Get Started

    Privacy Policy

    Last updated: 8 September 2026

    1. Introduction

    3dopenwebsite.com is operated by "3D OPEN DESIGN" Ltd ("we", "our", "us"), a professional web design and development agency registered in Sofia, Bulgaria. We are committed to protecting your privacy and handling your personal data transparently, in full compliance with the General Data Protection Regulation (GDPR) and applicable EU data protection laws.

    This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or use our web design, development, SEO, and branding services.

    2. Data Controller

    The data controller responsible for your personal data is the company operating 3dopenwebsite.com:

    • Legal entity: "3D OPEN DESIGN" Ltd (3 Д ОУПЪН ДИЗАЙН ЕООД), a single-member limited liability company registered in Bulgaria
    • UIC (BULSTAT): 207665677
    • Registered office: 1 Chukar Str., Vitosha district, 1616 Sofia, Bulgaria
    • Email: info@3dopendesign.com
    • Phone: +359 889536699
    • Service area: European Union, European Economic Area, and worldwide

    3. Information We Collect

    We may collect the following categories of personal data when you interact with our website or services:

    3.1 Information You Provide Directly

    • Inquiry form: Your email address, your name or company name, the type of website you need, and anything you choose to add in the optional "ideas" step: free text, links, and up to four reference images. Images are compressed in your browser and sent to us only as email attachments. We also record the page you sent the inquiry from, your browser type, and an approximate IP address for spam protection.
    • Newsletter: Your email address and where on the site you signed up. We use double opt-in: nothing is stored as a subscription until you click the confirmation link we email you. Every issue carries a one-click unsubscribe link.
    • Website assistant: If you use the chat assistant, the messages you type are sent to our AI provider to generate a reply (see section 9). Please do not share sensitive personal data in the chat.
    • Project Information: Details about your website project, business requirements, and any materials you share with us for project purposes.
    • Communication: Records of our correspondence, including emails, messages, and call notes.

    3.2 Information Collected Automatically

    • Usage Data: Pages visited, time spent on our site, referring URLs, and browsing patterns.
    • Device Information: Browser type, operating system, IP address, and device type.
    • Cookies: We use essential cookies, and analytics cookies only after you accept them. See section 8 for details.
    • Camera reflections: Some cards can mirror your surroundings. If you click "Accept all" in the cookie banner, your browser asks for camera access. The camera image is processed entirely inside your browser to draw the reflection; it is never recorded, uploaded, or sent to us or anyone else. You can turn it off at any time with the "Camera reflections" switch at the bottom of the page.
    • Local storage: Your theme choice, cookie decision, and an unsent inquiry draft (text only, never images) are kept in your own browser so you can pick up where you left off. This data never leaves your device and is cleared when the inquiry is sent or after seven days.

    4. How We Use Your Information

    We use your personal data for the following purposes:

    • To respond to your inquiries and provide information about our European web design services
    • To deliver our professional web development and design services to you
    • To improve our website and service offerings
    • To send relevant communications about your projects
    • To comply with legal obligations

    5. Legal Basis for Processing

    Under GDPR, we process your personal data based on the following legal grounds:

    • Consent (Art. 6(1)(a)): When you opt in to receive marketing communications.
    • Contract (Art. 6(1)(b)): To fulfill our obligations when providing web design and development services to you.
    • Legitimate Interest (Art. 6(1)(f)): To improve our services, maintain our website, and respond to inquiries.
    • Legal Obligation (Art. 6(1)(c)): To comply with applicable EU and Bulgarian laws.

    6. Data Retention

    We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form inquiries are retained for up to 24 months after the last interaction. Project-related data is retained for the duration of our business relationship plus five years for legal and accounting purposes.

    7. Your Rights Under GDPR

    As a data subject in the European Union, you have the following rights:

    • Right to Access: Request a copy of the personal data we hold about you.
    • Right to Rectification: Request correction of inaccurate or incomplete data.
    • Right to Erasure ("Right to be Forgotten"): Request deletion of your data where there is no compelling reason for its continued processing.
    • Right to Restriction: Request restriction of processing in certain circumstances.
    • Right to Data Portability: Request transfer of your data to another service provider.
    • Right to Object: Object to processing based on legitimate interests or direct marketing.

    To exercise any of these rights, please contact us at info@3dopendesign.com. We will respond within 30 days as required by GDPR.

    8. Cookies

    Essential cookies and local storage are necessary for the website to function (theme, cookie choice, form drafts) and need no consent. Analytics cookies are set only after you click "Accept all" in the cookie banner; "Reject" keeps everything off.

    For analytics we use Google Analytics 4 (Google Ireland Ltd.) with Google Consent Mode. Until you accept, Google receives no cookies and no identifiers. Once accepted, Google Analytics sets cookies (such as _ga) that last up to two years and records pages visited, approximate location, device and browser type, and referring site. IP addresses are truncated by Google. We use these reports only to understand which pages work and which do not.

    You can withdraw analytics consent at any time by clearing the site's cookies in your browser, which brings the banner back, or by using the Google Analytics opt-out browser add-on. Disabling essential storage may affect how the website works.

    9. Third-Party Services

    We use a small number of service providers (processors) to run this website. Each processes data only on our instructions and under GDPR-compliant terms:

    • Vercel Inc. hosts the website and runs the code that handles the inquiry form, newsletter, and chat. Server logs (IP address, request path, timestamp) are kept briefly for security.
    • Google (Google Workspace / Gmail) delivers our email. Inquiries, confirmations, and newsletter messages are sent through and stored in our Google Workspace mailbox.
    • Google Analytics 4 for website statistics, only with your consent (section 8).
    • Supabase (database hosted in an EU data region) may store inquiry records and newsletter subscriptions in a database so that we can number, track, and answer them.
    • Anthropic provides the AI model behind the website assistant. Messages you type in the chat are sent to Anthropic's API to generate a reply and are handled under Anthropic's commercial terms, which do not permit training on that data.

    We may also use a webhook to forward new inquiries into our own project-management tools.

    We do not sell, trade, or rent your personal data to third parties for their marketing purposes.

    10. International Data Transfers

    As a European web design agency, our operations are based in Europe. Your data is primarily stored and processed within the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or our services. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

    12. Contact Us

    If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

    • Legal entity: "3D OPEN DESIGN" Ltd (3 Д ОУПЪН ДИЗАЙН ЕООД), a single-member limited liability company registered in Bulgaria
    • UIC (BULSTAT): 207665677
    • Registered office: 1 Chukar Str., Vitosha district, 1616 Sofia, Bulgaria
    • Email: info@3dopendesign.com
    • Phone: +359 889536699

    You also have the right to lodge a complaint with your local data protection authority within the European Union.