Privacy Policy

We are a small family business, not a data company. This page explains, in plain language, exactly what happens to your details when you use this website. If anything here is unclear, or you want your data removed, email Sonny and it gets done.

Who we are

Yulson Homes is an estate agency in Palamartsa, Popovo, Targovishte Region, Bulgaria, run by Sonny Edwards. We decide what happens to the personal data collected through this website, which makes us the data controller for it.

Email: sonny@yulsonhomes.com
Phone: +44 7725 103356
Address: Palamartsa, Popovo, Targovishte Region, Bulgaria

What we collect, and why

When you send us a message

The contact and enquiry forms ask for your name, your email address and your message. If you started from a property page, we also record which property you were looking at. All of that is saved in our database and emailed straight to Sonny so he can reply to you.

Our lawful basis is that you asked us to do something. Answering an enquiry about a house is a step taken at your request, and we have a legitimate interest in keeping a record of what was asked and what we answered.

When you ask us to email you a property report

We save your name and email address, which property you asked about, and a link to the report we sent you. We also record the exact wording of the permission you agreed to, the date, and the IP address the request came from. That last part is our proof that the sign-up was real and not someone typing in your address. The report and a PDF version are then emailed to you.

The report itself is sent because you asked for it. If you also tick the box to hear about new properties, that extra permission is consent, and you can take it back at any time.

When you sign up for new property emails

We save your name, your email address, the language you were reading the site in, the exact sentence you agreed to, and the IP address your sign-up came from. Same reason as above: it is how we can show the sign-up was genuine if anyone ever asks.

Our lawful basis here is your consent. Every email we send has a one-click unsubscribe link at the bottom. One click and you are off the list. Nothing else happens, and you do not have to explain yourself.

When you browse the site

We record how the site is used so we can make it better. Each record holds the page you were on, which listing it was, what kind of thing happened (a page view, a search, a click, how long you stayed), the language you were reading in, the page you arrived from, a random session number that lasts until you close the tab, and the country, region, town and device type that our host works out from your connection.

We do not store your IP address in those records, and there is nothing in them that says who you are: we can see that someone in Manchester looked at four houses, never that it was you. Our lawful basis is our legitimate interest in knowing which listings people want to see, which is what tells us what to go and find. Your browser settings are where you switch this off: block cookies and site data for this site, or use any of the usual tracker-blocking tools, and the counting stops.

Keeping the forms from being abused

Our servers briefly hold the IP address of anyone posting a form, so that a bot cannot fire off a thousand enquiries. It is used as a counter and it expires within the hour. Our legitimate interest is keeping the site working.

Cookies and browser storage

Two cookies remember your language and your currency, because the site cannot show you the right prices in the right language without them. Your browser also stores your saved properties and your recently viewed listings on your own device. Our Cookie Policy lists every single one.

Who else sees your data

We do not sell your data and we never share it for anyone else's marketing. We do use other companies to run the website, and they handle data on our behalf:

• Vercel hosts the website. Every page you load passes through their servers, so they see your IP address and your browser. They also work out your rough location from it, which is how the site guesses your language. Vercel Web Analytics counts visits for us as well, without a cookie.
• Supabase runs the database where the enquiries, the mailing list and the usage records are stored.
• Resend sends our email. Your name, your email address and the contents of the message pass through them.
• Cloudflare stores our property photos (R2) and the video on our homepage (Stream). Your browser fetches those directly, so Cloudflare sees your IP address.
• YouTube, which is Google, serves our video tours and their thumbnails. We use the no-cookie version of the player, but once you press play you are dealing with Google and their privacy policy applies.
• OpenStreetMap supplies our map tiles, so their servers see your IP address when a map loads. We also use their Nominatim service, and the OSRM routing service, to look up places and driving distances. Those two are called by our server, not by your browser, so they see us rather than you.
• Upstash holds the short-lived counters that stop the forms being flooded. Your IP address sits in one of those counters for up to an hour and is then gone.
• Google Gemini translates property descriptions when you press the translate button. Only the description text is sent, never anything about you.
• Google Analytics is only present if we have switched it on with a measurement ID. When it is on, it sets its own cookies and sends your IP address to Google. Blocking cookies for this site, or a tracker blocker, keeps it out.

We may also hand over data if the law requires it, for example to a court or the tax authorities.

Data processed outside Bulgaria

Most of the companies above are based in the United States or run servers there, so your data is processed outside Bulgaria and sometimes outside the European Union. Their published data processing terms cover those transfers with the standard contractual clauses approved by the European Commission, which is the usual legal route. We chose well-known suppliers on purpose, so there is somebody accountable rather than a cheap unknown.

How long we keep it

We will be straight with you: we do not run an automatic deletion timetable. Enquiries, mailing list entries and usage records are kept for as long as they are useful to the business, and no longer. In practice that means an enquiry stays while there is any chance of it turning into a sale or a follow-up question, and a mailing list entry stays until you unsubscribe.

If you would rather not wait for us to decide, email sonny@yulsonhomes.com and ask us to delete your details. We will do it and confirm back to you. The language and currency cookies expire on their own after a year.

Your rights

Under the GDPR you can ask us to:

• Tell you what personal data we hold about you, and give you a copy.
• Correct anything that is wrong.
• Delete your data.
• Stop using it for a while, if you are disputing something.
• Hand your data over in a portable format.
• Stop using it for direct marketing. This one is absolute: object and we stop, no questions asked.
• Withdraw consent you have given, which stops any future use that relied on it.

Email sonny@yulsonhomes.com and say what you want. There is no form to fill in and no charge. We aim to sort it within a month.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Bulgarian supervisory authority, the Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, cpdp.bg. If you live in another EU country you may complain to your own regulator instead.

Changes to this policy

If we change how the website handles data, we change this page and update the date at the top. We do not quietly rewrite it.