Privacy notice
Last updated: 9 October 2026
Who we are
The controller of your personal data is Лекс Хоум ЕООД (Lex Home EOOD), UIC (EIK) 206523671, registered address: гр. Варна 9000, р-н Одесос, ул. Иван Вазов 4, ет. 3, ап. 6, Bulgaria, trading as LexHome. You can reach us at Lexhome.bg@gmail.com or +359897915273.
What we collect, why, and on what basis
| When | Data | Why | Legal basis (GDPR) |
|---|---|---|---|
| You send a booking request | Name, email, phone (optional), message (optional), stay, dates, number of guests | To answer your request, confirm or decline it, and manage your stay | Steps at your request before a contract, and performing the contract (Art. 6(1)(b)) |
| You use the contact form | Name, email, stay (optional), message | To answer your question | Steps at your request before a contract (Art. 6(1)(b)); our legitimate interest in answering enquiries (Art. 6(1)(f)) |
| After a confirmed booking | The booking details above | Accounting and tax records, and registering guests as the Bulgarian tourism rules require | Legal obligation (Art. 6(1)(c)) |
| You visit the website | Your IP address and request details, handled briefly by our hosting provider | To deliver the site and keep it secure | Legitimate interest (Art. 6(1)(f)) |
Giving us your name, email and dates is necessary for us to handle a booking. Without them we cannot answer your request.
Cookies and tracking
We do not use advertising, analytics or tracking cookies, so there is no cookie banner. The site remembers your light or dark choice in your browser (localStorage), only on your device. The fonts are served from our own server, not from Google. If you click the WhatsApp button, WhatsApp’s own privacy policy applies from then on.
How long we keep your data
- Declined requests: 90 days, then deleted.
- Confirmed bookings: 5 years after your check-out date, then deleted. We keep them this long because of accounting and tax record rules.
- Contact form messages and emails: kept in our mailbox only as long as needed to answer you and for any follow-up, and no longer than the periods above.
Who receives your data
- Cloudflare, Inc.: hosts the website and the database where booking requests are stored.
- Resend: sends the emails (for example, the notice to us when you send a request).
- Google (Gmail): our mailbox, where those emails arrive.
- NoBeds: our channel manager receives only blocked dates for each stay. It does not receive guest names or contact details from this website.
- Authorities, such as tax or tourism authorities, when the law requires it.
We do not sell your data and we do not use it for marketing. If we ever want to send you marketing emails, we will ask for your separate consent first.
Transfers outside the EU
Cloudflare, Resend and Google are based in the United States. Where your data is processed there, the transfer relies on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses, together with the data processing agreements we have with these providers.
Your rights
You have the right to ask us for access to your data, to correct it, to delete it, to restrict or object to how we use it, and to receive a copy of it in a common format. Write to Lexhome.bg@gmail.com and we will answer within one month. Some data we must keep by law (see the retention periods above).
You also have the right to complain to the Bulgarian data protection authority: Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.
Changes
If we change this notice, the new version will appear on this page with a new date.