This policy describes how Tricky Click Ltd (“Tricky Click”) processes personal data when trickyclick.com is visited or an inquiry is sent: what is collected, for what purposes and on what legal basis, and which rights the people concerned have. Tricky Click is the controller of that data. The policy follows Bulgarian and EU data protection law, including the GDPR.

Information collected

• Inquiries. An email to Tricky Click contains the sender’s name and email address as they appear in the message, the message itself, and anything the sender chooses to include or attach.
• Technical data from visits. To deliver the site, the hosting provider processes each visitor’s IP address and the basic details the browser sends with each request, such as the page requested and the type of browser.

The site has no contact form, accounts, cookies, analytics or advertising, and visitors are neither counted nor profiled. Sending an inquiry is voluntary. Without one, nothing is processed beyond the technical data needed to show the site.

Purposes and legal basis

• Answering inquiries. An inquiry is used to reply and to discuss the work it raises: as steps taken at the sender’s request before a possible engagement, and in Tricky Click’s legitimate interest in answering business inquiries.
• Delivering and securing the site. The hosting provider uses the technical data to serve the pages and protect the site against misuse, in Tricky Click’s legitimate interest in running a reliable and secure website.

Disclosure and security

Personal data is handled only by the service providers that host the site and Tricky Click’s email, under their data processing terms. It is not sold, and it is not shared with anyone else unless the law requires it. The site is served only over an encrypted connection and collects nothing beyond what this policy describes.

International transfers

Tricky Click works with clients worldwide, and the same protections apply to everyone, wherever they are. Some of its service providers are based in the United States; those transfers rely on the EU–US Data Privacy Framework.

Retention period

• Inquiries are deleted 24 months after the last contact, unless they have become part of a client relationship whose records must be kept under other legal obligations.
• Technical data is kept by the hosting provider only as long as it is needed to deliver and secure the site, under its data processing terms.

Automated decision-making

No decisions about anyone are made by automated means, including profiling.

Data subject rights

Anyone whose personal data Tricky Click holds can ask for a copy of it, to have it corrected or deleted, to limit or stop its use, or to receive it in a portable format. Requests go to legal at trickyclick dot com and are answered within one month. A request to delete an inquiry is carried out unless the inquiry has become part of a client relationship whose records must be kept under other legal obligations. Complaints can also be made to Bulgaria’s Commission for Personal Data Protection, or to the data protection authority where the person lives or works.

Contact

Questions about this policy or about personal data can be sent to legal at trickyclick dot com .