Privacy policy
What we collect, why, how long we keep it, and the rights you have over it. Written to be read, not survived.
Last updated July 23, 2026
This is a template document, written from the applicable requirements and pending review by a qualified lawyer before launch. It is not itself legal advice.
Who is responsible
Kohi Solutions Ltd, Veliko Tarnovo, Bulgaria, EU VAT BG206220247, is the controller for the personal data described here. Contact us at [email protected].
What we collect
Intake and contact forms. When you submit the get-started form or contact us, we collect what you enter: your citizenship group, what you want to do, income band, timeline, email address, and any note. On the intake, we also record which page you came from.
Analytics. We use privacy-respecting analytics to understand which pages are read and which tools are used. This is aggregate and does not identify you.
We do not run advertising trackers, and we do not sell personal data.
Why we use it, and the legal basis
To answer your enquiry and connect you with the right professionals: this is processing necessary to take steps at your request before entering a contract, and, where you tick the consent box, your consent.
To improve the site: our legitimate interest in understanding aggregate usage.
To meet legal obligations, such as keeping records we are required to keep.
How long we keep it
We keep intake and contact submissions for as long as needed to handle your enquiry and any resulting engagement, then for a reasonable period for our records, after which we delete or anonymise them. You can ask us to delete your data sooner (see your rights below).
Your rights
Under the GDPR you have the right to access, correct, delete, restrict, and port your data, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. To exercise any of these, email [email protected].
You also have the right to complain to a supervisory authority, in Bulgaria the Commission for Personal Data Protection, or the authority in your own country.