Last updated: 22 June 2026
Lime Labs Ltd (“LimeChain”, “we”, “our” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy (the “Policy”) explains how we collect, use, disclose and safeguard personal data collected from users of our website https://limechain.tech (the “Website”) and any tools, content, features and functionalities made available through it (together, the “Services”).
We process personal data in accordance with the EU General Data Protection Regulation (“GDPR”), the Bulgarian Personal Data Protection Act (“PDPA”) and other applicable law. Please read this Policy carefully. If you do not agree with it, please do not use the Website or the Services.
This Policy covers the limechain.tech website only. Other LimeChain-group properties (for example Lime Institutional, Lime Academy and Lime Legal) are governed by their own privacy notices. Personal data processed in the course of a client engagement is governed by the relevant services agreement and any data processing agreement entered into with the client.
| Controller | Lime Labs Ltd |
| Registered address | Sofia 1113, Sofia Municipality, Iztok District, 23A “Dragan Tsankov” Blvd., office 6, Bulgaria |
| Company (EIK) No. | 204318511 |
| Privacy contact | [email protected] |
| Phone | +359 884 913 747 |
For any question, request or complaint about this Policy or your personal data, contact us at [email protected]. This is the single point of contact for all privacy matters, including the exercise of your rights described in Section 8.
Depending on how you use the Website and Services, we may collect the following categories of personal data.
We may receive information about you from service providers such as analytics platforms and, where relevant to a business relationship, from screening or verification providers. The Website may contain links to third-party sites whose privacy practices we do not control and are not responsible for.
We do not intentionally collect special categories of personal data (such as data revealing health, ethnicity or political opinions) through the Website. Please do not submit such data to us through our forms.
We rely on the following legal bases under Article 6 GDPR:
We will only send you marketing communications by email where you have given your consent, or where otherwise permitted under applicable law. Consent to marketing is requested separately and is never a condition of using the Website or submitting an enquiry; agreeing to this Policy is not by itself consent to receive marketing.
You can opt out of marketing at any time by using the unsubscribe link in any marketing email or by contacting [email protected].
We may share your personal data with the following categories of recipient, who are required to protect it and to use it only for the purposes for which it was shared:
We do not sell or rent your personal data.
Where we transfer personal data outside the EU/EEA, we ensure an appropriate level of protection through one of the safeguards permitted under GDPR, namely an adequacy decision of the European Commission, Standard Contractual Clauses, or another lawful transfer mechanism. You can obtain a copy of the relevant safeguard by contacting [email protected].
We use cookies and similar technologies to operate the Website, to remember your preferences, to measure usage and, with your consent, for analytics and marketing. Non-essential cookies are only set after you have given consent through our cookie banner, and you can change your choices at any time via the cookie settings link on the Website.
Full details of the cookies we use — including their names, providers, purposes and durations — are set out in our separate Cookie Policy.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These measures include access controls, encryption in transit, and regular review of our practices. No method of transmission or storage is completely secure, but we work to protect your data and to respond appropriately to any incident.
Subject to the conditions and exceptions in the GDPR, you have the right to:
To exercise any of these rights, contact [email protected]. We will respond without undue delay and in any event within one month, which may be extended by two further months for complex requests. Some rights apply only in certain circumstances and may be limited by law.
Right to complain. If you are not satisfied with how we handle your data, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP): 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria; tel. +359 2 915 3 518; email [email protected]; www.cpdp.bg.
We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting or reporting requirements. Unless a longer period is required by law, we apply the following retention periods:
| Data category | Retention period |
|---|---|
| Enquiry / contact-form data | Up to 24 months from your last contact with us, after which it is deleted or anonymised (unless it becomes part of a client engagement, in which case the engagement terms apply). |
| Marketing data | Until you withdraw consent or unsubscribe, after which we retain only the minimum needed to honour your opt-out (a suppression record). |
| Recruitment data (CVs / applications) | Up to 6 months after the selection process, in line with the Bulgarian PDPA, unless you consent to a longer period (e.g. to remain in our talent pool). |
| Analytics data | Up to 14 months, after which it is aggregated or deleted. |
| Server and security logs | Up to 12 months. |
| Accounting / tax records | For the periods required under applicable Bulgarian law (which may extend to several years after the relevant transaction). |
When determining retention we consider the amount, nature and sensitivity of the data, the potential risk of harm, the purposes of processing and whether we can achieve them by other means, and the applicable legal requirements.
We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing, including profiling, through the Website.
The Website and Services are intended for users aged 18 and over and are not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact [email protected] and we will take steps to delete it.
We may update this Policy from time to time. We will post the updated version on the Website and, where changes are significant, take reasonable steps to notify you. The “Last updated” date at the top shows when it was last revised.
If you have any questions or concerns about this Policy or our data practices, contact us at [email protected].
