in responding to business enquiries.
• Analytics — privacy-friendly usage data such as pages viewed, approximate region, referrer, and device type, collected through Cloudflare Web Analytics and Google Analytics 4. We use this to understand how the site is used and to improve it. Legal basis: your consent for any non-essential analytics; see our Cookie Policy.
• Advertising — where you have consented, advertising pixels from Meta, Google and TikTok may set identifiers to measure campaign performance and show relevant ads. These load only after you accept marketing cookies. Legal basis: your consent.
• Communications — emails, calls and messages you exchange with us, kept as a record of our dealings. Legal basis: legitimate interest in managing our relationship and contractual necessity where a project is underway.

We do not knowingly collect data from children, and we do not use your data for automated decision-making that produces legal or similarly significant effects.

How long we keep it

Enquiries that do not lead to a project are kept for up to 24 months, then deleted or anonymised. Records tied to an active or completed engagement are kept for the life of the project and afterwards as required for tax, accounting and legal purposes (typically up to the statutory limitation periods that apply). Analytics and advertising data are retained according to the providers' own retention settings, which we keep as short as the service allows.

Processors and sharing

We do not sell your personal data. We share it only with service providers who help us operate, acting as processors under written agreements. These include:

• Cloudflare — hosting, content delivery, privacy-friendly web analytics, and spam protection.
• Google — Google Analytics 4 and, with consent, advertising measurement.
• Meta and TikTok — advertising pixels and measurement, loaded only with consent.
• Cal.com — to let you schedule a meeting with us, where you choose to book one.
• Cloudflare Email Routing — to receive and route enquiries sent to our addresses.

We may also disclose data where required by law, to protect our rights, or as part of a business transfer, always with appropriate safeguards.

International transfers

Some of our processors are based outside the European Economic Area, including in the United States. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, so your data keeps an equivalent level of protection wherever it is handled.

Your rights

Subject to the conditions in the GDPR and similar laws, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data where there is no overriding reason to keep it.
• Restriction — ask us to limit how we use your data in certain cases.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Portability — receive the data you provided in a structured, machine-readable format.
• Withdraw consent — withdraw any consent you gave, without affecting processing already carried out.
• Complaint — lodge a complaint with a supervisory authority. In Bulgaria this is the Commission for Personal Data Protection (Комисия за защита на личните данни — cpdp.bg), Sofia; you may also complain in the EU country of your residence or workplace, or where the issue arose.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and trusted infrastructure providers. No method of transmission or storage is completely secure, but we work to keep risk low and to act quickly if anything goes wrong.

How to exercise your rights

To exercise any of the rights above, email us at info@voxtraffic.com. We will respond within the time the law allows — normally one month — and may ask you to confirm your identity first. Exercising your rights is free in most cases.

Cookies

This site uses cookies and similar technologies. Non-essential cookies, including analytics and advertising, load only after you give consent. For the full detail and to change your choices, see our Cookie Policy.

Changes to this policy

We may update this policy as our practices or the law change. When we do, we will revise the date at the top of this page and, where appropriate, let you know directly.