Privacy Notice | MGSD Pro Website Visitors and Contacts

Who we are and what this notice covers

MGSD Pro EOOD (Ем Джи Ес Ди Про ЕООД), company registration number 205215183, is the controller responsible for the personal information described in this notice.

Registered office (not a visitor location): 39 Primorski Boulevard, floor 6, apartment 11, Varna 9000, Bulgaria.

For privacy questions, contact info@mgsdpro.com.

MGSD Pro and Verrika are brands of MGSD Pro EOOD, not separate controllers. We monitor info@mgsdpro.com for enquiries, privacy requests and marketing objections.

This notice covers website visitors, enquiries, professional business-contact research and related correspondence. Candidate, employment and client-service delivery processing is covered separately; this notice does not describe or authorise those activities or their engagement-specific data transfers.

Website visitors and enquiries

This website has no contact form or user account. The website code does not set cookies or use browser storage, and does not load advertising trackers or social embeds. Optional audience analytics, the feedback widget and the Replit badge are off. Styles, artwork and the mobile-navigation script are hosted with the site.

Selecting an email link opens your email application. We use the name, contact details, message and other information you choose to send to respond to and manage your enquiry.

Replit hosts this website. The custom-domain version is intended for https://mgsdpro.com. Its hosting infrastructure processes technical network and request information to deliver, operate and protect the website. The website code has no visitor database or custom request logging.

The hosting infrastructure sets the GAESA cookie for request routing. Responses observed on 31 October and 1 November 2026 showed an approximately 30-day expiry; that is an observation, not a guarantee of the duration for every visitor or response.

Hosting technical and security information is retained according to the provider’s purposes and legal and operational needs, as described in Replit’s published privacy information. Those arrangements are separate from our prospect-record retention schedule below. Replit’s public privacy information describes overseas processing, including in the United States.

Replit Privacy Policy — provider processing and retention practices

Professional information and sources

We use limited professional information: name, employer, job title and responsibilities, business email address, relevant public business activity, source and collection date, email-finding or verification information, and relevant communication history. We use only information needed to assess business relevance, prepare an appropriate approach or manage a genuine enquiry or relationship.

Sources include business websites, public professional profiles such as LinkedIn, public registers such as CQC and Companies House, information supplied directly, relevant historical correspondence and contact-finding services. We use Hunter to find and verify professional email addresses. An address may be inferred from an organisation’s email pattern rather than published by the person; a verification result is not treated as proof that an approach is relevant or welcome.

Microsoft 365 holds business email and files, including relevant historical correspondence. HubSpot holds business prospect records, research and communication activity. We assess the present relevance of older correspondence rather than treating a previous exchange as permission for any new campaign.

Purposes and lawful bases

For professional research and relevant business approaches, we rely on legitimate interests under Article 6(1)(f) GDPR: identifying organisations and roles for which our recruitment, operations or employment support may be relevant, developing business relationships and preparing personalised professional communications. Before each approach, we manually check individual relevance and suppression or objection records. Public contact details or a job advert are not, by themselves, evidence of need or permission to market.

We rely on legitimate interests to respond to business enquiries and manage professional correspondence. Where you personally ask us to take steps before entering a contract with you, Article 6(1)(b) applies to those steps. We rely on legitimate interests to deliver, operate and protect this website, including maintaining its availability and security.

We process information where necessary to meet legal obligations under Article 6(1)(c), including complying with data-protection rights and direct-marketing objections and retaining the minimum suppression information needed to prevent further unwanted marketing. This also includes applicable legal record-keeping obligations. Where information is necessary to establish, exercise or defend legal claims, we rely on legitimate interests under Article 6(1)(f) in protecting legal rights.

You do not have to reply to a business approach or provide further information. We do not sell personal information or make decisions producing legal or similarly significant effects about you solely by automated means.

Service providers and AI-assisted work

We use Microsoft 365 for email and files, HubSpot for business-contact records and communications, and Hunter for professional email finding and verification. Information is shared with these services as needed for those purposes. Access within MGSD Pro is limited to people who need it for the relevant work. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal rights.

We use individual ChatGPT Plus for professional research, relevant connected-mailbox correspondence and personalised drafting. This includes identifiable professional contact information and relevant correspondence, not only anonymous inputs. Identifiable professional information has also been included in past research and drafting. We use only the information needed for the task.

The ChatGPT account’s model-improvement setting is off. Research output and messages receive human review; generated material is not treated as verified fact. This setting does not mean that earlier submissions were deleted or changed. ChatGPT Plus is an individual consumer service, whose data practices are described in OpenAI’s consumer privacy information.

Provider processing can involve countries outside Bulgaria and the EEA. Microsoft’s privacy statement describes its service-specific processing and international practices. HubSpot’s privacy policy describes transfers within its group and to service providers, including its stated use of contractual safeguards and Data Privacy Framework certification. Hunter’s policy describes servers in Belgium and transfers to users or service providers elsewhere under its stated transfer mechanisms. These are the respective providers’ descriptions, not a statement that one transfer mechanism covers every service or data flow.

OpenAI’s consumer privacy policy describes processing in the United States and other countries and its own transfer arrangements. Provider privacy information explains their practices; linking to it does not itself establish MGSD Pro’s contractual coverage or compliance for a particular transfer.

How long we keep information

We manually review active prospect records every 30 days. By six months from collection, we delete unnecessary prospect details or record a specific continuing purpose and the next review date. An administrative review does not restart the retention period.

For our initial five-organisation outreach batch, we review working contact records at batch close and every 30 days while active. We delete working prospect details within 30 days after batch close unless a specific continuing purpose is documented and its retention arrangements are explained.

We keep resolved enquiries only for as long as needed for relevant follow-up, an ongoing relationship, legal obligations or legal claims. Historical correspondence is retained only where its continuing business, legal or evidential purpose makes it necessary; its age or mere availability does not justify indefinite reuse for prospecting.

We retain the minimum suppression information needed to respect marketing objections across our brands and review it annually for accuracy and continuing necessity. We do not remove an effective objection simply because another record is reviewed or deleted.

These are manual retention decisions, not an automated deletion system. Our working-record schedules do not promise immediate deletion from every provider’s recovery systems or backups. Hosting technical and security retention is separate, as described above.

Your rights and how to contact us

The direct-marketing objection above is unconditional. You may also object to other processing based on legitimate interests; we consider those objections under the applicable legal rules.

Depending on applicable law and circumstances, you can request access, correction, deletion or restriction of your personal information and information about its source and recipients. Data portability applies where its legal conditions are met. If we rely on consent for a particular activity, you may withdraw it without affecting earlier lawful processing.

Contact info@mgsdpro.com to exercise your rights, ask about our use of your information or request details about a provider or transfer. We may ask only for information necessary to confirm your identity and handle your request.

You may complain to a competent data-protection authority, including:

Changes to this notice

We update this notice when our practices or relevant information change. The date at the top identifies this version.