Privacy Policy

Last updated: 24 September 2026

This policy explains what personal data this website collects, why, and what you can do about it. It is written to be read, not to be survived.

Who is responsible for your data

Hexweb is a trading name of Svetoslav Kodzhamanov, registered in Bulgaria as a sole proprietor. There is no company behind it — the data controller is an individual.

• Controller: Svetoslav Kodzhamanov, trading as Hexweb
• BULSTAT: 180342718
• Location: Kazanlak, Bulgaria
• Contact: support@hexweb.net

What we collect

1. Contact form enquiries

When you submit the contact form we collect the name, email address, company (optional), area of interest and message you provide, along with the page you submitted from.

This information is sent directly to us by email and is not stored in this website’s database. There is no CRM, no mailing list, and no marketing automation behind this form. We use what you send us to reply to you.

• Legal basis: taking steps at your request prior to entering a contract (GDPR Art. 6(1)(b)), and our legitimate interest in responding to enquiries (Art. 6(1)(f)).
• Retention: enquiry emails are kept for up to 24 months from our last contact. If you become a client, records are kept for as long as Bulgarian accounting and tax law requires.

2. Analytics

We use Google Analytics 4 to understand which pages are read and how people arrive. It records things like pages viewed, approximate location (country or city level), device type, and referring source. IP addresses are shortened by Google and we cannot use this data to identify you.

Analytics only runs if you agree to it. If you decline the cookie banner — or ignore it, in regions where consent is required — no analytics cookies are set and no measurement is sent.

• Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time by clearing this site’s cookies in your browser.
• Retention: a maximum of 14 months, per the property’s Google Analytics retention setting.

3. Server and security logs

Our host records standard web server logs — IP address, timestamp, requested URL, browser user agent — as every web server does. These are used to keep the site available and to investigate abuse, not to profile visitors.

• Legal basis: legitimate interest in operating and securing the site (GDPR Art. 6(1)(f)).

Cookies

Cookie	Purpose	Set when
hx_consent	Remembers whether you accepted or declined analytics, so we stop asking.	When you answer the banner. Expires after 180 days.
_ga and _ga_*	Google Analytics — distinguishes visitors and sessions.	Only after you accept.

Our host may also set short-lived technical cookies for caching and security. WordPress sets cookies only for logged-in administrators, which does not apply to visitors.

Who else sees your data

We do not sell personal data and we do not share it for advertising. Data is processed on our behalf by:

• SiteGround — website hosting, backups, and server logs.
• Google — Google Analytics, and Gmail, which is where contact form enquiries are received and read.

We may also disclose information where the law requires it.

International transfers

Google is a US company. Where your data reaches the United States, transfers rely on the EU–US Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you, and get a copy
• have inaccurate data corrected
• have your data deleted
• restrict or object to how we use it
• receive your data in a portable format
• withdraw consent at any time, without affecting what was lawful before

Email support@hexweb.net and we will respond within 30 days. There is no charge.

If you think we have handled your data badly, you can complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (cpdp.bg). You may also complain to the authority in your own country.

Children

This is a business website and is not intended for children. We do not knowingly collect data from anyone under 16.

Changes

If this policy changes materially, the date at the top will change and the updated version will be published here.