Privacy

We collect what you send us and nothing else. If you write to us or book a consultation, we keep your name, e-mail, company and whatever you tell us about the project, so we can answer and prepare for the meeting.

That data lives in our own database inside the European Union and is not sold, rented or passed to advertisers. We keep it for as long as the conversation is live, and delete it on request.

You can ask us at any time what we hold about you, ask for a correction, or ask us to delete it. One e-mail is enough.

Client portal. When we work together, we set up a portal account for you. In it we process: your name, company, email address, messages, documents and payment details related to the project — to perform the agreement (Art. 6(1)(b) GDPR), in our legitimate interest in keeping project records and answering questions (Art. 6(1)(f)), and invoice data to meet tax obligations (Art. 6(1)(c)).

Who processes data for us. We keep data with providers who process it only on our instructions: Supabase (database and files, servers in Frankfurt), Vercel (website hosting, anonymous visit statistics and speed measurement), Resend (email notifications) and Google Workspace (mail and calendar). Where a provider processes data outside the European Economic Area, this is done under standard contractual clauses or the EU-US Data Privacy Framework.

How long. Portal account data — until our work ends and the account is deleted. Accounting documents — for the period tax law requires (5 years from the end of the year the tax obligation arose). Messages — for the duration of our work, unless you ask us to delete them sooner.

Your rights. You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to lodge a complaint with the President of the Polish Data Protection Office (UODO). Providing data for the portal is voluntary, but without an email address we cannot set up an account.