Get Started

    Privacy Policy

    Last updated: 19 September 2026

    1. Introduction

    3dopenwebsite.com is operated by "3D OPEN DESIGN" Ltd ("we", "our", "us"), a professional web design and development agency registered in Sofia, Bulgaria. We are committed to protecting your privacy and handling your personal data transparently, in full compliance with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.

    This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our web design, development, SEO, and branding services.

    2. Data Controller

    The data controller responsible for your personal data is the company operating 3dopenwebsite.com:

    • Legal entity: "3D OPEN DESIGN" Ltd (3 Д ОУПЪН ДИЗАЙН ЕООД), a single-member limited liability company registered in Bulgaria
    • UIC (BULSTAT): 207665677
    • Registered office: 1 Chukar Str., Vitosha district, 1616 Sofia, Bulgaria
    • Email: info@3dopendesign.com
    • Phone: +359 889536699
    • Service area: European Union, European Economic Area, and worldwide

    3. Information We Collect

    We may collect the following categories of personal data when you interact with our website or services:

    3.1 Information You Provide Directly

    • Inquiry form: Your email address, your name or company name, the type of website you need, and anything you choose to add in the optional "ideas" step: free text, links, and up to four reference images. Images are compressed in your browser and sent to us only as email attachments. We also record the page you sent the inquiry from, your browser type, and an approximate IP address for spam protection.
    • Newsletter: Your email address and where on the site you signed up. We use double opt-in: nothing is stored as a subscription until you click the confirmation link we email you. Every issue carries a one-click unsubscribe link.
    • Discount offer: If you ask for the discount code on our pricing page, we store your email address, the code we send you, when it was sent and where you asked for it, so we can honour the code and reply about your project. This does not sign you up to the newsletter; the email only contains an optional link to join it. You can ask us to delete this record at any time.
    • Website assistant: If you use the chat assistant, the messages you type are sent to our AI provider to generate a reply (see section 9). Please do not share sensitive personal data in the chat.
    • Project Information: Details about your website project, business requirements, and any materials you share with us for project purposes.
    • Communication: Records of our correspondence, including emails, messages, and call notes.

    3.2 Information Collected Automatically

    • Usage Data: Pages visited, time spent on our site, referring URLs, and browsing patterns.
    • Device Information: Browser type, operating system, IP address, and device type.
    • Cookies: We use essential cookies, and analytics cookies, basic heatmap data and product analytics only after you accept them. See section 8 for details.
    • Local storage: Your theme choice, cookie decision, and an unsent inquiry draft (text only, never images) are kept in your own browser so you can pick up where you left off. This data never leaves your device and is cleared when the inquiry is sent or after seven days.

    4. How We Use Your Information

    We use your personal data for the following purposes:

    • To respond to your inquiries and provide information about our European web design services
    • To deliver our professional web development and design services to you
    • To improve our website and service offerings
    • To send relevant communications about your projects
    • To comply with legal obligations

    5. Legal Basis for Processing

    Under GDPR, we process your personal data based on the following legal grounds:

    • Consent (Art. 6(1)(a)): When you opt in to receive marketing communications.
    • Contract (Art. 6(1)(b)): To fulfill our obligations when providing web design and development services to you.
    • Legitimate Interest (Art. 6(1)(f)): To improve our services, maintain our website, and respond to inquiries.
    • Legal Obligation (Art. 6(1)(c)): To comply with applicable EU and Bulgarian laws.

    6. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form inquiries are retained for up to 24 months after the last interaction. Project-related data is retained for the duration of our business relationship plus five years for legal and accounting purposes.

    7. Your Rights Under GDPR

    As a data subject in the European Union, you have the following rights:

    • Right to Access: Request a copy of the personal data we hold about you.
    • Right to Rectification: Request correction of inaccurate or incomplete data.
    • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where there is no compelling reason for its continued processing.
    • Right to Restriction: Request restriction of processing in certain circumstances.
    • Right to Data Portability: Request transfer of your data to another service provider.
    • Right to Object: Object to processing based on legitimate interests or direct marketing.

    To exercise any of these rights, please contact us at info@3dopendesign.com. We will respond within 30 days as required by GDPR.

    8. Cookies

    Essential cookies and local storage are necessary for the website to function (theme, cookie choice, form drafts) and need no consent. Analytics cookies and heatmaps are switched on only after you click "Accept all" in the cookie banner; "Reject" keeps everything off.

    For analytics we use Google Analytics 4 (Google Ireland Ltd.) with Google Consent Mode. Until you accept, Google receives no cookies and no identifiers. Once accepted, Google Analytics sets cookies (such as _ga) that last up to two years and records pages visited, approximate location, device and browser type, and referring site. IP addresses are truncated by Google. We use these reports only to understand which pages work and which do not.

    We also collect basic heatmap data with Microsoft Clarity (Microsoft Corporation), again only after you accept. Clarity records how visitors use our pages — clicks, taps, scrolling and mouse movement — and turns it into heatmaps and session replays, so we can see where a page is confusing and fix it. It records page content and interactions together with device, browser, screen size and approximate location; text you type into form fields is masked and not collected. Clarity sets two cookies: _clck (up to one year, remembers a returning browser) and _clsk (one day, joins the pages of one visit). We do not use Clarity for advertising. Microsoft processes this data under its privacy statement; more at clarity.microsoft.com/terms.

    We also use PostHog (PostHog Inc., data hosted in the European Union) for product analytics, again only after you accept. PostHog records which pages you visit and which features you use — for example whether a domain search led to a purchase — so we can see where people get stuck. If we switch on session replay for a period, it records clicks, scrolling and page changes; everything you type into form fields is masked and never recorded. We do not create a personal profile for anonymous visitors, and we do not use PostHog for advertising. PostHog stores a cookie named ph_<project key>_posthog (up to one year) to recognise a returning browser. More at posthog.com/privacy.

    You can withdraw consent for analytics, heatmaps and product analytics at any time: signed-in users can switch it off in Account → Settings; anyone can clear the site's cookies in their browser, which brings the banner back. You can also use the Google Analytics opt-out browser add-on. Disabling essential storage may affect how the website works.

    9. Third-Party Services

    We use a small number of service providers (processors) to run this website. Each processes data only on our instructions and under GDPR-compliant terms:

    • Vercel Inc. hosts the website and runs the code that handles the inquiry form, newsletter, and chat. Server logs (IP address, request path, timestamp) are kept briefly for security.
    • Google (Google Workspace / Gmail) delivers our email. Inquiries, confirmations, and newsletter messages are sent through and stored in our Google Workspace mailbox.
    • Google Analytics 4 for website statistics, only with your consent (section 8).
    • Microsoft Clarity (Microsoft Corporation) for basic heatmaps and session replays, only with your consent (section 8). Data may be processed in the United States under the EU–U.S. Data Privacy Framework.
    • PostHog (PostHog Inc.) for product analytics, only with your consent (section 8). Data is hosted in the EU.
    • Stripe (Stripe Payments Europe Ltd, Ireland) processes payments for domain names. We never see or store your card details.
    • Openprovider (Hosting Concepts B.V., the Netherlands), an ICANN-accredited registrar, and the registry of the ending you choose receive the registrant details you give when you buy a domain (name, address, phone, email), because registration is impossible without them. Depending on the ending and your WHOIS privacy choice, some of these details may be shown in the public registry lookup.
    • Supabase (database hosted in an EU data region) may store inquiry records and newsletter subscriptions in a database so that we can number, track, and answer them.
    • Anthropic provides the AI model behind the website assistant. Messages you type in the chat are sent to Anthropic's API to generate a reply and are handled under Anthropic's commercial terms, which do not permit training on that data.

    We may also use a webhook to forward new inquiries into our own project-management tools.

    We do not sell, trade, or rent your personal data to third parties for their marketing purposes.

    10. International Data Transfers

    As a European web design agency, our operations are based in Europe. Your data is primarily stored and processed within the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or our services. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

    12. Contact Us

    If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

    • Legal entity: "3D OPEN DESIGN" Ltd (3 Д ОУПЪН ДИЗАЙН ЕООД), a single-member limited liability company registered in Bulgaria
    • UIC (BULSTAT): 207665677
    • Registered office: 1 Chukar Str., Vitosha district, 1616 Sofia, Bulgaria
    • Email: info@3dopendesign.com
    • Phone: +359 889536699

    You also have the right to lodge a complaint with your local data protection authority within the European Union.