Privacy Policy.
Your trust matters to us. Learn how Your Expert Support collects, uses and protects your personal information when you interact with our website and services.
Your Expert Support
Website: https://exp-support.com/
Last Updated: October 13, 2026
1. Introduction
Welcome to Your Expert Support (“Your Expert Support,” “we,” “us,” or “our”).
At Your Expert Support, we respect your privacy and are committed to handling personal information responsibly. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, contact us, request information about our services, or interact with us in connection with our business.
Your Expert Support provides international employment and business support services, which may include Employer of Record (EOR), global payroll and HR administration, immigration assistance, employment compliance support, and international business expansion assistance, subject to service availability and applicable agreements.
This Privacy Policy applies to our website, https://exp-support.com/, and to personal information processed in connection with our website enquiries and business relationships.
Please read this policy carefully to understand our privacy practices and your rights.
2. Who We Are
Your Expert Support is the brand name used for our international employment and business support services.
Website: https://exp-support.com/
Email: office@exp-support.com
Office address: 55 Klokotnitsa Street, Office 1, Sofia, Bulgaria.
For the purposes of applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) where applicable, the relevant data controller is the legal entity responsible for determining how and why your personal information is processed.
The full registered legal name of that entity must be confirmed and included in this policy before publication.
If you have questions about this Privacy Policy or how we handle personal information, you can contact us at office@exp-support.com.
3. Personal Information We Collect
The personal information we collect depends on how you interact with our website and services.
3.1 Information You Provide to Us
When you contact us, submit an enquiry, request a consultation, or discuss our services, we may collect:
Identity information: Your name and, where relevant, your professional title.
Contact information: Your business email address, telephone number, company address, and other contact details you choose to provide.
Business information: Your company name, business sector, country of operation, and details about your employment or international expansion requirements.
Enquiry information: The contents of messages, questions, consultation requests, and other communications you send to us.
Service-related information: Information reasonably necessary to assess, arrange, or deliver services that you have requested or agreed to receive.
Communication preferences: Your preferences regarding responses, updates, or marketing communications, where applicable.
Please do not submit sensitive personal information or confidential employee documents through a general website enquiry form unless we have specifically requested the information through an appropriate and secure process.
3.2 Technical and Usage Information
When you visit our website, certain technical information may be collected automatically through server logs, cookies, and similar technologies, depending on the website’s configuration.
This information may include:
Internet Protocol (IP) address.
Browser type and version.
Operating system and device information.
Pages visited and interactions with website features.
Referring website or source, where available.
Date, time, and duration of website visits.
Technical diagnostic and security information.
We use this information, where applicable, to maintain website functionality, protect against misuse, troubleshoot technical problems, and understand how visitors interact with our website.
3.3 Information Received from Other Sources
Where permitted by law, we may receive relevant professional or business information from publicly available sources, business contacts, referral partners, or service providers.
We will process such information only where there is an appropriate purpose and lawful basis, and subject to any applicable transparency and privacy requirements.
3.4 Employee and Immigration-Related Information
If you engage us for services involving employment administration, payroll, HR, immigration, or work permits, additional information may be necessary to provide those services.
Depending on the agreed service and applicable requirements, this may include employment details, identification documents, compensation information, payroll records, work permit documentation, or other information relating to employees or applicants.
Where such information is required, we will seek to collect only information relevant to the agreed purpose and handle it in accordance with applicable law and the relevant contractual arrangements.
Additional privacy information or specific arrangements may apply to employees, applicants, clients, or other individuals whose information is processed during the delivery of our services.
4. How We Use Personal Information
We may use personal information for the following purposes:
To respond to enquiries, consultation requests, and requests for information.
To communicate with prospective and existing clients.
To assess business requirements and determine whether our services are suitable and available.
To prepare proposals, quotations, service agreements, and related documentation.
To provide, administer, and support agreed services.
To coordinate employment, payroll, HR, immigration, and related administrative processes where included in an agreed service.
To manage client relationships and business communications.
To maintain, troubleshoot, and improve our website.
To detect, prevent, and investigate security incidents, fraud, misuse, and unauthorized access.
To comply with applicable legal obligations and respond to lawful requests from public authorities.
To establish, exercise, or defend legal claims.
To send relevant business updates or marketing communications where legally permitted and, where required, with your consent.
We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted by applicable law.
5. Legal Bases for Processing
Where the GDPR applies, we process personal information only when an appropriate legal basis exists.
Depending on the circumstances, our legal bases may include:
5.1 Contractual Necessity
Processing may be necessary to take steps at your request before entering into a contract or to perform a contract with you.
For example, we may need your contact details and business requirements to prepare a proposal or provide agreed services.
5.2 Legal Obligations
We may process personal information when necessary to comply with applicable laws, regulatory requirements, accounting obligations, employment requirements, or lawful requests from competent authorities.
5.3 Legitimate Interests
We may process personal information where necessary for our legitimate business interests, provided those interests do not override your applicable rights and freedoms.
These interests may include responding to relevant business enquiries, managing client relationships, maintaining website security, preventing misuse, improving our services, and protecting our legal rights.
5.4 Consent
We may rely on your consent where required by law, including for certain marketing communications or optional cookies and tracking technologies.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
The relevant legal basis will depend on the specific processing activity.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to support functionality, security, performance, analytics, or visitor preferences, depending on the technologies configured on the website.
Cookies may include:
Essential cookies: Technologies necessary for website functionality, security, or features requested by the visitor.
Preference cookies: Technologies used to remember certain website settings, where applicable.
Analytics cookies: Technologies used to understand website traffic and visitor interactions, where enabled.
Marketing cookies: Technologies used for marketing or advertising purposes, where enabled and permitted by law.
Where required by applicable law, we will request consent before placing non-essential cookies or using similar technologies that require consent.
You may be able to manage cookie preferences through a cookie banner or settings tool on our website, where available. You can also manage certain cookies through your browser settings.
Disabling some cookies may affect website functionality.
The actual cookies and third-party technologies used on our website may change over time. Please refer to the website’s cookie settings or any separate Cookie Policy provided on the website for further details.
7. Marketing and Communications
We may send business-related updates, service information, or promotional communications where permitted by applicable law.
We will obtain consent when required and provide an appropriate way to opt out of direct marketing communications.
You may ask us to stop sending marketing communications by using an unsubscribe link where available or contacting us at office@exp-support.com.
Even if you opt out of marketing, we may still need to send non-promotional communications relating to an existing service, contractual arrangements, security matters, or legal obligations.
We do not intentionally use personal information for unrelated third-party marketing without an appropriate legal basis and any consent required by law.
8. How We Share Personal Information
We do not sell personal information as part of our standard business practices.
We may share personal information with the following categories of recipients where necessary and legally permitted.
8.1 Service Providers
We may engage third-party providers to support our website, communications, hosting, IT systems, security, analytics, document management, or other business operations.
These providers may process personal information on our behalf where necessary to perform their agreed services.
Where required, we will put appropriate contractual and data protection safeguards in place.
8.2 Business Partners and Service Partners
Depending on the service requested and the applicable agreement, we may need to share relevant information with employment, payroll, HR, immigration, administrative, or other professional partners involved in delivering the service.
Information will be shared only where necessary, legally permitted, and subject to the applicable arrangements and responsibilities.
8.3 Clients, Employers, and Relevant Organizations
Where we process employee or applicant information as part of an agreed service, that information may need to be shared with the relevant client, employer, employing entity, or other authorized organization to carry out the requested employment or administrative process.
The scope of sharing will depend on the service, the parties’ respective roles, and applicable law.
8.4 Professional Advisers
We may share relevant information with professional advisers, including legal, accounting, auditing, or compliance advisers, where reasonably necessary for business operations or the protection of our legal interests.
8.5 Authorities and Legal Disclosures
We may disclose personal information where required by law, court order, regulatory obligation, or a valid request from a competent public authority.
We may also disclose information where reasonably necessary to establish, exercise, or defend legal claims or protect the rights, safety, and security of individuals or our business.
8.6 Business Transfers
If our business undergoes a merger, acquisition, restructuring, or transfer of assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.
We do not authorize recipients to use personal information for purposes incompatible with the applicable disclosure arrangements.
9. International Data Transfers
Your Expert Support operates in the international employment and business support sector, and some services may involve organizations or service providers located in different countries.
As a result, personal information may be transferred to or accessed from countries other than the country in which it was originally collected, where necessary for an agreed service or another lawful purpose.
Where the GDPR applies and personal information is transferred outside the European Economic Area to a country without an applicable adequacy decision, we will implement an appropriate transfer mechanism where required.
Depending on the circumstances, this may include Standard Contractual Clauses approved by the European Commission, together with additional safeguards where necessary.
You may contact us at office@exp-support.com for further information about relevant international transfers and the safeguards applicable to your personal information, subject to applicable law and confidentiality requirements.
10. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, managing business relationships, complying with legal obligations, resolving disputes, and establishing or defending legal claims.
Retention periods may depend on:
The nature and sensitivity of the information.
The purpose for which it was collected.
Whether a business relationship or service agreement remains active.
Applicable employment, accounting, tax, and regulatory requirements.
The need to preserve records for legal claims or disputes.
When personal information is no longer required, we will take reasonable steps to delete it or anonymize it, subject to applicable legal requirements and legitimate retention needs.
Specific retention periods may be established through applicable contracts, internal retention procedures, or legal requirements.
11. Data Security
We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, accidental loss, alteration, disclosure, destruction, and other inappropriate processing.
Depending on the systems and services involved, these measures may include access restrictions, authentication controls, secure communications, system monitoring, backups, staff procedures, and appropriate safeguards provided by our service providers.
No website, electronic transmission, or storage system can be guaranteed to be completely secure. We therefore cannot promise absolute security, but we aim to maintain safeguards appropriate to the nature of the information and the risks involved.
You should avoid sending sensitive personal information through ordinary email or general enquiry forms unless we have provided appropriate instructions for doing so securely.
If you believe that personal information you shared with us has been compromised, please contact us promptly at office@exp-support.com.
12. Personal Data Breaches
If we become aware of a personal data breach affecting information for which we are responsible, we will assess the incident and take appropriate steps in accordance with applicable law.
Where the GDPR applies, we will notify the relevant supervisory authority within the legally required timeframe when notification is required. Where notification to affected individuals is legally required, we will provide the necessary information without undue delay.
We will also take reasonable steps to contain, investigate, and address the incident, including implementing appropriate corrective measures.
13. Your Privacy Rights
Depending on the applicable law and the circumstances of the processing, you may have rights regarding your personal information.
Where the GDPR applies, these rights may include:
Right of access: Request confirmation of whether we process your personal information and obtain access to it.
Right to rectification: Request correction of inaccurate or incomplete information.
Right to erasure: Request deletion of personal information in circumstances provided by law.
Right to restriction: Request restriction of certain processing activities.
Right to data portability: Request a copy of certain information in a structured, commonly used, machine-readable format where the legal requirements are met.
Right to object: Object to certain processing based on legitimate interests and to processing for direct marketing.
Right to withdraw consent: Withdraw consent where processing is based on consent.
Right to lodge a complaint: Submit a complaint to a competent data protection supervisory authority.
These rights are subject to applicable legal conditions, exceptions, and limitations. For example, we may need to retain certain records to comply with legal obligations or defend legal claims.
How to Exercise Your Rights
To make a privacy request, contact us at:
Email: office@exp-support.com
Subject: Privacy Request – Your Expert Support
Please describe your request and provide sufficient information for us to understand and respond to it. We may need to verify your identity before disclosing or changing personal information.
We will respond within the timeframe required by applicable law.
Where the GDPR applies, you generally have the right to lodge a complaint with the competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.
14. California and Other Regional Privacy Rights
Depending on your location and whether the relevant legislation applies to our business and processing activities, you may have additional privacy rights under applicable regional laws, including certain US state privacy laws.
Such rights may include requesting access to, correction of, or deletion of personal information, and exercising applicable rights concerning certain forms of targeted advertising or the sale or sharing of personal information as defined by law.
The availability of these rights depends on the applicable law, legal thresholds, exceptions, and the circumstances of the processing.
We do not claim that every regional privacy law applies to our business. We will assess and respond to requests in accordance with the laws applicable to the relevant processing activity.
To submit a privacy request, contact office@exp-support.com.
15. Third-Party Websites
Our website may contain links to websites, platforms, or services operated by third parties.
These third parties may have their own privacy policies, terms, and data-handling practices. We do not control all third-party websites and are not responsible for their independent privacy practices.
Visiting a third-party website or submitting information to a third-party service is subject to that party’s applicable policies and terms.
We encourage you to read the privacy policy of any third-party website or service before providing personal information.
16. Children’s Privacy
Our website and business services are intended primarily for businesses, professionals, employers, and adults seeking international employment or related business support.
We do not knowingly collect children’s personal information through our general website enquiry process for purposes unrelated to our business.
If personal information relating to a minor is genuinely required as part of a specific, lawful service or immigration-related process, it must be handled only where appropriate, necessary, and permitted by applicable law, with any required authorization or safeguards.
If you believe that a child has provided personal information to us inappropriately, please contact office@exp-support.com so that we can assess the matter and take appropriate action.
17. Automated Decision-Making
We do not state that this website uses automated decision-making or profiling that produces legal or similarly significant effects on individuals.
If we introduce such processing in the future, we will assess applicable legal requirements and provide the information and safeguards required by law.
Where a service involves decisions made by clients, employers, government authorities, or other third parties, the relevant responsibilities and processes will depend on the particular service and applicable arrangements.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, business operations, services, technologies, or legal obligations.
When we make changes, we will update the “Last Updated” date at the beginning of this page.
Where required by applicable law, we will provide additional notice or obtain consent for material changes to our data-processing practices.
We encourage you to review this page periodically to remain informed about how we handle personal information.
19. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or would like more information about how we process personal information, please contact us.
Brand: Your Expert Support
Website: https://exp-support.com/
Email: office@exp-support.com
Office address: 55 Klokotnitsa Street, Office 1, Sofia, Bulgaria.
Please include “Privacy Policy” or “Privacy Request” in the subject line of your email so that your enquiry can be directed appropriately.
Thank you for trusting Your Expert Support.