Privacy notice

Who the controller is

The data controller is IgniteSoul Ltd, 13 George Washington St., Vazrazhdane district, 1000 Sofia, Bulgaria. Company registration (EIK): [PLACEHOLDER]. You can reach us at info@IgniteSoulltd.com or +1 (580) 812-4992. We have not appointed a data protection officer, as we are not required to.

What we collect

When you submit the enquiry form we collect the information you enter: your name, your company name, your country, the enquiry type you select (Buying, Selling or General) and the content of your message. If you email or call us instead, we hold whatever you choose to send us, including your email address or telephone number.

We do not use advertising or analytics cookies on this website, and the location map on our contact page is a static image, so no third-party map provider receives your data unless you actively choose to open an external map link.

Why we use it and our lawful basis

• Responding to your enquiry — Article 6(1)(b) GDPR, steps taken at your request prior to entering into a contract; or Article 6(1)(f), our legitimate interest in responding to business correspondence where no contract is contemplated.
• Managing an ongoing trading relationship — Article 6(1)(b), performance of a contract with you or the company you represent.
• Preventing abuse of the form — Article 6(1)(f), our legitimate interest in keeping the service secure and free of spam.
• Meeting legal obligations — Article 6(1)(c), where commercial, tax, customs or sanctions-screening law requires us to keep records.

Who sees it

Enquiries are read by the IgniteSoul trading team. Data is processed by our website hosting provider and our email provider, acting as processors under written terms. Where a processor is located outside the European Economic Area, transfers are made under the European Commission's Standard Contractual Clauses. We do not sell personal data and we do not share it for marketing purposes.

How long we keep it

Enquiries that do not lead to a trading relationship are deleted within 24 months of our last contact with you. Where a trade proceeds, correspondence forms part of the transaction record and is retained for the statutory commercial and accounting retention period applicable in Bulgaria, after which it is deleted or anonymised.

Your rights

Subject to the conditions in the GDPR, you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing (including processing based on our legitimate interests), and to receive data you provided in a portable format. Where processing is based on consent, you may withdraw it at any time without affecting processing carried out beforehand.

To exercise any of these rights, email info@IgniteSoulltd.com. We respond within one month. If you are not satisfied, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), or with the supervisory authority in your country of residence.

Automated decision-making and changes

We do not carry out automated decision-making or profiling that produces legal effects concerning you. We may update this notice as our processing changes; the current version always appears on this page. Our statutory company details are set out in our legal notice.