Privacy & cookie notice
Last updated: 8 October 2026
Who is responsible for your data
The controller of personal data collected through meridianbusinesslaw.com is Meridian Business Law, 62 Budapeshta Street, Sofia Center, 1202 Sofia, Bulgaria. You can reach us about anything in this notice at office@meridianbusinesslaw.com.
As attorneys we are also bound by professional secrecy under the Bulgarian Bar Act. Anything you tell us in connection with a legal matter is treated as confidential.
What we collect and why
| Data | When | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Name, email, phone, country, message | You send an enquiry | Replying to you and assessing whether we can take on your matter | Steps before a contract, Art. 6(1)(b); your consent, Art. 6(1)(a) |
| Name, role, testimonial text | You submit a testimonial | Reviewing and, with your permission, publishing it | Consent, Art. 6(1)(a) |
We do not sell personal data, and we do not use it for automated decision-making or profiling.
Who receives it
Enquiry and testimonial forms are delivered by email through Formspree (Formspree, Inc., USA), which acts on our instructions as a processor. Fonts and all other site resources are served from our own server. Where any provider transfers data outside the European Economic Area, it does so under the European Commission’s standard contractual clauses or another safeguard recognised by the GDPR.
How long we keep it
- Enquiries that do not become an engagement: up to 12 months, then deleted.
- Enquiries that become an engagement: for as long as the file must be kept under the rules governing the legal profession and accounting legislation.
- Testimonials: until you ask us to remove them.
Cookies
This site sets no cookies and does not use local storage for tracking.
Your rights
Under the GDPR you may ask us for access to your data, its correction or deletion, restriction of processing, data portability, and you may object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time without affecting earlier processing. Write to office@meridianbusinesslaw.com and we will reply within one month.
If you believe your data has been mishandled, you may complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the supervisory authority where you live.
Changes to this notice
We update this notice when our practices or the law change. The date at the top always shows the current version.