Privacy Policy
This policy explains what personal data I collect through this website and while working with clients, why I collect it, who I share it with and what rights you have under the GDPR.
1.Who is responsible for your data
The controller of your personal data is:
- Business name
- [full business name as registered in CEIDG]
- Address
- [street, postcode, city], Poland
- Tax ID (NIP)
- [NIP]
- hello@bytheadrian.com
For anything related to your data, write to hello@bytheadrian.com.
2.What data I collect
- Audit form: your Instagram handle, email address, your optional message and which button on the website you clicked to get to the form.
- Email and WhatsApp: your name, contact details and whatever you write to me.
- Clients: name, business name, billing details, the materials you send (logo, photos, texts) and the access you give me in Meta Business Suite and Google Drive.
- Payments: processed by Stripe. I receive confirmation of the payment, but never your full card details.
3.Why I use your data and on what legal basis
- To prepare and send your free audit and answer your questions — steps taken at your request before a contract (Art. 6(1)(b) GDPR).
- To provide the service, invoice and get paid — performance of the contract (Art. 6(1)(b) GDPR).
- To keep accounting and tax records — legal obligation (Art. 6(1)(c) GDPR).
- To understand which parts of the website bring audit requests, and to establish or defend legal claims — my legitimate interest (Art. 6(1)(f) GDPR).
Giving your data is voluntary, but without an email address I can't send you the audit.
4.How long I keep it
- Audit requests that don't lead to cooperation: up to [12 months], then deleted.
- Client data: for the duration of the cooperation and then until possible claims expire.
- Invoices and accounting records: for the period required by Polish tax law (generally 5 years from the end of the year in which the tax was due).
5.Who receives the data
I don't sell your data. I use trusted service providers who process it on my behalf:
- Vercel — website hosting and anonymous visit statistics,
- Web3Forms — delivering audit form submissions to my inbox,
- Stripe — payments,
- [email provider, e.g. Google Workspace] — email,
- Google (Google Drive) — delivering the posts,
- Meta (Meta Business Suite) — scheduling posts,
- [accounting office, if any] — bookkeeping.
6.Transfers outside the EEA
Some of these providers are based in the United States. Where data leaves the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. [check for each provider]
7.Your rights
You have the right to:
- access your data and get a copy of it,
- have it corrected,
- have it deleted or its processing restricted,
- receive it in a portable format,
- object to processing based on my legitimate interest.
To use any of these rights, email hello@bytheadrian.com. You can also lodge a complaint with the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warszawa.
9.Changes to this policy
I may update this policy when the website or the service changes. The date at the top shows when it was last updated.
Questions? Write to hello@bytheadrian.com.