Legal
Your data belongs to you. Here is exactly how we handle it.
Pavlova Consult is a business law firm registered in Sofia, Bulgaria. Our website address is pavconsult.com. We are the data controller for the personal data collected through this website. Contact: kpavlova@pavconsult.com · +359 889 301 014
When you submit a contact or consultation request, we collect: • Your name and email address • Your company name (optional) • The message or inquiry you send us • The practice area you selected We also collect standard server logs (IP address, browser type, pages visited) for security and analytics purposes.
We use the information you provide solely to: • Respond to your legal inquiry or consultation request • Maintain records of our client communications • Improve our services and website experience We do not use your data for marketing without your explicit consent, and we never sell your personal data to third parties.
Under the General Data Protection Regulation (GDPR), we process your data on the basis of: • Legitimate interest — to respond to your inquiry • Contractual necessity — where an engagement has been established • Legal obligation — where required by Bulgarian or EU law
We retain your contact data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Inquiry data is typically retained for 3 years. You may request deletion at any time.
Under GDPR, you have the right to: • Access the personal data we hold about you • Request correction of inaccurate data • Request deletion ("right to be forgotten") • Object to or restrict processing • Data portability To exercise any of these rights, contact us at kpavlova@pavconsult.com. You also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of Bulgaria.
Our website uses only essential cookies required for technical operation. We do not use tracking or advertising cookies. You can disable cookies in your browser settings without affecting your ability to use the site.
Our website is hosted on the Base44 platform. Contact form submissions may be processed through secure third-party email infrastructure. We ensure all processors comply with GDPR requirements.
We may update this Privacy Policy from time to time. The current version is always available at this URL. Material changes will be communicated by updating the effective date below. Last updated: June 2026