Privacy Policy

Introduction

The IvoryForge Team ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our services, in compliance with the General Data Protection Regulation (GDPR) and Bulgarian data protection laws.

Information We Collect

We may collect the following categories of personal data:

• ● Contact information (name, email address) provided through our contact form
• ● Transaction Information: When you pay for our services, transaction-related data is collected. This is processed securely by our payment provider; we do not store or have access to your full credit card or bank details.
• ● Technical data (IP address, browser type) collected automatically for security purposes
• ● Communication records when you correspond with us

How We Use Your Data

We process your personal data for the following purposes:

• ● To respond to your inquiries and provide our web development services
• ● To improve our website performance and user experience
• ● To comply with legal obligations under Bulgarian and EU law
• ● To send project updates and communications you have requested

Legal Basis for Processing

We process your data under the following legal bases as defined by GDPR Article 6:

• ● Consent — when you submit a contact form or subscribe to communications
• ● Contractual necessity — when processing is needed to fulfill a service agreement
• ● Legitimate interest — for website analytics and security purposes

Cookies & Analytics

Our website is designed to be privacy-first. We do not use cookies, tracking pixels, or intrusive analytics. We use Cloudflare Web Analytics, a privacy-focused service that does not use cookies or collect any personally identifiable information (PII). This allows us to monitor site performance without compromising your privacy.

Third-Party Services

We may share data with the following categories of third-party processors, all of which comply with GDPR:

• ● Cloudflare — for hosting, CDN, and cookieless performance analytics.
• ● Stripe — for secure payment processing and fraud prevention. (Method of disclosure: Encrypted data transfer via secure API).
• ● Email service providers — for delivering correspondence.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• ● Right of access — request a copy of your personal data
• ● Right to rectification — correct inaccurate data
• ● Right to erasure — request deletion of your data
• ● Right to restrict processing — limit how we use your data
• ● Right to data portability — receive your data in a structured format
• ● Right to object — object to processing based on legitimate interest

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Contact form submissions are retained for 24 months unless you request earlier deletion.

Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/SSL), secure hosting infrastructure, and access controls.

All payment transactions are handled via Stripe's secure, PCI-compliant infrastructure. No sensitive payment data is ever stored on IvoryForge servers.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at forge@ivoryforge.com or by mail at: The IvoryForge Team, Omurtag, Targovishte, Bulgaria.

You also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of Bulgaria.