Skip to content
Contact us

Privacy Policy

Last updated: 10 October 2026

Who we are

The controller of the personal data described here is Sales House OOD („СЕЙЛС ХАУС“ ООД), trading as The Sales House Bulgaria, UIC 204554910, registered office: 1 Panayot Volov Street, floor 4, apartment 12, Oborishte district, 1527 Sofia, Bulgaria. Our office is at 6 Shipka Street, 3rd floor, 1504 Sofia. For any question about personal data, write to sales@saleshouse.bg.

What this policy covers

This website and its contact form. It does not cover the websites of the channels and platforms we link to: they have their own policies.

What we receive through the contact form

  • Your name, email address, subject and message, and your company if you give it.
  • Any files you attach (PDF, Word, Excel, text files and images), with whatever personal data they contain. Please attach only what your enquiry needs.

Name, email address, subject and message are required: without them we cannot reply.

Why we use it, and on what basis

  • To answer your enquiry and, if you ask, to send you an offer. These are steps taken at your request before a possible contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR), and our legitimate interest in answering business enquiries (Article 6(1)(f) GDPR).
  • If we go on to work together, the data becomes part of our correspondence with you or your company under that agreement.

We do not use the data for newsletters or advertising, we do not sell it, and we do not make automated decisions about you.

How the form works

When you send the form, your message and attachments go by email straight to our mailbox. The website keeps no copy: uploaded files are checked and deleted from the web server as soon as the message has been sent or refused. If your browser does not run JavaScript, what you typed is stored on the server so that the form can be shown to you again. It is deleted as soon as the form is shown. If that page is never opened, the stored text can no longer be used after five minutes and is deleted by the website’s hourly clean-up.

Protection against misuse

To stop the form being misused, the website keeps a coded form of your IP address (a one-way hash made with the website’s secret key; the address itself is not stored) and the times of your submissions. The record is used for one hour after your last submission and is then deleted by the website’s hourly clean-up. The form accepts five submissions per hour. Basis: our legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

Who else processes the data

  • Our email provider, Microsoft (Microsoft 365).
  • The company that hosts this website: the form data passes through its servers when it is sent, and its servers keep technical logs (see below).

Both act on our instructions. We do not pass the data to anyone else unless the law requires it. Where a provider processes data outside the European Economic Area, it does so with the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses.

Technical logs

Like every website, the server records basic technical data about each request (IP address, date and time, the page requested and the type of browser) so that the website can run and be protected. These logs are kept by the hosting provider for a limited period.

How long we keep the data

  • Enquiries and attachments in our mailbox: as long as we need them to deal with the enquiry and any work that follows. Enquiries that do not lead to working together are deleted no later than 24 months after our last contact. If we sign a contract, the data is kept for the periods the law requires, for example for accounting.
  • The coded IP address used to protect the form: used for one hour after your last submission, then deleted by the hourly clean-up.

The hourly clean-up runs with the website’s scheduled tasks, which start when someone visits the website. After a period without visitors, it runs at the next visit.

Cookies

This website sets no cookies for visitors and uses no analytics or advertising trackers. If you pause the animations, your browser remembers this in its session storage until you close the tab; it is not sent to us. Only the website’s administrators receive WordPress’s standard login cookies when they sign in.

Your rights

Under the GDPR you can ask us for access to your data, to correct it, to delete it, to restrict its use or to receive it in a portable format, and you can object to its use on the basis of legitimate interest. Write to sales@saleshouse.bg; we will reply within one month. You can also complain to the Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg.

Changes

We update this policy when the website or the way we process data changes. The date at the top shows the current version.