Effective 16 July 2026

Privacy Policy

This policy explains how personal data is handled when you use the Halo Studio website or submit an enquiry.

1. Data controller

The controller is Nikola Titirinov, a natural person, based in Plovdiv, Bulgaria. For questions about your personal data, email nikolatitirinov@gmail.com.

2. Data we may collect

Through the contact form, we may receive:

• your name and email address;
• your telephone number, when supplied;
• your business or organisation name, when supplied;
• the selected service and preferred contact channel;
• a link to an existing website or public business listing, when supplied;
• the content of your message;
• enquiry-source or campaign information when it is included in the link you visited;
• basic technical and security information, including the submitted host and time, needed for spam prevention, request validation and service protection.

3. Purposes and legal bases

We process this data to:

• respond to enquiries and prepare quotations;
• take steps you request before potentially entering into a service agreement;
• maintain the security and reliability of the contact form;
• establish, exercise or defend legal claims where necessary.

The legal bases are taking steps at your request before entering into a contract, legitimate interests in responding to genuine enquiries, preventing abuse and securing the website, and compliance with a legal obligation where applicable. Ordinary contact-form processing is not based on consent.

4. Retention

• Enquiries that do not result in a contract are kept for up to 12 months after the last meaningful communication.
• Data from enquiries that result in a contract is retained in accordance with that contract and applicable accounting or legal obligations.
• Security information is kept only for the period reasonably required to prevent and investigate abuse.

5. Recipients and service providers

Data may be processed by Cloudflare for website hosting, delivery and security; by Resend, once enabled, for transactional email delivery; and by other technical providers only where required to operate the service. Where a provider processes data outside the European Economic Area, safeguards required by law are applied. Personal data is not sold.

6. Cookies and technical storage

The site currently uses no advertising or behavioural analytics cookies, and no advertising or behavioural analytics service is active. Cloudflare and other essential infrastructure may use strictly necessary technical mechanisms for delivery, abuse prevention and security. If analytics or marketing technology is introduced later, this policy and any required visitor-choice mechanism will be updated before it is enabled.

7. Your rights

Subject to applicable law, you may have rights of access, correction, deletion, restriction, objection and data portability where applicable. You may withdraw consent only where processing actually relies on consent. To exercise a right, email nikolatitirinov@gmail.com.

You may also complain to the Commission for Personal Data Protection, the Bulgarian supervisory authority.

8. Security and contact

Reasonable technical and organisational measures are used to protect information. No transmission or storage method can be guaranteed to be completely secure. For questions or requests: nikolatitirinov@gmail.com.