Privacy Policy

What we collect

We collect only the information needed to operate this website, keep it secure, understand its aggregate usage, and respond to enquiries.

• Contact form submissions — When you use the contact form, we collect your name, email address, optional topic, and message so that we can respond. Providing this information is voluntary, but without it we may not be able to handle your enquiry.

• Technical logs — Our hosting infrastructure may process standard request information such as IP address, browser and device information, requested URL, timestamps, and error details for security, reliability, and troubleshooting.

• Anonymous web analytics — Vercel Web Analytics records aggregate page-view information such as the page or route visited, referrer, approximate location, browser, operating system, and device type. It does not use cookies or create a persistent cross-site profile.

How and why we use your data

We process personal data only for the purposes described below. We do not use contact details for unsolicited marketing.

• Responding to enquiries — We use contact-form information to read and reply to your message. The legal basis is our legitimate interest in communicating with people who contact us and, where relevant, taking steps at your request before entering into an agreement.

• Operating and protecting the website — We use technical information to keep the website available, prevent abuse, diagnose errors, and protect our systems. The legal basis is our legitimate interest in running a secure and reliable website.

• Understanding aggregate usage — We use privacy-focused analytics to understand which pages are visited and how the site performs, without advertising identifiers or behavioural profiles. The legal basis is our legitimate interest in improving the website with minimal impact on visitors.

What we don't do

We do not sell personal data, run advertising, add contact-form users to mailing lists, use tracking cookies, create behavioural profiles, or make decisions about you through automated processing. We do not use Google Analytics, Meta Pixel, or similar advertising trackers.

How long we keep data

Ordinary contact correspondence is retained for up to 12 months after the last exchange and then deleted. We may retain specific information longer where required by law or where reasonably necessary to establish, exercise, or defend legal claims.

• Email delivery records — Resend may retain email data for up to 30 days as part of providing and securing its delivery service.

• Technical and analytics data — Hosting logs and aggregate analytics are retained according to the applicable provider settings and only for as long as needed for security, operation, and aggregate measurement.

Service providers and international transfers

We use a small number of service providers to operate this website and handle messages. They receive only the information needed to provide their services.

Some providers operate in the United States or other countries outside the European Economic Area. Where required, transfers are covered by safeguards available under the provider terms, such as an applicable adequacy decision or the European Commission's Standard Contractual Clauses.

• Vercel — Hosts the website, runs the contact endpoint, provides security and operational logs, and provides cookie-free Web Analytics.

• Resend — Transmits contact-form notifications from the website to our email inbox.

• Google (Gmail) — Receives and stores contact correspondence sent to our public email inbox.

Your rights under GDPR

Subject to the conditions in applicable law, you may exercise the following rights by contacting us at the email address above. We may need to verify your identity before acting on a request.

• Access — Ask whether we process your personal data and request a copy of it.

• Rectification — Ask us to correct inaccurate or incomplete personal data.

• Erasure — Ask us to delete personal data where there is no lawful reason to continue processing it.

• Restriction — Ask us to limit how personal data is used in circumstances provided by law.

• Objection — Object to processing based on legitimate interests for reasons relating to your particular situation.

• Portability — Request applicable data in a portable format where the legal conditions for this right are met.

• Complaint — Lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland or another competent supervisory authority.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. We encourage you to review it periodically.