Privacy notice

This notice describes how Dephrast handles personal data collected through dephrast.com. It does not cover data processed inside systems we build and operate for clients — that is governed by the data processing agreement signed for each engagement.

Only what you send us. If you submit the contact form, we receive the name, email address, company, team size, budget and message you typed into it. If you email or book a call, we receive whatever that message or calendar entry contains.

We do not run advertising trackers, analytics scripts or A/B testing tools on this site, and we set no cookies. Typefaces are served from our own domain rather than a font CDN, so loading the page does not tell a third party that you visited.

We use what you send to answer you and, if it goes further, to scope and deliver work. The lawful basis is our legitimate interest in responding to a business enquiry, and the performance of a contract once there is one.

Enquiries that do not lead anywhere are deleted within 24 months. You can ask for yours to be deleted sooner and we will do it.

The processors that run the site and our mail: our hosting provider, our transactional email provider and our email and calendar provider. Each is bound by a data processing agreement. We do not sell personal data and we do not share it for anyone else's marketing.

Under the GDPR you can ask for a copy of the personal data we hold about you, ask for it to be corrected or erased, object to our processing it, or ask us to restrict it. Write to the address below and we will answer within one month.

You also have the right to complain to a supervisory authority — in Bulgaria, the Commission for Personal Data Protection.

Data protection enquiries: hello@dephrast.com. Dephrast is based in Sofia, Bulgaria. The legal entity details will be published here once the company is registered; until then, enquiries reach the founder directly.