Privacy Policy
Last updated: 16/7/2026
This Privacy Policy explains how Rapid-Web Ltd. ("Rapid Web", "we", "us"), a company registered in Bulgaria with UIC (ЕИК) 208138222, registered address Varna, Dame Gruev 22**]**, processes personal data collected through web-rapid.com (the "Site").
We are the data controller for the personal data described in this policy. You can contact us about anything in this policy at central@web-rapid.com.
1. What data we collect
Data you give us directly. When you submit our contact form or request a consultation, we collect your name, email address, and any information you include about your project (such as project type or budget range). If you email us directly, we process the contents of your message.
Data collected automatically. Subject to your cookie consent, we collect usage data through analytics and advertising tools: pages visited, approximate location (country/city level), device and browser type, referral source, and interactions with the Site. See our Cookie Policy for details.
Spam protection. Our contact form uses Google reCAPTCHA, which collects hardware and software information (such as device and application data) and sends it to Google to determine whether a submission is made by a human. Use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service.
We do not knowingly collect data from persons under 18, and the Site is not directed at them.
2. Why we process your data and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Responding to your inquiry and preparing a proposal | Contact form data, email correspondence | Art. 6(1)(b) — steps prior to entering a contract |
| Providing and securing the Site, preventing abuse | Technical/log data, reCAPTCHA | Art. 6(1)(f) — legitimate interest |
| Analytics (understanding how the Site is used) | Usage data via Google Analytics 4 | Art. 6(1)(a) — your consent |
| Advertising measurement and remarketing | Cookie and interaction data via Google Ads [and Meta] | Art. 6(1)(a) — your consent |
| Complying with legal obligations (accounting, tax) | Contract and invoicing data | Art. 6(1)(c) — legal obligation |
Where processing is based on consent, you may withdraw it at any time (see Section 6) without affecting the lawfulness of processing before withdrawal.
3. Who we share data with
We do not sell personal data. We share data only with service providers who process it on our behalf or as independent controllers for their own compliance:
- Google Ireland Ltd / Google LLC — Google Analytics 4, Google Ads, reCAPTCHA
- Usercentrics A/S (Cookiebot) — consent management
- ICDSoft Ltd. (ICDSoft) — website hosting
- [Meta Platforms Ireland Ltd — advertising measurement and remarketing] (include once the Meta Pixel is installed; remove otherwise)
- Professional advisers and public authorities where required by law
4. International transfers
Some of the providers above (notably Google) may transfer data to the United States or other countries outside the EEA. Where this happens, transfers rely on an adequacy decision (such as the EU–US Data Privacy Framework, where the provider is certified) or on Standard Contractual Clauses approved by the European Commission.
5. How long we keep data
- Inquiries that do not lead to a project: up to [12] months after our last contact, then deleted.
- Client and contract data: for the duration of the engagement plus the retention periods required by Bulgarian accounting and tax law (generally up to 10 years for accounting records).
- Analytics data: per the retention period configured in Google Analytics ([14] months).
- Consent records (Cookiebot): [12] months, per Cookiebot's standard consent renewal cycle.
6. Your rights
Under the GDPR you have the right to: access your data; correct inaccurate data; request deletion; restrict processing; data portability; object to processing based on legitimate interest; and withdraw consent at any time. You can change or withdraw your cookie consent using the "Cookie settings" link in the Site footer.
To exercise any right, contact us at central@web-rapid.com. We will respond within one month.
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни, cpdp.bg) or with the supervisory authority in your EU member state.
7. Security
We apply appropriate technical and organizational measures to protect personal data, including encrypted transmission (HTTPS), access controls, and hosting with a provider maintaining industry-standard security practices.
8. Changes to this policy
We may update this policy from time to time. The current version is always available on this page with its "Last updated" date. Material changes will be highlighted on the Site.