Privacy Policy
Last updated: July 31, 2026
This Privacy Policy explains how Express Food Trade LTD processes and protects the personal data we collect through the website expressfoodtrade.com, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Bulgarian law.
1. Data controller
The controller of your personal data is:
- Express Food Trade LTD
- UIC (ЕИК): 201571324
- Registered office: 4 Ararat St, Lozenets district, Sofia 1407, Bulgaria
- Email for data protection matters: expressfoodtrade@gmail.com
- Phone: +359 896 64 64 54
2. What personal data we collect
We collect the following categories of personal data:
- Data you provide through the contact form: name, email address, phone number, company/venue name and the content of your message.
- Website usage data collected automatically: IP address, device and browser type, operating system, pages visited, referral source and approximate location (city/country level).
- Technical logs: IP address and request data generated when you visit the site.
3. Purposes and legal bases for processing
We process your personal data for the following purposes and on the following legal bases:
- Responding to inquiries and communicating with you (contact form) — based on your consent and/or to take steps at your request prior to entering into a contract (Art. 6(1)(a) and (b) GDPR).
- Website analytics and improvement via Google Analytics — based on your consent (Art. 6(1)(a) GDPR).
- Security, maintenance and proper operation of the site (technical logs) — based on our legitimate interest (Art. 6(1)(f) GDPR).
4. Cookies and analytics
The website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics places cookies on your device (e.g. _ga, _ga_*) that help us understand how visitors use the site. These cookies collect data such as pages visited, session duration and approximate location.
You can manage or refuse cookies through your browser settings, and install Google’s official opt-out add-on for Google Analytics: https://tools.google.com/dlpage/gaoptout.
5. Recipients and third parties
We do not sell your personal data. We may share data with the following service providers (processors) acting on our behalf:
- Google (Google Ireland Limited / Google LLC) — web analytics (Google Analytics), processing of contact-form submissions (Firebase) and email delivery (Gmail).
- Vercel Inc. — website hosting and content delivery.
6. International data transfers
Some of our providers (Google, Vercel) are established in or process data outside the European Economic Area, including in the United States. In such cases, transfers are carried out with appropriate safeguards under the GDPR — standard contractual clauses and/or the EU–U.S. Data Privacy Framework.
7. Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected:
- Contact-form messages — up to 24 months after the last communication, unless a longer period is required by law.
- Google Analytics data — according to Google’s data-retention settings (typically up to 14 months).
- Technical logs — for a limited period for security purposes.
8. Your rights
Under the GDPR you have the following rights regarding your personal data:
- the right of access;
- the right to rectification of inaccurate data;
- the right to erasure (“right to be forgotten”);
- the right to restriction of processing;
- the right to data portability;
- the right to object to processing;
- the right to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal;
- the right to lodge a complaint with a supervisory authority.
9. Supervisory authority
To exercise your rights, you can contact us at expressfoodtrade@gmail.com. If you believe that the processing of your personal data infringes the law, you have the right to lodge a complaint with:
- Commission for Personal Data Protection (CPDP)
- Address: 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria
- Website: www.cpdp.bg
- Email: kzld@cpdp.bg
10. Children
Our website and services are not directed at persons under 18 years of age, and we do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on this page, with the last updated date shown above.
