Privacy Policy

Last updated: 10 October 2026

This policy explains what personal data intransfers.com collects, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Bulgarian law.

1. Data controller

RANTISI LTD, UIC (ЕИК) 208400728, VAT BG208400728, registered in Sofia, Bulgaria.
Email for all privacy questions: office@intransfers.com

2. Data we collect and why

Browsing the site

Our web server records technical data such as your IP address, browser type, the page requested and the time. We use it to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Server logs are kept by our hosting provider for a short period, normally no longer than 30 days.

Analytics (only with your consent)

If you click Accept in the cookie banner, we use Google Analytics to count visits and see which pages are useful. Google Analytics sets cookies and processes your IP address, device and browser data and pages visited. If you click Reject, no analytics cookies are set. Legal basis: your consent (Art. 6(1)(a) GDPR). You can change your choice at any time with the Cookie settings link at the bottom of every page. See our Cookie Policy for details.

Contact form

When you send us a message we receive your name, email address, subject and message. We use them only to reply. Legal basis: our legitimate interest in answering enquiries, or steps before a contract (Art. 6(1)(b) and (f) GDPR). We keep messages for up to 24 months, or longer if needed for an ongoing business relationship or legal claim.

“Add your company” form and advertisers

When a company submits a listing or buys a paid plan we receive company details, billing details (via Stripe) and the details of a contact person (name, phone, WhatsApp, email). Business details are published in the listing. The contact person’s name is not published unless it is part of the company name or you ask us to. Legal basis: performing our agreement with you (Art. 6(1)(b) GDPR) and, for invoices, our legal obligations under Bulgarian accounting and VAT law (Art. 6(1)(c) GDPR). Rejected submissions are deleted within 6 months; accounting records are kept for the period required by law (currently 10 years).

Spam protection

To stop abuse of our forms we store a one-way hash of your IP address in a counter that is deleted automatically after one hour.

Companies listed in the directory

Listings contain business contact details (company name, address, phone, email, website and prices) taken from the company’s own public website or sent to us by the company. Where a company is run by a sole trader, some of this can be personal data. Legal basis: our legitimate interest, and that of travellers, in a public directory of transfer services (Art. 6(1)(f) GDPR). You can object at any time and we will correct or remove the listing (see section 6). We keep a listing while the company is active.

3. Who receives the data

  • Hostinger – our web hosting and email provider, which stores the site and form data on our behalf.
  • Google – Google Analytics (only after consent) and Google Fonts, which loads the font used on the site; when the font loads, your browser sends your IP address to Google.
  • Stripe (Stripe Payments Europe Ltd, Ireland) – processes payments for paid plans. Card details go directly to Stripe; we never see or store them. Stripe receives the billing name, email, address and VAT number and acts as an independent controller for its own fraud-prevention and legal duties.
  • Accountants, banks and authorities – only for invoices and payments from advertisers, or when the law requires it.

We do not sell personal data and we do not pass your enquiries to the transfer companies. When you call, email or message a listed company, you deal with that company directly and its own privacy policy applies.

4. Transfers outside the EU

Google may process data in the United States. Google LLC is certified under the EU–US Data Privacy Framework, and Google also uses the European Commission’s Standard Contractual Clauses.

5. Cookies

We only use cookies that are strictly necessary, plus analytics cookies if you accept them. Full list: Cookie Policy.

6. Your rights

You have the right to:

  • access the personal data we hold about you and get a copy;
  • have wrong data corrected;
  • have your data deleted;
  • restrict processing, or receive your data in a portable format;
  • object to processing based on our legitimate interest, including your appearance in the directory;
  • withdraw consent at any time (this does not affect processing before the withdrawal).

To use any of these rights, email office@intransfers.com. We reply within one month. We may ask you to confirm your identity.

You can also complain to the Bulgarian data protection authority: Commission for Personal Data Protection (КЗЛД), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, www.cpdp.bg, or to the authority in the EU country where you live.

7. Security

The site uses HTTPS encryption, access to the admin area is restricted, and forms are protected against spam and abuse.

8. Children

The site is not aimed at children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy when our services or the law change. The date at the top shows the latest version.