Effective 11 September 2026
Privacy policy.
What we collect when you visit and when you write to us, why we process it, how long we keep it, and the rights you have over it.
Who we are
Guardian Holdings JSC, UIC 208613644, Simeonovsko Shose 33, fl. 3, Sofia, Bulgaria. Write to office@guardianholdingsjsc.com about anything on this page.
What this policy covers
This site, guardianholdingsjsc.com. It does not cover any separate agreement you sign with us, or any EU licensed investment intermediary that holds a separately managed account for you; their own privacy notice governs that account.
What we collect when you write to us
The name, email address, stated role and message you put into the contact form. Pressing Send delivers it to us from this page through Resend, our email delivery provider, and a copy of your message is emailed to the address you gave, so you have a record of what you sent. Your IP address is used to limit repeated submissions and, if a bot check is running on the form, to verify it; we do not store it. If the send fails, the form opens a draft in your own email client instead, and nothing reaches us until you send it yourself.
What we collect when you visit
This site runs Google Analytics 4. It sets the _ga and_ga_* cookies in your browser and sends the pages you view, your approximate location, and your device and browser to Google, which we use to see how the site is read. Cloudflare, which serves the site, records requests for security and performance under its own privacy policy; we keep no server logs of our own. Nothing else is stored on your device: the sound control keeps no memory between visits.
Why we process it, and on what basis
Your message: to answer it. The basis is your consent, which you give by ticking the box on the form (GDPR Art. 6(1)(a)); where your message concerns a mandate or an investment, it is also a step taken at your request before a contract (Art. 6(1)(b)). You may withdraw consent at any time by writing to us, and we then delete the correspondence unless a legal duty requires us to keep it.
Analytics: our legitimate interest in understanding how the site is used (Art. 6(1)(f)). You can prevent it by blocking cookies for this site in your browser, or with Google's opt-out browser add-on.
How long we keep it
Correspondence: 24 months from the last message in the exchange, then deleted, unless it leads to an agreement, in which case it is kept with that agreement. Analytics: Google keeps the data for up to 14 months; the_ga cookie expires after 2 years unless you delete it sooner.
Who receives it
Cloudflare, Inc. (hosting, the contact endpoint, rate limiting and, when it is switched on, the Turnstile bot check); Resend, Inc. (delivery of your message to us and of the copy to you); Apple Inc. (the iCloud mailbox that receives it); Google LLC (analytics). Each processes it on our instructions. Nobody else. We do not sell it, and we do not use it for advertising.
International transfers
Cloudflare, Resend, Apple and Google are United States companies and may process data there. All four are certified under the EU–US Data Privacy Framework, which the European Commission recognises as adequate protection. Write to us for a copy of the safeguards.
Your rights
You may ask for a copy of what we hold, ask us to correct or erase it, object to processing, ask us to restrict it, or withdraw your consent. Write tooffice@guardianholdingsjsc.com. You may also complain to the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, cpdp.bg.
Changes to this policy
We date and publish any change on this page. This version took effect on 11 September 2026.