Privacy policy

Last updated: 15 October 2026

This policy explains what personal data behub.dev collects, why, and what you can do about it. The site belongs to Behub (Business Hub Development), a web design studio in Sofia, Bulgaria. Write to start@behub.dev with any question about your data.

What we collect and why

When you send us a message

The contact form asks for your name, your email address, the kind of project and a message. We use them to reply to you and to prepare an offer. The message is saved in our website admin and sent to our inbox. The legal basis is the steps you ask us to take before a possible contract (Article 6(1)(b) GDPR).

When you allow analytics

If you choose Allow analytics in the cookie notice, we use Google Analytics to count visits and see which pages people read. Google receives your IP address, device and browser details and the pages you view, and sets the cookies listed in our cookie policy. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the cookie settings link at the bottom of every page. If you choose Necessary only, Google Analytics never loads.

When you message us on WhatsApp

The WhatsApp button opens WhatsApp with your message ready to send. Nothing leaves this site; the message is only sent if you press send in WhatsApp. From then on WhatsApp, run by Meta, handles it under its own privacy policy, and we see your phone number, your WhatsApp name and the messages you send. We use them to reply to you, on the same legal basis as the contact form.

When you visit any page

Like every web server, ours records technical data about each request: IP address, time, page and browser. A security plugin uses the same data to block attacks. We keep these records only as long as needed to run and protect the site. The legal basis is our legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).

Fonts, images and videos on this site are served from our own server. We do not embed social media, maps or third-party video players.

Who else handles the data

• Our hosting provider, which runs the server the site and its database live on.
• Our email service, which delivers contact form messages to us.
• WhatsApp (Meta), only if you choose to message us there.
• Google, for Google Analytics, only if you allow it. Google may process data in the United States under the EU-US Data Privacy Framework.

We do not sell personal data or share it for advertising.

How long we keep it

• Contact form messages: up to 24 months after our last conversation, unless we start working together. Then we keep what the contract and accounting law require.
• Google Analytics data: for the retention period set in our Analytics account, at most 14 months.
• Server and security logs: for a short period, then they are deleted or overwritten.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, and ask for it in a portable format. Where we rely on consent, you can withdraw it at any time. Email start@behub.dev and we will answer within one month.

You can also complain to the Bulgarian data protection authority, the Commission for Personal Data Protection (cpdp.bg), or to the authority in the EU country where you live.

Changes

If we change how we handle personal data, we will update this page and the date at the top.