Privacy Policy

Last updated: 11.06.2026

This Website Privacy Policy explains how HeroesLab LLC, a company registered in Bulgaria (“Company”, “we”, “us” or “our”), processes personal data collected through our website https://heroeslab.io/

We provide IT consulting, management consulting, software development and related professional services.

This Privacy Policy applies only to personal data processed by us as a controller in connection with this website. Where we process personal data on behalf of our clients as a processor in the course of providing services, that processing is governed by the relevant client agreement and data processing agreement.

1. Controller and contact details
The controller of your personal data is:

HeroesLab LLC
Reg No.: 207154775
Registered address: Krasno Selo Distr., Bl. No C, Fl. 1, Office 1 1680 Sofia Bulgaria
Email: info@heroeslab.io

2. What personal data we collect through the website
Through our website, we collect personal data only when you voluntarily submit the contact form.

The contact form contains the following fields:
  • name;
  • surname;
  • email address;
  • message.
Please do not include sensitive personal data or unnecessary personal information in the message field.

We do not use the website to collect personal data for marketing purposes. We do not operate newsletter subscriptions, marketing forms, analytics tools, profiling tools or advertising technologies through the website.

3. Cookies and technical data
Our website uses only strictly necessary cookies. These cookies are required for the website to operate securely and to provide the service requested by you, such as enabling the contact form or maintaining basic website functionality. They may be used, for example, to:
  • enable basic website functionality;
  • support secure website operation;
  • remember essential technical settings;
  • enable the contact form to function properly;
  • prevent abuse or maintain website security.
We do not use:
  • analytics cookies;
  • marketing cookies;
  • advertising cookies;
  • social media tracking cookies;
  • profiling cookies;
  • third-party tracking cookies.
Strictly necessary cookies are required to provide the website service requested by you and do not require consent.

If we introduce analytics, marketing or other non-essential cookies in the future, we will update this Privacy Policy and, where required, ask for your consent before using them.

4. Purposes and legal bases
We process personal data collected through the website for the following purposes:

Purpose

Personal data

Legal basis

Responding to your inquiry or message

Name, surname, email address, message

Our legitimate interest in responding to business inquiries and communicating with website users

Taking steps prior to entering into a contract, where your inquiry relates to potential services

Name, surname, email address, message

Steps prior to entering into a contract

Operating and securing the website

Strictly necessary cookie data and basic technical data required for website operation

Our legitimate interest in maintaining a functional and secure website

Compliance with legal obligations or protection of legal rights, where necessary

Relevant website inquiry records

Legal obligation or legitimate interest


We do not process website form data for marketing purposes.

5. No marketing through the website
We do not use the contact form to subscribe you to newsletters, marketing emails, promotional campaigns or advertising communications.

If you contact us through the website, we will use your personal data only to review, handle and respond to your message or related business request.

6. Children’s data
Our website and services are intended for business and professional users.

We do not knowingly collect or process personal data of children through the website. If you believe that a child has provided personal data to us through the website, please contact us and we will take appropriate steps to delete the information.

7. Who we share personal data with
We may share personal data collected through the website only where necessary with:
  • website hosting and IT service providers;
  • email and communication service providers;
  • professional advisers, where required;
  • competent authorities, courts or regulators, where required by law or necessary to protect our rights.
We do not sell personal data. We do not share website form data with advertisers, analytics providers or marketing platforms.

Service providers that process personal data on our behalf are required to process it only under our instructions and to apply appropriate technical and organizational security measures.

8. International transfers
Where our service providers process personal data outside the European Economic Area, we will ensure that appropriate safeguards are in place in accordance with applicable data protection law. These safeguards may include an adequacy decision of the European Commission, standard contractual clauses approved by the European Commission or another lawful transfer mechanism.

9. Retention
We keep personal data collected through the contact form only for as long as necessary to review and respond to your inquiry and, where relevant, to manage follow-up communication.

Contact form submissions are retained for up to 6 months after the request is resolved, unless the inquiry results in a contractual relationship, pre-contractual negotiations, legal obligation, dispute or another legitimate reason requiring longer retention. In such cases, the relevant data may be retained for the applicable statutory limitation or legal retention period.

10. Security
We apply appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.

These measures may include access controls, secure hosting, encryption where appropriate, backups, confidentiality obligations and limited access to personal data.

11. Your rights
Subject to the conditions and limitations under applicable data protection law, you may have the right to:
  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request data portability, where applicable;
  • withdraw consent, where processing is based on consent;
  • lodge a complaint with a supervisory authority.
In Bulgaria, the competent supervisory authority is the Commission for Personal Data Protection.

To exercise your rights, please contact us at info@heroeslab.io. We may need to verify your identity before responding to your request.

12. Automated decision-making
We do not use personal data collected through the website for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

13. Links to third-party websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy notices before providing personal data to them.

14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will be published on this page with the “Last updated” date.

15. Contact us
For privacy questions, requests or complaints, please contact:

HeroesLab LLC
Reg No.: 207154775
Registered address: Krasno Selo Distr., Bl. No C, Fl. 1, Office 1 1680 Sofia Bulgaria
Email: info@heroeslab.io