Privacy and Data Protection Policy
Privacy and Data Protection Policy
Last updated: 24 July 2026
Who we are
Star Capital operates the website www.star-capital.co. Questions concerning this privacy notice or the use of personal data may be sent to info@star-capital.co.
Information we may collect
The public website does not provide user registration, public comments or file uploads. We may receive personal data when you contact us directly by email, including your name, contact details, organisation, professional role and any information included in your message or attachments.
Our hosting, security and technical service providers may also process limited technical information required to deliver and protect the website, such as IP address, browser and device information, access time, requested pages, security events and diagnostic logs.
How we use personal data
- to respond to enquiries and communicate about potential or existing mandates;
- to take steps requested before entering into an agreement and to administer contractual relationships;
- to maintain the security, availability and technical operation of the website;
- to comply with legal, regulatory, accounting or professional obligations; and
- to establish, exercise or defend legal claims where necessary.
Depending on the circumstances, processing may be based on steps taken at your request before a contract, performance of a contract, compliance with legal obligations, consent where specifically requested, or our legitimate interests in operating the website, communicating with business contacts and protecting our systems.
Cookies and similar technologies
The website may use strictly necessary technical cookies or similar technologies for security, traffic management, caching and administrative login functions. We do not intentionally use the public website for behavioural advertising or user profiling. If non-essential analytics or marketing technologies are introduced, this notice and any required consent mechanism will be updated.
Sharing of information
Personal data may be shared only where relevant with hosting, security and IT providers, professional advisers, counterparties involved in a matter at your request, and competent public authorities where disclosure is required by law. We do not sell personal data.
Where a service provider processes information outside the European Economic Area, appropriate transfer safeguards will be used where required by applicable data-protection law.
Sources and accuracy of information
Most personal data is obtained directly from you when you send an enquiry, exchange correspondence or provide information in connection with a potential or existing mandate. Limited business contact information may also be received from colleagues, professional advisers, counterparties or publicly available professional sources where relevant to a legitimate business purpose. Please tell us if information you have provided becomes inaccurate or out of date so that reasonable steps can be taken to correct it.
Retention
We retain correspondence and mandate-related information only for as long as reasonably necessary for the relevant purpose and for applicable legal, regulatory, accounting and limitation periods. Technical and security logs are retained for limited periods determined by operational and security requirements.
Your rights
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability where applicable, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.
Requests may be sent to info@star-capital.co. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.
Additional information
Security and confidentiality
We use reasonable organisational and technical measures intended to protect personal data against unauthorised access, alteration, disclosure, loss or misuse. Access to enquiry and mandate-related information is limited according to role and need. No internet transmission or storage system can be guaranteed to be completely secure, so particularly sensitive information should not be sent by ordinary email unless an appropriate secure method has been agreed.
Automated decisions and children
The public website is not used to make decisions based solely on automated processing that produce legal or similarly significant effects. It is intended for professional and business audiences and is not directed to children. If we become aware that personal data has been provided by a child without an appropriate lawful basis, we will take reasonable steps to address it.
External links
The website may contain links to third-party websites or services. Their collection and use of personal data are governed by their own privacy notices.
Changes to this notice
We may update this notice when the website, our services or applicable requirements change. The latest version will be published on this page with the revision date shown above.
Frequently asked questions
Does the website allow public accounts or comments?
No. The public website does not provide user registration, public comments or file uploads.
Does Star Capital sell personal data?
No. Star Capital does not sell personal data.
How can I exercise my data-protection rights?
Send a request to info@star-capital.co. The request will be handled subject to applicable data-protection law.