Privacy Policy

Last updated: 7 September 2026

This Privacy Policy explains how personal data is collected and used when you visit zlefterov.com ("the site") or contact me through it. I take your privacy seriously and only collect what I genuinely need to respond to you.

1. Who is responsible for your data

The data controller for this site is Zhivko Lefterov (Fractional IT Operations Lead), trading as zlefterov.com. If you have any questions about this policy or your data, contact me at zhivko@zlefterov.com.

2. What data I collect

• Contact form data: when you submit the contact form, I collect the name, email address and message you provide.
• Server logs: like most websites, the hosting server may automatically record standard technical information such as your IP address, browser type and the pages requested, for security and reliability.

I do not use advertising or analytics cookies, and I do not track you across other sites. Because of this, no cookie consent banner is required to use the site.

3. Why I use your data and the legal basis

• To respond to your enquiry and discuss potential services — legal basis: your consent when you submit the form, and my legitimate interest in responding to business enquiries.
• To keep the site secure and working — legal basis: legitimate interest in protecting the site from abuse and diagnosing faults.

4. Who your data is shared with

I do not sell your data. It may be processed by trusted service providers who help run the site and my communications, only to the extent needed:

• My web hosting provider (site hosting and email delivery of form submissions).
• Calendly, if you choose to book a call through the scheduling link (subject to Calendly's own privacy policy).

Some providers may process data outside the UK/EEA; where they do, appropriate safeguards (such as Standard Contractual Clauses) are relied upon.

5. How long I keep it

Contact enquiries are kept only as long as needed to deal with your request and any resulting business relationship, and are deleted when no longer required. Server logs are retained for a short period by the hosting provider.

6. Your rights

Under UK GDPR and EU GDPR you have the right to:

• Access the personal data I hold about you;
• Ask me to correct inaccurate data;
• Ask me to erase your data ("right to be forgotten");
• Restrict or object to how I use your data;
• Request a copy of your data in a portable format;
• Withdraw consent at any time.

To exercise any of these, email zhivko@zlefterov.com and I will respond within one month.

7. Complaints

If you are in the UK and believe your data has been handled improperly, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU, you can complain to your local data protection authority.

8. Changes to this policy

I may update this policy from time to time. The "last updated" date at the top shows when it was last changed.