Privacy Policy

We are a small family business, not a data company. This page explains, in plain language, exactly what happens to your details when you use this website. If anything here is unclear, or you want your data removed, email Sonny and it gets done.

Who we are

Yulson Homes is an estate agency in Palamartsa, Popovo, Targovishte Region, Bulgaria, run by Sonny Edwards. We decide what happens to the personal data collected through this website, which makes us the data controller for it.

Email: sonny@yulsonhomes.com
Phone: +44 7725 103356
Address: Palamartsa, Popovo, Targovishte Region, Bulgaria

What we collect, and why

When you send us a message

The contact and enquiry forms ask for your name, your email address and your message. If you started from a property page, we also record which property you were looking at. All of that is saved in our database and emailed straight to Sonny so he can reply to you.

Our lawful basis is that you asked us to do something. Answering an enquiry about a house is a step taken at your request, and we have a legitimate interest in keeping a record of what was asked and what we answered.

When you ask us to email you a property report

We save your name and email address, which property you asked about, and a link to the report we sent you. We also record the exact wording of the permission you agreed to, the date, and the IP address the request came from. That last part is our proof that the sign-up was real and not someone typing in your address. The report and a PDF version are then emailed to you.

The report itself is sent because you asked for it. If you also tick the box to hear about new properties, that extra permission is consent, and you can take it back at any time.

When you email yourself your saved properties

The saved list itself never leaves your browser, and we cannot see it. If you ask us to email it to you, we save your email address, the language you were reading the site in, the exact sentence you agreed to, and the IP address the request came from, and we look up the properties you saved so the email can describe them. That email is sent because you asked for it. Ticking the separate box for the Friday email is a second, optional permission that you can take back at any time.

When you sign up for new property emails

We save your name, your email address, the language you were reading the site in, the exact sentence you agreed to, and the IP address your sign-up came from. Same reason as above: it is how we can show the sign-up was genuine if anyone ever asks.

Our lawful basis here is your consent. Every email we send has a one-click unsubscribe link at the bottom. One click and you are off the list. Nothing else happens, and you do not have to explain yourself.

When you browse the site

We record how the site is used so we can make it better. Each record holds the page you were on, which listing it was, what kind of thing happened (a page view, a search, a click, how long you stayed), the language you were reading in, the page you arrived from, a random session number that lasts until you close the tab, and the country, region, town and device type that our host works out from your connection.

We do not store your IP address in those records, and there is nothing in them that says who you are: we can see that someone in Manchester looked at four houses, never that it was you. Our lawful basis is our legitimate interest in knowing which listings people want to see, which is what tells us what to go and find. Your browser settings are where you switch this off: block cookies and site data for this site, or use any of the usual tracker-blocking tools, and the counting stops.

Keeping the forms from being abused

Our servers briefly hold the IP address of anyone posting a form, so that a bot cannot fire off a thousand enquiries. It is used as a counter and it expires within the hour. Our legitimate interest is keeping the site working.

Yulson Portal: buying or selling a house through us

If you buy or sell through Yulson Homes, we open a file for the sale and you can follow it in Yulson Portal. This is where the most sensitive information on this website lives, so it gets its own section.

What goes into your file

Your name, email address and phone number; your answers to the short questionnaire when you first sign in; the documents you upload or that we upload for you, which can include identity documents (a passport or ID card), a power of attorney, company papers, the preliminary contract and, if you pay in instalments, a screenshot or photo as proof of a payment; your agreement to the contract text; and a log of every action in the portal, with the date, the time and the IP address it came from. That log is how we can answer, afterwards, who opened or uploaded what.

Our lawful basis is the contract between us: none of this can be done without it. For identity documents there is also a legal reason, because the Bulgarian notary and the anti money laundering rules require them, and we have a legitimate interest in keeping the log.

Who can see it

Sonny, Charlotte and Milan at Yulson Homes. A helper we have put on your file, who sees only the parts we have given her and never your contact details. The notary or lawyer we add to your sale, who sees only the documents released to them. And the other party to the sale sees only what the process needs them to see: a seller never sees your passport, and you never see theirs.

Where the documents are kept

Uploaded documents are stored with Cloudflare, in a private store in the European Union that has no public address: a document can only be fetched through our own server, after we have checked who is asking. Nothing in the file name or the storage path says who you are. When a contract goes out for electronic signature it is sent to Documenso, which handles the signing pages and the reminders; they receive the contract, your name and your email address.

How long, and how to have it erased

Your documents stay while the sale is running. Once the sale is completed or cancelled we can erase every stored document from our systems while keeping the record of the sale itself; we do this by hand, on request or when we close the file, and we do not yet run an automatic timetable. Email sonny@yulsonhomes.com and ask, and we will erase them and confirm back to you. The notary keeps their own copies under Bulgarian law, so nothing about your purchase depends on us holding yours.

Cookies and browser storage

Two cookies remember your language and your currency, because the site cannot show you the right prices in the right language without them. Your browser also stores your saved properties and your recently viewed listings on your own device. Our Cookie Policy lists every single one.

Who else sees your data

We do not sell your data and we never share it for anyone else's marketing. We do use other companies to run the website, and they handle data on our behalf:

• Vercel hosts the website. Every page you load passes through their servers, so they see your IP address and your browser. They also work out your rough location from it, which is how the site guesses your language. Vercel Web Analytics counts visits for us as well, without a cookie.
• Supabase runs the database where the enquiries, the mailing list and the usage records are stored.
• Resend sends our email. Your name, your email address and the contents of the message pass through them.
• Cloudflare stores our property photos (R2) and the video on our homepage (Stream). Your browser fetches those directly, so Cloudflare sees your IP address. The documents in Yulson Portal sit in a separate, private Cloudflare store that only our server can reach.
• Documenso handles electronic signatures on the contracts in Yulson Portal. They receive the contract, and the name and email address of each person who has to sign.
• YouTube, which is Google, serves our video tours and their thumbnails. We use the no-cookie version of the player, but once you press play you are dealing with Google and their privacy policy applies.
• OpenStreetMap supplies our map tiles, so their servers see your IP address when a map loads. We also use their Nominatim service, and the OSRM routing service, to look up places and driving distances. Those two are called by our server, not by your browser, so they see us rather than you.
• Upstash holds the short-lived counters that stop the forms being flooded. Your IP address sits in one of those counters for up to an hour and is then gone.
• Google Gemini translates property descriptions when you press the translate button. Only the description text is sent, never anything about you.
• Google Analytics is only present if we have switched it on with a measurement ID. When it is on, it sets its own cookies and sends your IP address to Google. Blocking cookies for this site, or a tracker blocker, keeps it out.

We may also hand over data if the law requires it, for example to a court or the tax authorities.

Data processed outside Bulgaria

Most of the companies above are based in the United States or run servers there, so your data is processed outside Bulgaria and sometimes outside the European Union. Their published data processing terms cover those transfers with the standard contractual clauses approved by the European Commission, which is the usual legal route. We chose well-known suppliers on purpose, so there is somebody accountable rather than a cheap unknown.

How long we keep it

We will be straight with you: we do not run an automatic deletion timetable. Enquiries, mailing list entries and usage records are kept for as long as they are useful to the business, and no longer. In practice that means an enquiry stays while there is any chance of it turning into a sale or a follow-up question, and a mailing list entry stays until you unsubscribe. Documents in Yulson Portal are covered in their own section above: kept while the sale runs, erased by hand once it is closed or when you ask.

If you would rather not wait for us to decide, email sonny@yulsonhomes.com and ask us to delete your details. We will do it and confirm back to you. The language and currency cookies expire on their own after a year.

Your rights

Under the GDPR you can ask us to:

• Tell you what personal data we hold about you, and give you a copy.
• Correct anything that is wrong.
• Delete your data.
• Stop using it for a while, if you are disputing something.
• Hand your data over in a portable format.
• Stop using it for direct marketing. This one is absolute: object and we stop, no questions asked.
• Withdraw consent you have given, which stops any future use that relied on it.

Email sonny@yulsonhomes.com and say what you want. There is no form to fill in and no charge. We aim to sort it within a month.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, cpdp.bg. If you live in another EU country you may complain to your own regulator instead.

Changes to this policy

If we change how the website handles data, we change this page and update the date at the top. We do not quietly rewrite it.