STK Agency
Back to stk-agency.tech
Legal

Privacy Policy

Last updated: 12 April 2026

This policy and our Terms of Service are always available in the footer of our website.

1. Who We Are

STK Agency is a growth marketing and creative production service operated by Serafim Krastev, based in Bulgaria. We operate the website stk-agency.tech.

We are not yet registered as a legal entity. Until formal registration is complete, Serafim Krastev is personally responsible for the processing of your data.

If you have any questions about how we handle your data, contact us at: hello@stk-agency.tech

2. What Data We Collect

2.1 Data you give us directly

When you fill in our contact form or sign up for our newsletter, we collect:

  • Your name
  • Your email address
  • Any message or details you choose to include

2.2 Data we collect automatically

When you visit our website, we collect basic usage data through PostHog, including:

  • Pages visited and time spent
  • Clicks and interactions on the page
  • Device type, browser, and operating system
  • Approximate location derived from your IP address
  • Referral source (how you found us)

Your IP address may also be processed by Vercel, our hosting provider, as part of standard server logging.

3. How We Use Your Data

We use the data we collect for the following purposes:

  • To respond to your enquiry and arrange a discovery call
  • To send you our newsletter if you have opted in and confirmed via email
  • To understand how visitors use our website so we can improve it
  • To maintain records of client relationships (added manually to Attio after a contract is signed)

4. Legal Basis for Processing (GDPR)

We process your data on the following legal grounds:

  • Consent: for newsletter subscriptions and analytics cookies
  • Legitimate interest: for responding to enquiries and improving our website
  • Contract: for managing client data once a working relationship begins

5. Newsletter and Email

If you sign up for our newsletter, we use a double opt-in process. This means you will receive a confirmation email and must click a link before we add you to our mailing list. We use Resend to send emails.

You can unsubscribe at any time using the link at the bottom of any newsletter email. We will remove you from the list within 7 days of your request.

6. Third-Party Services

We use the following third-party tools that may process your data:

  • PostHog (posthog.com): website analytics and event tracking
  • Resend (resend.com): transactional and newsletter email delivery
  • Vercel (vercel.com): website hosting
  • Attio (attio.com): CRM, used only for confirmed clients, data entered manually

Each of these providers has its own privacy policy and data processing terms. We recommend reviewing them if you have specific concerns.

7. Data Retention

We retain your data for as long as necessary to fulfil the purpose for which it was collected:

  • Contact form enquiries: up to 12 months if no contract follows
  • Client data: for the duration of the working relationship plus 3 years
  • Newsletter subscribers: until you unsubscribe
  • Analytics data: as configured in PostHog, typically 12 months

8. Your Rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Withdraw consent at any time (for newsletter or analytics)
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, email us at hello@stk-agency.tech. We will respond within 30 days.

As we are based in Bulgaria, the relevant supervisory authority is the Commission for Personal Data Protection (CPDP): www.cpdp.bg

9. Cookies

We use cookies through PostHog to track website behaviour. On your first visit, you will be asked to accept or decline analytics cookies via the banner at the bottom of the page. You can change your preferences at any time through your browser settings.

We do not use advertising cookies or sell your data to third parties.

10. Data Security

We take reasonable technical measures to protect your data. Our website is served over HTTPS. Access to contact form submissions and client records is restricted to Serafim Krastev and Stefan Kolev.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. We recommend checking back periodically.

12. Contact

For any questions or data requests: hello@stk-agency.tech