Privacy policy
Last updated: 28 October 2026
Who processes your data
The controller is Michał Lipiński, a sole trader registered in the Polish business register (CEIDG), tax ID (NIP) 6782908388. Contact: michal@lipinski.work.
What I collect
From the form: your name, email, and optionally phone, company, website, your choices in the form, your message and attachments. Technically: your IP address and browser, to protect the form from spam, and campaign parameters from the page address (such as utm_source), to see where enquiries come from.
Contact sent before you finish the form
The form is split into steps. On the second step you confirm a phone number or email with the “Send my contact” button, and that contact, together with what you need and the enquiry's source (e.g. utm_source), reaches me before you finish the rest of the form. Before it does, it may be held for up to 15 minutes: if you add details and send the whole form within that time, I get one combined message instead of two; if you close it with “That's all” or the time runs out, the contact-only message reaches me without further delay. The legal basis and retention period are as described elsewhere in this policy.
Why, and on what basis
To reply to your enquiry and prepare a quote, which are steps taken before a contract (Art. 6(1)(b) GDPR). To protect the form from abuse and measure how adverts perform, as a legitimate interest (Art. 6(1)(f) GDPR).
How long
Enquiries that don't lead to work are deleted after 12 months. If we sign a contract, I keep data for as long as tax and accounting law requires.
Who else handles it
The EU server provider hosting this site; Cloudflare, which speeds up and protects the site; and Resend, which delivers email notifications. Resend is based in the USA and works under the European Commission's standard contractual clauses.
Your rights
You can ask for access to your data, its correction, deletion, restriction or transfer, and object to processing. An email is enough. You can also complain to the Polish data protection authority (Prezes UODO).
Cookies
This site uses no cookies. It only stores your chosen pricing currency in your browser.
Contact via WhatsApp
If you message me on WhatsApp, the conversation runs through Meta's service and its terms and privacy policy. I use the conversation only to answer your enquiry.
Visit statistics
I count visits without cookies and without storing your IP address. Each visitor gets a temporary id: a hash of the IP address, browser and a random daily key that lives only in the server's memory and is replaced the next day, so the same person can't be recognised from one day to the next. I record: which page, the language, where the traffic came from (campaign parameters, the referring domain, or "direct"), country (from a server header, not your IP address), device type, and how far you got on the page and in the form. Data older than 13 months is deleted automatically. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in seeing what on the site works. Since nothing is stored on or read from your device, no cookie consent banner is needed.