Privacy Policy

Last updated: 28 September 2026

Who we are

AccountRights is published by WEB CONSULTING COMPANY OOD (WCC), a company incorporated in Bulgaria. We process personal data under the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection law.

Data we collect

We collect the following categories of personal data:

Contact information: name, email address, phone number (when you submit a diagnostic form)
Case information: platform, country of residence, description of your situation
Documents: files you upload as supporting evidence for your case
Technical data: IP address, browser type, pages visited (via cookies with your consent)
Communication data: emails exchanged regarding your case

How we use your data

We process your data for the following purposes:

To check your file and provide a diagnostic (legal basis: consent)
To refer your case to a partner attorney at your request (legal basis: consent)
To improve our services and website functionality (legal basis: legitimate interest)

Data sharing

We share your personal data only with partner attorneys in your jurisdiction when you explicitly consent to referral. We do not sell your data to third parties. We may use service providers (email, hosting, analytics) who process data on our behalf under appropriate data processing agreements.

Your rights under GDPR

Under the GDPR, you have the following rights:

Right of access (Article 15): obtain a copy of your personal data
Right to rectification (Article 16): correct inaccurate data
Right to erasure (Article 17): request deletion of your data
Right to data portability (Article 20): receive your data in a structured format
Right to object (Article 21): object to processing based on legitimate interest

Data processing by purpose and legal basis

Data controller: WEB CONSULTING COMPANY OOD (WCC), UIC 204884954, 28 Golash Street, entrance A, ground floor, studio apartment 3, Sofia 1505, Bulgaria. Contact: [email protected]

Purpose	Legal basis	Data processed	Retention period
Case diagnostic	Consent (Art. 6(1)(a) GDPR)	Name, email, phone, case description	24 months
Attorney referral	Consent (Art. 6(1)(a) GDPR)	Case file and documents	24 months
Site analytics	Consent (Art. 6(1)(a) GDPR)	IP address, browser type, pages visited	14 months
Site functionality	Legitimate interest (Art. 6(1)(f) GDPR)	Session data, language preference	Session duration
Communication	Contract (Art. 6(1)(b) GDPR)	Email exchanges	24 months

Data retention

We retain case data for a maximum of 24 months after the last activity on your case. After this period, data is automatically purged. You may request earlier deletion at any time.

Data security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted storage for sensitive documents, and access controls limiting who can view your case data.

Contact

For questions about your data or to exercise your rights, contact us at [email protected] or write to WEB CONSULTING COMPANY OOD, 28 Golash Street, entrance A, ground floor, studio apartment 3, Sofia 1505, Bulgaria.

International data transfers

Some technical data is processed by sub-processors located in the United States (Cloudflare Inc. for hosting, Google LLC for analytics and advertising). These transfers are governed by the EU-US Data Privacy Framework and, where applicable, by standard contractual clauses adopted by the European Commission.

Supervisory authority

You may lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Boulevard, Sofia 1592, Bulgaria; [email protected]; www.cpdp.bg. You may also contact the data protection authority in your country of residence.