Privacy Policy

Effective date: 27 July 2026 Last updated: 27 July 2026

1. Who we are

This website, aftermidnightlab.com (the "Site"), is operated by the After Midnight Lab studio ("After Midnight Lab", "we", "us", "our"), based at 125 Tsarigradsko Shose Blvd, Floor 4, 1784 Sofia, Bulgaria. For all matters relating to this Privacy Policy, we can be reached at contact@aftermidnightlab.com. This is the only contact channel we use for privacy-related requests; we do not process such requests by phone or social media.

2. Scope

This Privacy Policy applies to personal data we process through the Site, through the contact form and project brief submissions, and through email correspondence initiated via contact@aftermidnightlab.com. It does not apply to any third-party sites we may link to.

3. Information we collect

We collect information in two ways:

• Information you provide directly. When you use the contact form, send a project brief, or email us, we receive whatever information you choose to include — typically your name, company name, email address, and details of the project you're describing.
• Information collected automatically. Like most websites, our hosting and analytics infrastructure may log basic technical data when you visit the Site, such as IP address, browser type, device type, referring page, and timestamps. We use this only in aggregate to understand traffic and keep the Site secure — we do not use it to build individual visitor profiles.

We do not knowingly collect payment card details, government identification numbers, or other special categories of sensitive data through the Site, and we ask that you avoid including such information in the contact form or in emails to us.

4. How we use your information

• To respond to enquiries and project brief submissions sent through the Site or by email.
• To prepare proposals, quotes and contracts for prospective and current clients.
• To operate, secure, and improve the Site.
• To meet legal, accounting and tax obligations under Bulgarian and EU law.

We do not sell personal data, and we do not use the information you send us for targeted advertising.

5. Legal basis for processing

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

• Consent — when you voluntarily submit the contact form or email us.
• Performance of a contract — when we process data necessary to prepare a proposal or deliver services you've engaged us for.
• Legitimate interests — for basic technical logging needed to keep the Site secure and functioning.
• Legal obligation — where we must retain certain records for accounting or tax purposes under Bulgarian law.

6. How we share information

We do not sell or rent personal data. We may share information with:

• Service providers who support our operations, such as our email and hosting providers, strictly to the extent needed to provide those services, and only where they offer appropriate safeguards.
• Freelance collaborators and production partners engaged on a specific project, limited to what's relevant to that project.
• Authorities, regulators or professional advisers, where required by law or to protect our legal rights.

7. International transfers

We are based in Bulgaria, within the European Union. If any service provider we use processes data outside the European Economic Area, we take reasonable steps to ensure an adequate level of protection, such as relying on providers certified under recognized transfer frameworks or bound by standard contractual clauses.

8. Data retention

We keep enquiry and project data for as long as reasonably necessary to respond to your request, deliver any engaged services, and meet legal and accounting obligations. Enquiries that don't result in a project are generally retained for a limited period and then deleted, unless you ask us to remove them sooner.

9. Your rights

If the GDPR applies to you, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, subject to legal retention requirements.
• Object to or request restriction of certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (KZLD) or your local supervisory authority.

To exercise any of these rights, email contact@aftermidnightlab.com. We aim to respond within one month.

10. Cookies and similar technologies

The Site uses only essential and basic analytics technologies needed for it to function correctly and for us to understand aggregate traffic. We do not use third-party advertising cookies or cross-site tracking. Where required by law, we will present a cookie notice allowing you to manage non-essential cookies.

11. Security

We take reasonable technical and organizational measures to protect the information we hold, appropriate to a small studio handling contact and project information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's privacy

The Site is intended for business enquiries and is not directed at children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be reflected here before they take effect.

14. Contact

Questions about this Privacy Policy or how we handle personal data can be sent to contact@aftermidnightlab.com. This is the sole point of contact for privacy matters; we do not accept privacy requests by phone or through social media channels.

After Midnight Lab
125 Tsarigradsko Shose Blvd, Floor 4, 1784 Sofia, Bulgaria