Privacy

Who is responsible

This site is run by Radostin Armenov, an individual working as a product designer in Bulgaria. Under the General Data Protection Regulation I am the data controller for anything described here. You can reach me at radostinarmenov@gmail.com.

What I collect

One thing: whatever you send through the contact form. That is your name, your email address, which of three options you picked for what the message is about, and the message itself. Nothing is required of you beyond those four fields, and there is no account to create.

The form also carries two hidden anti-spam fields: an empty box that only an automated script would fill in, and the time the page loaded, used to notice a form submitted faster than a person could type. Neither is stored and neither identifies you.

What I do not collect

There is no analytics on this site. No Google Analytics, no Plausible, no Vercel Analytics, nothing counting visits. I do not know which pages you read, how long you stayed, or that you were here at all unless you write to me.

There are no advertising or social media trackers, no embedded video, and no third-party scripts of any kind. The typefaces are downloaded when the site is built and served from this domain, so loading a page does not tell Google or anyone else that you visited.

Cookies and browser storage

This site sets no cookies. If you check, you will find none.

It stores one thing in your browser: a key called theme, remembering whether you chose the light or dark version. That is set only when you press the toggle yourself, it never leaves your device, and I cannot read it. You can clear it at any time by clearing site data in your browser.

Because nothing here is used for tracking or advertising, the site does not need a cookie consent banner, and does not have one.

Why I hold it, and on what basis

If you send me a message, I use it to read your message and reply to it. That is the only purpose. I will not add you to a mailing list, and I have no mailing list to add you to.

The lawful basis is legitimate interest under Article 6(1)(f): you contacted me about work, and answering you is the reason the form exists. Where a message leads to a project, the basis becomes performance of a contract under Article 6(1)(b).

Who else sees it

The site is hosted by a hosting provider, and messages are delivered to my inbox through an email provider. Both are processors acting on my instructions. Nobody else receives your message, and I do not sell, rent or share personal data with anyone for any purpose.

How long I keep it

Messages stay in my email account. Anything that does not lead to work gets deleted once the conversation is over. Where a message leads to a project, I keep the correspondence for as long as the project needs and for a period afterwards for tax and accounting purposes.

Your rights

You can ask me for a copy of what I hold about you, ask me to correct it, ask me to delete it, ask me to restrict what I do with it, or object to me holding it at all. Because the only thing I hold is an email conversation you started, in practice this usually means asking me to delete a thread, which I will do.

Write to radostinarmenov@gmail.com and I will respond within one month, as the regulation requires. You do not have to explain why.

If you think I have handled your data badly, you can complain to your national data protection authority. In Bulgaria that is the Commission for Personal Data Protection.

Security

The site is served over HTTPS, so what you type into the form is encrypted in transit. Messages then live in my email account, which is protected by a strong password and two-factor authentication. No system is perfectly secure, and I am not going to claim otherwise.

Children

This site is aimed at people looking to hire a designer. It is not directed at children and I do not knowingly collect data about anyone under 16.

Changes to this page

If what the site does changes, this page changes with it and the date at the top moves. Adding analytics, embedding anything third-party, or changing where messages are delivered would all count, and the first two would also mean revisiting whether a consent banner is needed.