Privacy Policy

Updated at 2026-08-18

Соккотра 111 ЕООД, trading as Soccotra (“we,” “our,” or “us”), is a small studio based in Sofia, Bulgaria. This Privacy Policy explains what personal information we collect through our website, why we collect it, who processes it on our behalf, and what rights you have over it.

This Privacy Policy applies to our website and its associated subdomains (together, the “Service”). By using the Service, you accept the collection and use of information described here.

Definitions and key terms

The terms below are used throughout this Privacy Policy with the following meanings:

• Company: “Company,” “we,” “us,” and “our” refer to Соккотра 111 ЕООД, trading as Soccotra, which is responsible for your information under this Privacy Policy.
• Cookie: a small amount of data that a website asks your browser to store and that the browser sends back on later visits.
• Country: the country in which Soccotra is based, which is Bulgaria.
• Device: any internet connected device, such as a phone, tablet or computer, that can be used to visit our website.
• IP address: the number assigned to every device connected to the internet. An IP address can often be used to estimate the location a device is connecting from.
• Local storage: a small amount of data that a website saves in your browser and that stays there until it is cleared. Unlike a cookie, it is not sent back to the server with each request.
• Personal Data: any information that, on its own or together with other information, allows a natural person to be identified.
• Processor: a company that processes personal information on our behalf and on our instructions, such as our database provider, our hosting provider, or the service that delivers form submissions to us as a notification.
• Service: our website, together with the contact form and the newsletter form on it.
• Website: Soccotra’s site, which can be accessed at https://soccotra.com
• You: any person who visits our website or contacts us through it.

What information do we collect?

There are two ways to send us information through this website: the contact form and the newsletter form.

When you fill in our contact form, we collect the following.

• your name
• your email address
• the name of your company
• the type of project you are asking about
• the budget and timeline you indicate
• the details you write in the message field
• the date and time of the submission

When you subscribe to our newsletter, we collect your email address and nothing else.

Submissions do not stop at our database. When you send the contact form, a copy of your submission is also delivered to a private channel in our studio’s Discord workspace, so that we see it as soon as it arrives. That copy contains your name, your email address, your company, the project types you selected, the budget, the timeline and the full text of your message. When you subscribe to the newsletter, your email address is delivered to the same private channel. Discord hosts that workspace and therefore processes the information in it.

The contact form is protected against automated submissions by Cloudflare Turnstile. To carry out that check, your IP address is sent to Cloudflare. The IP address is used for that check alone. It is not written to our database and it is not included in the Discord notification.

We do not operate accounts, logins, a shop, orders or payments, so we never collect passwords, payment details or identity documents. We run no analytics, advertising or tracking software on this website, and we do not obtain information about you from data brokers or social media platforms.

How do we use the information we collect?

We use the information only for the following purposes.

• to read your enquiry and reply to it
• to notify ourselves that a form has been submitted, by delivering a copy of it to our private Discord channel
• to prepare a quote or proposal if you ask for one
• to keep an ordinary record of our business correspondence
• to send a newsletter to the addresses that subscribed to it, if and when we write one
• to keep the contact form from being used by automated systems

We do not use your information to profile you, to advertise to you, or to build audiences on any platform. We do not sell personal information.

Our legal basis under the GDPR

Соккотра 111 ЕООД is the controller of the personal information described in this policy, and we process it in accordance with the General Data Protection Regulation (GDPR) and Bulgarian data protection law. We rely on the following legal bases:

• Enquiries sent through the contact form are processed in order to take steps at your request before entering into a contract, and on our legitimate interest in replying to people who write to us.
• Newsletter subscriptions are processed on the basis of your consent, which you give by submitting the form and can withdraw at any time.
• The spam check on the contact form is carried out on our legitimate interest in keeping that form usable.
• The Discord notification is sent on our legitimate interest in seeing and answering submissions promptly.

Who processes your information?

The information we collect is held in a database hosted by Supabase. Our website is served by our hosting provider. The spam check described above is carried out by Cloudflare. Contact form submissions and newsletter signups are also delivered to our studio’s private Discord workspace as a notification, including the message you wrote, so Discord processes that copy as well. These providers process personal information on our behalf and on our instructions.

Access to the Discord channel is limited to the people who run the studio. We do not post enquiries anywhere public.

We do not share your information with advertisers, ad networks, data brokers, analytics companies or marketing partners, because we use none of them.

We may disclose information where the law requires it, or where it is necessary to establish, exercise or defend a legal claim.

If Soccotra is ever sold or merged with another business, the information described in this policy may be transferred as part of that transaction, and whoever receives it would remain bound by this policy.

Could my information be transferred to other countries?

Soccotra is based in Bulgaria. The providers named above operate infrastructure in more than one country, so some of the processing they carry out for us may take place outside Bulgaria. Apart from those providers, we do not transfer your information to anyone.

How do we use your email address?

If you write to us through the contact form, we use your email address to reply to you.

If you subscribe to our newsletter, we keep your address so that we can send you a newsletter if and when we write one. We use it for nothing else. You can ask us to remove your address at any time by writing to legal@soccotra.com, and we will delete it from the subscriber list. We do not pass email addresses to advertising platforms and we do not use them for audience targeting.

How long do we keep your information?

We keep an enquiry for as long as we need it to reply to you, to keep an ordinary record of our business correspondence, and to meet any legal or accounting obligation that applies to it. When none of those reasons applies any longer, we delete it.

We keep a newsletter address until you unsubscribe or ask us to remove it.

A copy of every submission also sits in our private Discord channel as the notification described above. When we delete an enquiry or an address, we delete the matching notification as well.

You can ask us to delete your information sooner than that, and we will do so unless we are required to keep it.

How do we protect your information?

We take reasonable technical and organisational measures to protect the information described in this policy, and we deliberately collect as little of it as possible. No method of transmission over the internet and no method of storage is completely secure, so while we use reasonable efforts to protect your personal information, we cannot guarantee its absolute security.

Your rights

The GDPR gives you the following rights over the personal information we hold about you:

• Access: you can ask us for a copy of the information we hold about you.
• Correction: you can ask us to correct information that is wrong or incomplete.
• Deletion: you can ask us to delete your information.
• Restriction: you can ask us to limit how we use your information while a question about it is resolved.
• Objection: you can object to processing that we carry out on the basis of our legitimate interests.
• Portability: you can ask us to send you the information you gave us in a common, machine-readable format.
• Withdrawal of consent: where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect processing that took place before you withdrew it.

To exercise any of these rights, write to legal@soccotra.com. We will respond within one month.

If you believe we have handled your personal information improperly, you have the right to complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection, or to the supervisory authority of the country you live in.

Cookies and local storage

We do not use cookies for analytics, advertising or tracking, because we run no analytics, advertising or tracking software on this website.

Our website stores two entries in your browser. Both are local storage entries, and they are the following.

• cookie_consent: written when you answer the notice shown on your first visit. It holds a single word, either accepted or declined. Nothing on the site behaves differently depending on which one you choose, because there is nothing to switch off.
• language: written when you pick a language from the language switcher. It holds the code of the language you picked, such as en or bg, so that the site opens in that language when you come back.

Neither entry contains anything that identifies you, and neither is sent to us.

You can clear both at any time through your browser settings. If you clear cookie_consent, the notice will appear again on your next visit. If you clear language, the site will fall back to the language your browser asks for.

Links to other websites

Our website may link to websites that we do not operate or control. This Privacy Policy does not apply to them. Once you follow a link away from our website, the rules and policies of the site you arrive at apply instead, and such sites may collect information about you by means we have no part in.

Children

Our website is not directed at children, and we do not knowingly collect personal information from them. If you believe that a child has sent us personal information through one of our forms, write to legal@soccotra.com and we will delete it.

Changes to this Privacy Policy

We may update this Privacy Policy as our website changes or as the law requires. When we do, we will change the date shown at the top of this page. If a change materially affects how we handle your personal information, we will say so on the website before it takes effect.

Governing law

This Privacy Policy is governed by the laws of Bulgaria, excluding its conflict of law rules. You consent to the exclusive jurisdiction of the Bulgarian courts for any action or dispute arising under or in connection with this Privacy Policy. This does not affect your right to complain to a supervisory authority.

Your consent

By using our website, or by contacting us through it, you accept the practices set out in this Privacy Policy. Where we rely on your consent, you can withdraw it at any time by writing to legal@soccotra.com. If you do not agree with this Privacy Policy, please do not use the forms on our website.

Contact us

If you have a question about this Privacy Policy, or about the information we hold, write to us at legal@soccotra.com. Our postal address is Соккотра 111 ЕООД, Sofia, Bulgaria.