How we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Last updated: March 2026
This website, ljutzkanov.com, is operated by Stefan Ljutzkanov. For the purposes of the UK GDPR and the Data Protection Act 2018, Stefan Ljutzkanov is the data controller responsible for your personal data.
Data protection enquiries
gdpr@ljutzkanov.comWe collect and process different types of personal data depending on how you interact with this website:
Under the UK GDPR, we must have a lawful basis for processing your personal data. The bases we rely on are:
Responding to contact form enquiries
Necessary to take steps at your request prior to entering a contract
Sending confirmation emails
Necessary to fulfil your enquiry
Newsletter communications
You actively subscribe and can withdraw at any time
AI chatbot interactions
You choose to initiate a conversation
Website analytics
To understand website usage and improve content and performance
Legal compliance
Where we are required by law to retain or disclose data
We share your personal data with the following third-party service providers who process data on our behalf. Each processor is bound by data processing agreements.
Some of our third-party processors are based in the United States. Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place:
Transfers to countries deemed adequate by the UK Secretary of State
SCCs approved by the ICO under the UK International Data Transfer Agreement (IDTA)
Processors certified under the EU-US Data Privacy Framework, as recognised under UK extension
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected.
Contact form submissions
24 months
From submission, or until the enquiry is resolved
Newsletter subscriptions
Until unsubscribe
Deleted promptly after you unsubscribe
AI chatbot conversations
90 days
Automatically deleted after retention period
Analytics data
26 months
Aggregated and anonymised where possible
After the retention period expires, your data is securely deleted or anonymised so that it can no longer be associated with you.
This website uses cookies to ensure it functions correctly and to understand how visitors interact with it:
Required for the website to operate (e.g. session management, security). These do not require consent.
Used to collect anonymised usage data via Vercel Analytics. Privacy-focused with no cross-site tracking.
You can control or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.
Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete personal data.
Ask us to delete your personal data where there is no compelling reason to continue processing.
Ask us to limit how we process your data in certain circumstances.
Request your data in a structured, commonly used, and machine-readable format.
Object to processing based on legitimate interest. We will stop unless we demonstrate compelling grounds.
Where processing is based on consent (e.g. newsletter, chatbot), withdraw at any time without affecting prior lawfulness.
To exercise any of these rights, please email gdpr@ljutzkanov.com. We will respond within one month. In complex cases, we may extend this by a further two months and will inform you if necessary.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
Website
ico.org.uk/make-a-complaintTelephone
0303 123 1113
We would appreciate the opportunity to address your concerns before you contact the ICO — please reach out to us first at gdpr@ljutzkanov.com.
This website may contain links to external websites that are not operated by us. We have no control over, and accept no responsibility for, the content, privacy policies, or practices of third-party websites. We encourage you to review the privacy policy of every website you visit.
This website is not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at gdpr@ljutzkanov.com and we will take steps to delete such data.
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
If you have any questions about this privacy policy, your personal data, or wish to exercise your data protection rights, please contact:
Stefan Ljutzkanov
gdpr@ljutzkanov.com