Privacy Policy

This Privacy Policy explains how Electronic Signatures Ltd. (ЕЛЕКТРОННИ ПОДПИСИ ЕООД) processes personal data in connection with the qes.dev marketing website, website inquiries, booking flows, and related business communications.

Electronic Signatures Ltd. is registered in Bulgaria under company ID 208748108, with a registered address at 13 Knyazheska Str, Yuta Block, entrance 2, floor 2, 7000 Ruse, Bulgaria.

For the purposes of this Privacy Policy, Electronic Signatures Ltd. acts as the controller of personal data processed in connection with the website and related business communications described below.

For questions about this Privacy Policy or to exercise your rights, contact us at legal@qes.dev.

1. Scope

This Privacy Policy applies to:

• visitors to qes.dev
• people who contact us by email or through website-based inquiry channels
• people who use the website booking flow
• customer and business contacts communicating with us in a pre-contract or support context tied to the website

This Privacy Policy does not attempt to describe product-specific or customer-environment processing that may be governed separately by contract, implementation documents, or service-specific terms. Where we later provide project-based or contracted services, separate contractual terms may govern the relevant processing activities.

2. Personal Data We Collect

Depending on how you interact with the website, we may process:

Inquiry and Communication Data

• name
• work email address
• company name
• message content
• booking-related details you provide
• communication history with us

Technical and Usage Data

• IP address
• browser and device information
• approximate usage and interaction data
• referral and page-view information
• basic security, diagnostic, and abuse-prevention data

Preference Data

• browser storage used to remember website display preferences, such as theme selection

Commercial and Transaction Data

• if relevant, limited billing or transaction-related information associated with pre-contract, commercial, or payment-related interactions tied to the website

We ask that you do not send unnecessary sensitive personal data through general website inquiry channels.

3. How We Collect Data

We collect personal data:

• directly from you when you contact us, book a call, or otherwise communicate with us
• automatically when you use the website
• from service providers used to operate booking, analytics, communications, or payment-related workflows connected to the website

4. How We Use Personal Data

We may use personal data to:

• respond to inquiries and business communications
• schedule and manage calls or meetings
• operate, secure, and improve the website
• understand general website usage through analytics
• prevent misuse, fraud, and abuse
• manage commercial discussions and related administration
• comply with legal, tax, accounting, or regulatory obligations
• establish, exercise, or defend legal claims

5. Legal Bases

Where the GDPR and other applicable Bulgarian or EU data protection laws apply, we rely on one or more of the following legal bases:

Legitimate Interests

We process data where necessary for legitimate interests such as operating and securing the website, handling inquiries, preventing abuse, understanding website performance, and managing business communications.

Steps Prior to Entering Into a Contract or Contract Performance

We process data where necessary to respond to requests relating to potential services, manage booking activity, or administer commercial interactions.

Legal Obligation

We process data where necessary to comply with applicable legal, tax, accounting, or regulatory obligations.

Consent

Where a particular activity relies on consent, you may withdraw that consent at any time, without affecting prior lawful processing.

6. Analytics, Browser Technologies, and Booking Tools

The website currently uses:

• Vercel Analytics to understand overall website traffic and performance
• browser storage to remember theme preference
• Calendly to provide scheduling and booking functionality on the website

These technologies may involve the processing of technical and usage data. Depending on the tool and context, they may rely on cookies, scripts, local storage, or similar browser technologies. For more detail about browser technologies, see the Cookie Policy.

7. Sharing of Personal Data

We do not sell personal data.

We may share personal data with:

• service providers that help us operate the website and related business workflows
• payment providers where a payment-related interaction is initiated
• professional advisers where reasonably necessary
• competent authorities where required by law or legal process

Third-party services used through the website may also process information under their own privacy notices and terms where they act independently for their own service purposes.

For a current overview of website and business-operation vendors, see Subprocessors.

8. International Transfers

Some service providers used in connection with the website or related business operations may process personal data outside Bulgaria and the EEA, including in the United States.

Where required under applicable Bulgarian and EU data protection law, we rely on an appropriate legal transfer mechanism for such transfers, such as adequacy decisions, standard contractual clauses, or comparable safeguards.

9. Retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• inquiry and communication data for as long as needed to respond and manage follow-up
• booking and commercial interaction data for as long as needed to manage the relationship and related records
• technical and analytics data for a limited period proportionate to operational, security, and performance needs
• legal, tax, and accounting records for as long as required by applicable law or legitimate recordkeeping needs

10. Your Rights

Depending on your location and applicable law, you may have the right to:

• request information about how your personal data is processed
• request access to your personal data
• request correction of inaccurate data
• request deletion in certain circumstances
• request restriction of processing in certain circumstances
• object to certain processing
• request data portability where applicable
• withdraw consent where processing is based on consent

We may need to verify your identity, and where relevant your authority to act on behalf of another person or organization, before responding to a request.

11. Complaints

If you are in the EEA or the UK, you may also have the right to lodge a complaint with a supervisory authority. In Bulgaria, the relevant authority is the Commission for Personal Data Protection.

Website: cpdp.bg

12. Children and Minors

The website is intended for business and professional audiences. It is not directed to children, and we do not knowingly collect personal data from children through the website.

13. Automated Decision-Making

We do not use personal data collected through the website for solely automated decision-making that produces legal effects or similarly significant effects on individuals.

14. Security

We use measures appropriate to the website and related business operations to help protect personal data against unauthorized access, misuse, alteration, and loss. No website, transmission method, or storage system can be guaranteed to be completely secure.

15. Third-Party Sites

The website may contain links to third-party websites or services. We are not responsible for the privacy practices of third-party sites or services outside our control.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the website, our practices, our service providers, or applicable law. The latest version will be posted on this page with the updated effective date.

17. Contact

For privacy or legal questions relating to the website, contact us at legal@qes.dev. For general website help, you may also contact help@qes.dev.