Privacy Policy

1. Who we are (data controller)

Sheyredov Law Firm, registered in Bulgaria and practising under the Bar Act, is the controller of your personal data. Address: Saedinenie Square 3, Floor 3, Office 302, Plovdiv, Bulgaria. Email: contact@sheyredovlaw.com. Phone: +359 893 561 202.

2. What personal data we collect

• Data you submit through our contact and enquiry forms: name, email address, telephone number, country, company or contact person, property location or requested service, and the description of your matter.
• Data you provide by email, telephone, WhatsApp, Viber or during a consultation, including documents and information about your case.
• Client identification data required by anti-money-laundering rules when we take on an engagement (identity document details, address, information about the beneficial owner and source of funds).
• Technical data collected automatically: IP address, browser and device type, pages visited, referring page and interaction events, collected via Google Tag Manager, Google Analytics 4 and Google Ads.

3. Why we process your data and on what legal basis

• To answer your enquiry and assess whether we can take your matter — pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• To provide legal services and represent you — performance of a contract (Art. 6(1)(b) GDPR).
• To comply with statutory duties, including anti-money-laundering, accounting and tax obligations (Art. 6(1)(c) GDPR).
• To operate, secure and improve the website and to measure advertising performance — our legitimate interest, or your consent where cookies or similar technologies require it (Art. 6(1)(f) and 6(1)(a) GDPR).
• To establish, exercise or defend legal claims (Art. 6(1)(f) GDPR).

4. Confidentiality and legal professional privilege

Information you share with us in connection with legal advice is protected by attorney–client privilege under the Bulgarian Bar Act. It is accessible only to the attorneys and staff working on your matter and is never sold or used for marketing.

5. Who we share data with

• Our IT and hosting providers, email delivery provider and database provider, acting as processors under written agreements.
• Courts, state and municipal authorities, notaries, the Registry Agency, the Employment Agency and the Ministry of Interior, where necessary to carry out your instructions.
• Analytics and advertising providers (Google) for aggregated website measurement.
• Accountants, auditors and other professional advisers bound by confidentiality.

6. International transfers

Our infrastructure and analytics providers may process data outside the European Economic Area. Such transfers take place under the European Commission's standard contractual clauses or another lawful transfer mechanism.

7. How long we keep your data

• Website enquiries that do not lead to an engagement: up to 12 months.
• Client files and correspondence: 5 years from the end of the engagement, or longer where the law requires it.
• Anti-money-laundering identification records: 5 years, as required by law.
• Accounting and tax documents: for the statutory retention periods.
• Analytics data: for the retention period configured in Google Analytics.

8. Cookies and tracking

We use strictly necessary cookies for the website to function, and analytics and advertising cookies set through Google Tag Manager (Google Analytics 4 and Google Ads) to understand how the site is used and to measure campaigns. You can block or delete cookies in your browser settings; the site remains usable without analytics cookies.

9. Your rights

• Access to your personal data and a copy of it.
• Rectification of inaccurate or incomplete data.
• Erasure, where there is no legal ground for us to keep the data.
• Restriction of processing and objection to processing based on legitimate interest.
• Data portability for data you provided under a contract or consent.
• Withdrawal of consent at any time, without affecting processing carried out before the withdrawal.
• A complaint to the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, kzld.bg, or to the supervisory authority in your country of residence.

10. Security

We apply organisational and technical measures appropriate to the risk, including access control, encrypted transmission, and confidentiality obligations for everyone who works with us.

11. Changes to this policy

We may update this policy to reflect changes in our services or the law. The current version is always published on this page with its date of last update.