Privacy Policy
Who's processing your data
The controller of your personal data is Zhaklin Petrova Zhekova-Stamboliyska, trading as Alfa Translators, address Levski V 2, 1836 Sofia, Bulgaria. For anything to do with your personal data, write to office@alfatranslators.com or call +359 890 425 520.
What data we collect
Through the quote form we collect your name and contact details (email and/or phone), the document itself that you upload for translation, and whatever it contains. That can include names, dates, national ID numbers, civil-status details, and sometimes health or criminal-record information if the document is of that kind. Through the contact form we collect your name, contact details and the message you write.
Why we process it
We need the data from our forms to reply to your enquiry and prepare the quote or translation you asked for. That's processing necessary for pre-contract steps or for performing the contract itself. Any third-party data mentioned in the document (say, another person's name on a birth certificate) is processed under our legitimate interest in fulfilling the order you placed. Accounting data (name, service description, amount, date) is processed because the Accountancy Act requires us to keep it. Basic technical server data (IP address, access time) is processed for the security of the service.
Health data and criminal-record data
If the document you upload contains health information (for example a medical note) or information related to convictions or criminal record (for example a certificate of no conviction), we ask for your explicit consent to process that data at the point of upload. That consent is separate from accepting the general terms and is given through its own checkbox. This data is used only to prepare the translation, never for any other purpose. For orders that require legalisation, it is shared only with the MFA-contracted partner and/or a notary, and only to the extent needed for that specific order.
Who we share data with
Depending on the order, your data may reach: a partner holding a contract with the Ministry of Foreign Affairs, when you order an official translation for legalisation or apostille (we don't hold that contract ourselves); a notary, only when the order includes notarial certification; state institutions, when the document is submitted for legalisation or apostille and they act under their own legal mandate; our hosting and email provider, who technically runs the mailbox and the server the site sits on. We don't sell or rent your data to third parties for marketing purposes.
Transfers outside the EU/EEA
As far as we currently know, we don't transfer personal data outside the European Union or the European Economic Area. If our hosting or email provider is ever based outside the EU/EEA, a transfer will only happen where a GDPR-compliant safeguard is in place, for example standard contractual clauses approved by the European Commission. This page will be updated if that changes.
How long we keep data
The document you upload through the form is deleted from our server as soon as the email carrying it is sent. From then on it exists only in our mailbox. If an enquiry doesn't turn into an order, we delete the document 30 days after our last contact with you. If the order is completed, we delete the document 30 days after the translation is delivered. That short window is so we can respond if you spot an error or need a copy. Invoices and accounting records (without the document content) are kept for 10 years, as required by the Accountancy Act. Contact-form messages that don't lead to an order are deleted after 6 months.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability where it applies, and to withdraw any consent at any time without affecting processing already carried out before the withdrawal. To exercise any of these rights, write to office@alfatranslators.com.
Complaints to the supervisory authority
If you believe we're mishandling your data, you can file a complaint with the Commission for Personal Data Protection (КЗЛД), www.cpdp.bg.
Why the document is required
We need the document itself to prepare a quote or a translation. Without it, we can't process your enquiry.
Automated decision-making
We don't use automated decision-making or profiling of website visitors.
How we keep data safe
The site runs over HTTPS. Uploaded files are deleted from the server as soon as they've been emailed. Access to the mailbox is restricted, and the upload form only accepts certain file types and sizes.
Data belonging to minors
The service isn't aimed at children. If a document (for example a birth certificate) concerns a minor, we assume the request is made by a parent or guardian.
Last updated
This policy was last updated on 14 September 2026.