top of page

Privacy Policy

PRIVACY POLICY

Last Updated: 28 September 2026

Swift Tech Group LTD (“Swift Tech Group”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit our website, contact us, use our services, communicate with us, or otherwise interact with Swift Tech Group LTD.

We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Bulgarian data protection law.

This Privacy Policy should be read together with our Terms & Conditions and Cookie Policy.

1. DATA CONTROLLER

For personal data processed by us for our own business, website, communication, marketing, contractual, and administrative purposes, the data controller is:

Swift Tech Group LTD
Company Registration Number: 208721577
Address: Knyaz Boris I 97, Sofia, Bulgaria 1000
Website: www.swiftechltd.com
Email: contact@swiftechltd.com

Unless otherwise stated, Swift Tech Group is the controller of personal data collected directly through our website and through our business communications.

Where we process personal data on behalf of one of our clients as part of a digital marketing service, the relevant client may be the data controller and Swift Tech Group may act as a data processor. In such circumstances, we process personal data according to the client's documented instructions and the applicable contractual arrangements. The distinction between controller and processor depends on who determines the purposes and means of the relevant processing.

2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect different categories of personal data.

2.1 Information you provide directly

This may include:

  • Full name;

  • Company name;

  • Email address;

  • Telephone number;

  • Business address;

  • Information contained in messages or enquiries;

  • Information you provide when requesting a proposal or quotation;

  • Information provided during consultations or meetings;

  • Billing and invoicing information;

  • Information necessary to provide our services;

  • Any other information you voluntarily provide to us.

2.2 Information collected automatically

When you visit our website, certain technical information may be collected automatically, depending on your browser, device, settings, and our use of cookies or similar technologies.

This may include:

  • IP address;

  • Browser type and version;

  • Device type;

  • Operating system;

  • Approximate geographic location;

  • Referring website;

  • Pages visited;

  • Date and time of visits;

  • Website interaction data;

  • Technical information relating to website performance and security.

Certain information may constitute personal data under applicable law.

For more information about cookies and similar technologies, please refer to our separate Cookie Policy.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

  • Directly from you when you contact us;

  • When you submit an enquiry through our website;

  • When you request information about our services;

  • When you communicate with us by email, telephone, social media, or other channels;

  • When you enter into a contract with us;

  • During the delivery and management of our services;

  • Through website cookies and analytics technologies, where applicable;

  • From publicly available business sources;

  • From our clients where necessary to provide contracted services;

  • From third-party platforms or service providers used in connection with our business operations.

Where personal data is obtained from a source other than the individual concerned, applicable transparency requirements will be observed.

4. PURPOSES OF PROCESSING

We may process personal data for the following purposes:

4.1 Responding to enquiries

We may use your contact information to respond to enquiries, requests, questions, consultations, and requests for proposals.

4.2 Providing our services

We may process personal data where necessary to provide, manage, monitor, and improve our digital marketing services, including:

  • SEO;

  • PPC and paid advertising;

  • Social media marketing;

  • Content marketing;

  • Website design and development;

  • Property marketing;

  • Short-term rental marketing;

  • Digital travel guides;

  • Personalised travel planning;

  • Digital concierge services;

  • Other services agreed with our clients.

4.3 Managing client relationships

We may use personal data to manage client accounts, communications, projects, approvals, contracts, invoices, payments, and other aspects of our business relationship.

4.4 Business administration

We may process personal data for accounting, invoicing, record keeping, internal administration, legal compliance, security, fraud prevention, and protection of our legal rights.

4.5 Website operation and improvement

We may use technical and analytical information to operate, maintain, secure, analyse, and improve our website and digital services.

4.6 Marketing communications

Where legally permitted, we may use contact information to send information about our services, business updates, offers, or other marketing communications.

Where consent is required, we will obtain it before sending the relevant communications.

You may unsubscribe from marketing communications at any time by following the unsubscribe instructions contained in the communication or by contacting us.

4.7 Legal compliance

We may process personal data where necessary to comply with legal obligations applicable to Swift Tech Group, including accounting, tax, regulatory, and other legal requirements.

4.8 Protection of our business

We may process personal data where necessary to prevent fraud, misuse, unauthorised access, security incidents, or other unlawful activity, and to establish, exercise, or defend legal claims.

5. LEGAL BASES FOR PROCESSING

Depending on the circumstances, we may rely on one or more of the following legal bases under Article 6 of the GDPR:

Contract

Processing may be necessary to enter into or perform a contract with you, including providing services you have requested.

Legal obligation

Processing may be necessary for compliance with a legal obligation to which Swift Tech Group is subject.

Legitimate interests

We may process personal data where necessary for our legitimate business interests, provided that those interests are not overridden by your fundamental rights and freedoms.

Such interests may include operating and improving our business, communicating with clients and prospective clients, maintaining website security, preventing fraud, managing business relationships, and defending legal claims.

Consent

Where required by law, we will rely on your consent for specific processing activities.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

The appropriate legal basis depends on the specific processing activity. GDPR transparency requirements include informing individuals about the applicable purpose and legal basis for processing.

6. CLIENT DATA AND DIGITAL MARKETING SERVICES

As a digital marketing agency, we may receive or access personal data belonging to our clients' customers, website visitors, leads, tenants, guests, users, or other individuals.

For example, when providing marketing, website, analytics, advertising, social media, property marketing, or related services, we may process information such as:

  • Names;

  • Email addresses;

  • Telephone numbers;

  • Enquiry information;

  • Website interaction data;

  • Advertising and campaign data;

  • Customer or lead information;

  • Booking or enquiry information;

  • Social media information;

  • Other information made available to us by or on behalf of the client.

In these circumstances, the client will generally determine the purposes for which the personal data is processed, while Swift Tech Group may process that information on the client's behalf.

Where required, the parties will enter into an appropriate Data Processing Agreement (“DPA”) setting out the relevant processing activities, responsibilities, security requirements, confidentiality obligations, and other applicable requirements.

Where we act as a processor, we will process personal data only in accordance with the applicable client's documented instructions and contractual arrangements, subject to applicable law.

7. THIRD-PARTY SERVICES AND PLATFORMS

In providing our services, we may use third-party technology providers and platforms, including providers of:

  • Website hosting;

  • Domain services;

  • Email and communication tools;

  • Analytics;

  • Customer relationship management systems;

  • Advertising platforms;

  • Social media platforms;

  • Website development tools;

  • Cloud storage;

  • Project management software;

  • Payment and accounting services;

  • Cybersecurity and technical infrastructure.

Depending on the particular service, these providers may process personal data on our behalf or may independently process personal data under their own privacy policies.

Where appropriate, we take reasonable steps to ensure that relevant service providers provide appropriate safeguards for personal data.

8. ADVERTISING AND ANALYTICS

As a digital marketing agency, our website and our clients' campaigns may involve analytics, advertising, tracking, remarketing, conversion measurement, and similar technologies.

Depending on the configuration of the relevant website or campaign, technologies provided by third parties may collect information about users and their interactions with websites or advertisements.

Such technologies may include analytics and advertising tools operated by third-party platforms.

Where applicable, the use of non-essential cookies or similar technologies will be managed in accordance with our Cookie Policy and applicable consent requirements.

For client campaigns, the applicable client may separately determine the purposes and methods of certain data processing activities.

9. COOKIES

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

  • Essential website functionality;

  • Security;

  • Website performance;

  • Analytics;

  • Understanding website usage;

  • Advertising and marketing;

  • Remembering preferences.

Where required, non-essential cookies will only be placed or used after obtaining the appropriate consent.

For detailed information about the cookies we use, their purposes, and how you can manage your preferences, please see our Cookie Policy.

10. DATA SHARING AND DISCLOSURE

We do not sell personal data.

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Employees and authorised personnel;

  • Professional advisers;

  • Accountants and auditors;

  • Legal advisers;

  • IT and technology service providers;

  • Hosting providers;

  • Analytics providers;

  • Advertising and marketing platforms;

  • Communication and email service providers;

  • Payment and financial service providers;

  • Government authorities or regulators where legally required;

  • Other service providers necessary to operate our business or deliver contracted services.

We seek to ensure that personal data is disclosed only where appropriate and that relevant recipients are subject to suitable confidentiality and data protection obligations where required.

11. INTERNATIONAL DATA TRANSFERS

Some of our technology providers, advertising platforms, social media platforms, or other service providers may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection law and that an appropriate legal transfer mechanism or safeguard is in place where required.

The GDPR requires transparency regarding whether personal data is transferred outside the EU and the safeguards applicable to such transfers.

12. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

  • The nature of the relationship with you;

  • The purpose for which the information was collected;

  • Whether there is an ongoing contractual relationship;

  • Legal, accounting, tax, or regulatory requirements;

  • The need to establish, exercise, or defend legal claims;

  • Legitimate business requirements.

When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it, subject to applicable legal and operational requirements.

13. DATA SECURITY

We take reasonable technical and organisational measures designed to protect personal data against:

  • Unauthorised access;

  • Unauthorised disclosure;

  • Accidental loss;

  • Destruction;

  • Alteration;

  • Unlawful processing;

  • Other security threats.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

Accordingly, while we take appropriate precautions, we cannot guarantee absolute security of personal data transmitted over the internet.

Security, confidentiality, data minimisation, and accountability are among the core principles of GDPR-compliant processing.

14. YOUR DATA PROTECTION RIGHTS

Subject to applicable legal conditions and limitations, you may have the following rights:

Right of access

You may request confirmation as to whether we process personal data concerning you and request access to that data.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

In certain circumstances, you may request deletion of your personal data.

Right to restriction

In certain circumstances, you may request that processing of your personal data be restricted.

Right to object

You may object to certain processing activities, including processing based on legitimate interests and certain direct marketing activities.

Right to data portability

Where applicable, you may request to receive certain personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Rights relating to automated decision-making

Where applicable, you may have rights concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

These rights are subject to the conditions and exceptions established by applicable data protection law. The European Commission describes these rights, including access, rectification, erasure, restriction, portability, objection, and rights relating to automated decision-making, in its GDPR guidance.

15. HOW TO EXERCISE YOUR RIGHTS

To exercise your data protection rights, please contact us at:

Email: contact@swiftechltd.com

Please provide sufficient information to allow us to identify you and understand the nature of your request.

We may need to verify your identity before processing certain requests in order to protect personal data from unauthorised disclosure.

We will handle requests in accordance with applicable data protection law.

16. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data has been processed unlawfully or that your data protection rights have been infringed, you may have the right to lodge a complaint with the competent supervisory authority.

For individuals in Bulgaria, the relevant supervisory authority is the Commission for Personal Data Protection (CPDP).

You may also have the right to lodge a complaint with the supervisory authority in the EU Member State where you live, work, or where you believe an infringement has occurred, subject to applicable law.

17. CHILDREN'S PRIVACY

Our website and professional services are primarily intended for businesses, professionals, property owners, property managers, guests, customers, and other adults.

We do not knowingly collect personal data from children through our website for purposes unrelated to the provision of services.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us so that we can review the matter and take appropriate action.

18. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, platforms, or services.

We are not responsible for the privacy practices, security, content, or policies of third-party websites.

When you visit a third-party website, you should review its privacy policy and terms before providing personal information.

19. SOCIAL MEDIA

We may maintain profiles or pages on third-party social media platforms.

If you interact with us through a social media platform, that platform may independently process your personal data according to its own terms and privacy policy.

Depending on the circumstances, Swift Tech Group and the relevant social media platform may have separate or joint responsibilities regarding particular processing activities.

20. AUTOMATED DECISION-MAKING AND PROFILING

We do not intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals through our website.

However, certain third-party advertising, analytics, or marketing platforms used by us or our clients may use automated processing, audience segmentation, or profiling as part of their services.

The specific processing performed by such platforms is governed by the relevant platform's own policies and, where applicable, the instructions of our client.

21. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in:

  • Our business;

  • Our services;

  • Technology;

  • Data processing activities;

  • Applicable legal or regulatory requirements.

The updated version will be published on this page with a revised “Last Updated” date.

Where required by applicable law, we will provide additional notice of material changes.

22. CONTACT US

If you have questions about this Privacy Policy, our processing of personal data, or your data protection rights, please contact us:

Swift Tech Group LTD
Company Registration Number: 208721577
Knyaz Boris I 97
Sofia, Bulgaria 1000

Email: contact@swiftechltd.com
Website: www.swiftechltd.com

We will endeavour to respond to legitimate privacy enquiries within the timeframe required by applicable law.

23. IMPORTANT NOTICE FOR CLIENTS

Where Swift Tech Group processes personal data on behalf of a client in connection with digital marketing, advertising, website development, property marketing, short-term rental marketing, analytics, or related services, this Privacy Policy does not replace any required Data Processing Agreement or other contractual data protection provisions between Swift Tech Group and that client.

The allocation of controller and processor responsibilities should be determined for each processing activity based on the actual roles of the parties and applicable law.

End of Privacy Policy

bottom of page