We process users’ personal data within the following scope:

• First and last name, e-mail address, phone number, message content - through the inquiry form used to request a quotation or contact forms for clients.
• Billing information, residential address, phone number - during the payment process.
• First and last name, e-mail address, phone number – in the complaint handling process.
• Technical data (e.g., IP address, browser data, on-site activity) – collected via cookies. Details regarding cookies are provided in a separate document: Cookie Policy.

Contact details may also be used for one-time or limited (up to 3 attempts) follow-up communication related to your prior quotation request.

We process personal data for the following purposes and on the following legal bases:

• To handle quotation inquiries – based on Article 6(1)(b) of the GDPR (processing necessary for the performance of a contract or to take steps prior to entering into a contract).
• To carry out follow-up communication after a quotation request – based on Article 6(1)(b) of the GDPR.
• To conclude and perform a sales agreement – based on Article 6(1)(b) of the GDPR.
• To issue invoices and fulfill tax obligations – based on Article 6(1)(c) of the GDPR (compliance with a legal obligation).
• To analyze website traffic (e.g. via Google Analytics) – based on Article 6(1)(a) of the GDPR (user consent).
• To ensure proper functioning of the website (technical cookies) – based on Article 6(1)(f) of the GDPR (legitimate interests).

Personal data may be disclosed to third parties that support our business operations, such as:

• Stripe – for online payment processing,
• Webflow – for website hosting services,
• Google – for analytical tools (Google Analytics),
• Zapier – for process automation,
• Monday.com – as a CRM system provider,
• Accounting office – for bookkeeping and tax purposes,
• Courier companies and shipping intermediaries – in the case of product delivery.

Some of the aforementioned services (e.g., Google, Stripe, Zapier, Monday.com) may store personal data on servers located outside the European Economic Area (such as in the United States). In such cases, data is transferred in accordance with the GDPR based on:

• an adequacy decision issued by the European Commission, or
• standard contractual clauses (SCCs) approved by the European Commission.

Personal data is stored for the following periods:

• Contact details – for up to 12 months from the date of the last contact,
• Data related to contractual agreements – for the period required under tax and accounting regulations (up to 6 years),
• Analytical data (Google Analytics) – for the duration specified in the service settings (by default, 14 months).

You have the right to:

• access your personal data,
• rectify (correct) your personal data,
• request the erasure of your data (“right to be forgotten”),
• restrict the processing of your data,
• receive your data in a structured, commonly used, and machine-readable format and transmit it to another controller (data portability),
• object to the processing of your data where the legal basis is our legitimate interest,
• withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal,
• lodge a complaint with a supervisory authority.

You may submit a complaint to:

• in Poland – the President of the Personal Data Protection Office (UODO): www.uodo.gov.pl,