Last updated: 11 February 2026
This Privacy Policy explains how Ivo Emanuilov, operating under the trade mark I/O Consulting (“we”, “us”), collects and uses personal data through https://ioconsulting.bg (the “Website”). We act as the data controller for the processing described below.
Who we are
Controller: Ivo Emanuilov, a freelance consultant operating as I/O Consulting (sole proprietor)
Address: 6 Petko Karavelov str, 2300 Pernik
Email: privacy@ioconsulting.bg
What data we collect and why
Contact form / client requests
When you contact us via the Website contact form, we process the information you provide, typically:
- Identity and contact details (e.g., name, email, phone number)
- Message content (your request and any information you choose to include)
- Metadata (date/time of submission; basic technical logs may be generated by the Website)
Purposes:
- To respond to your enquiry and communicate with you
- To assess and discuss a potential consulting engagement
- To keep a record of communications for business administration
Legal basis (GDPR):
- Pre-contractual steps / contract performance (Art. 6(1)(b)) when you request our services; and/or
- Legitimate interests (Art. 6(1)(f)) in responding to enquiries and operating our business.
Cookies
We only use strictly necessary cookies on the Website. Cookies are small text files stored on your device.
- Strictly necessary cookies (if used): required for the Website to function (eg, security, load balancing, basic preferences). These do not require consent under EU rules.
- Optional cookies (not applicable at the moment; only if enabled): eg, analytics or marketing cookies. If we use these, we will ask for your consent before placing them, and you can withdraw consent at any time via the cookie settings/banner.
Who we share data with (recipients)
We do not sell your personal data. We may share data only as needed with:
- Hosting / website support providers (to run and secure the Website)
- Email service providers (to receive and reply to messages)
- Professional advisers (e.g., accountant/lawyer), where necessary
- Authorities if required by law
These providers act as processors (or independent controllers where applicable) and are bound by confidentiality and data protection obligations.
International transfers
We aim to keep your data within the EU/EEA. If any provider processes data outside the EU/EEA, we will use appropriate safeguards (eg, EU Standard Contractual Clauses) as required.
How long we keep data (retention)
- Contact form enquiries: typically kept for up to 12 months after the last communication, unless you become a client or the law requires longer retention.
- Client-related communications: retained for the duration of the engagement and thereafter as needed for legal, tax, and accounting obligations.
- Cookies: retained according to their type and settings (session cookies are deleted when you close your browser; persistent cookies remain until expiry or deletion).
Your rights under the GDPR
You may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data (in certain cases)
- Restrict processing
- Object to processing based on legitimate interests
- Data portability (where applicable)
- Withdraw consent (where processing is based on consent)
To exercise rights, contact us using the details above.
Complaints
You also have the right to lodge a complaint with your local EU supervisory authority. In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).
Security
We apply appropriate technical and organisational measures to protect personal data (e.g., access controls and basic security practices). No method of transmission or storage is 100% secure.
Children
The Website is not intended for children, and we do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated “Last updated” date.