Privacy Policy

1. Who is the data controller

The data controller is Jan Molski, sole proprietor based at Ksawerów 28 lok. 56, 02-656 Warszawa, Poland (NIP 5214123056, REGON 542108692). Contact for any privacy matter: janmolski@gmail.com.

2. What we collect

• Email address — when you reserve a spot or check out.
• Order details — what you bought, when, and any access code used.
• Payment details — handled directly by Stripe; we don't store card numbers.
• Website URL & basic brand info you provide so we can set up your campaign.
• Basic technical data — IP, browser, device type — for security and to make the site work.

3. Why we use it

• To deliver the service you bought (legal basis: contract).
• To send you transactional emails about your order (contract).
• To meet tax and accounting obligations in Poland (legal obligation).
• To improve the site and protect against fraud (legitimate interest).

4. Who we share it with

We use Stripe to process payments. Stripe receives the data needed to charge you and to handle tax, fraud, and disputes. See Stripe's own privacy policy at stripe.com/privacy.

We don't sell your data. We don't share it with anyone else unless required by law (e.g. tax authorities) or strictly necessary to deliver the service.

5. How long we keep it

We keep your data until you email us asking to delete it, or until you've stopped using the service for at least 12 months, whichever comes first. Invoicing and accounting records may be kept longer when Polish tax law requires it (typically up to 5 years).

6. Your rights

Under the GDPR you can ask us to:

• Access the data we hold about you.
• Correct it if it's wrong.
• Delete it ("right to be forgotten").
• Restrict or object to processing.
• Receive a copy in a portable format.

Email janmolski@gmail.com and we'll handle it within 30 days. You can also complain to the Polish data protection authority (UODO) at uodo.gov.pl.

7. Cookies

We use only the cookies and local storage needed to make the site work (e.g. keeping you signed in, remembering checkout state). We don't run third-party advertising cookies on this site.

8. Security

Traffic is served over HTTPS. Payments are handled by Stripe under PCI-DSS. We take reasonable technical and organisational measures proportionate to a small business — no system is 100% secure, but we try hard.

9. International transfers

Stripe and some infrastructure providers may process data outside the EU/EEA. When they do, they rely on safeguards such as the EU Standard Contractual Clauses.

10. Changes

If we change this policy in a material way we'll update the date at the top of this page. Contact us anytime at janmolski@gmail.com.