Privacy Policy

This policy explains what personal data AH Design (“we”) collects through ahdesign.website, why we collect it, who we share it with, and what you can ask us to do with it. We are the data controller for that data.

Last updated: 30 July 2026

What we collect

We collect personal data in only one place on this site: the contact form and the order form. When you submit one of them, we receive the details you typed into it.

• Your name
• Your email address
• Your phone number, if you provide one
• Your company name, if you provide one
• The subject or the package you selected
• The message you write

We do not run advertising or analytics trackers on this site, and we do not build profiles of visitors. We do not knowingly collect data from children. We never ask for payment card details through this website.

Why we use it, and on what legal basis

We use what you send us to reply to your enquiry, to prepare a quote, and to carry out any work you go on to order. Under the GDPR our legal basis is Article 6(1)(b), steps taken at your request before entering into a contract, and Article 6(1)(f), our legitimate interest in answering people who contact us and in keeping the forms free of spam and abuse.

Spam protection and server logs

The forms are protected by Cloudflare Turnstile. To tell a person from a bot, Turnstile receives your IP address and basic information about your browser, and it stores a short-lived cookie in your browser for that check. This is strictly necessary to keep the forms usable, so it does not rely on your consent. Our host, Cloudflare, also keeps standard security and traffic logs that include IP addresses.

Cookies

This site sets only the strictly necessary cookies described above, placed by Cloudflare for security and spam protection. There are no analytics, advertising or profiling cookies, which is why you are not asked to accept a cookie banner. If we add analytics or advertising tools in future, we will update this policy and ask for your consent first where the law requires it.

Who we share it with

We do not sell your personal data and we do not share it for anyone else's marketing. We do rely on a small number of service providers to run the site and deliver your message to us:

• Cloudflare, Inc. hosts this website and provides the Turnstile spam protection.
• Google (Gmail) delivers each form submission to our inbox, where it is stored.
• Telegram Messenger sends us an instant notification containing the contents of your submission, so we see new enquiries quickly.

These providers process data on servers that may sit outside the European Economic Area, including in the United States. Such transfers are covered by the European Commission's standard contractual clauses or by an adequacy decision, depending on the provider. We may also disclose data where the law requires it.

How long we keep it

Enquiries that do not lead to work are kept for up to two years, so that we have context if you come back to us. Where you become a client, we keep project correspondence for as long as we work together and then for the period our accounting and tax obligations require. You can ask us to delete your data sooner.

Your rights

Under the GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our use of it where we rely on legitimate interests, and ask us to send it to you or another provider in a portable format.

Email [email protected] and we will respond within one month. If you think we have handled your data badly, you can complain to the Bulgarian Commission for Personal Data Protection at cpdp.bg, or to the supervisory authority where you live.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Material changes will be highlighted here.

Contact us

AH Design
Email: [email protected]
Phone: (+359) 88 666 0034