1. Who is responsible for your data.
The controller of your personal data is cathycopywriter, Krzywa 44, 76-200 Słupsk, Poland (NIP 839-312-45-64, REGON 220573180), referred to here as "we" or "the Studio". You can reach us about anything in this policy at support@cathycopywriter.com or +48 887 802 073.
2. What data we collect.
Through the contact and brief forms: name, email address, company (optional), phone number (optional), the service and budget you choose, your deadline, and the message you write. Through the checkout: your name, email, phone (optional), company (optional), billing address, VAT ID (optional), your preferred kick-off date and time window, notes for the brief, and order details. We do not collect a delivery address, because delivery is digital. We do not store card numbers: card fields are not sent to us. When you visit the site with analytics enabled, Google Analytics 4 collects anonymised usage data such as pages viewed, approximate location, device type and referrer. Your browser also stores your cart and your cookie choice on your device (see the Cookie policy).
3. Why we use it, and on what legal basis.
- To reply to your message and prepare a quote: Article 6(1)(b) and (f) of the GDPR (steps at your request before a contract, and our legitimate interest in answering enquiries).
- To take, deliver and invoice an order: Article 6(1)(b) (performing the contract).
- To keep accounting and tax records: Article 6(1)(c) (legal obligation).
- To defend or bring legal claims and to secure the site: Article 6(1)(f) (legitimate interest).
- To measure how the site is used with Google Analytics 4: Article 6(1)(a) (your consent), and Article 173 of the Polish Telecommunications Law for storing information on your device. We ask before any analytics runs, and you can withdraw consent at any time.
4. How long we keep it.
Enquiries: up to 12 months after our last contact. Orders and invoices: 5 years from the end of the calendar year in which the tax obligation arose. Data needed to defend claims: until the claims expire. Analytics data: no longer than 14 months. Your cookie choice: 12 months, then we ask again.
5. Who receives it.
Our hosting provider and our email provider, to run the site and to send and receive email. Our accountant and invoicing tools, for orders. Google, for analytics, only if you consent. If we introduce an online payment provider, it will receive the payment data it needs, and this policy will be updated before it goes live. We do not sell personal data. We do not use it for advertising.
6. Transfers outside the EEA.
If you consent to analytics, Google may process data in countries outside the European Economic Area, including the United States. Such transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on standard contractual clauses.
7. Your rights.
You may ask us for access to your data, correction, deletion, restriction of processing and portability. You may object to processing based on our legitimate interest. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect earlier processing. To use any right, write to support@cathycopywriter.com. You also have the right to complain to the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Is providing data required?.
Providing data through a form or checkout is voluntary, but without name, email and billing details we cannot reply to you or complete an order. Analytics consent is always optional.
9. Automated decisions.
We do not make decisions about you by automated means, and we do not profile you.
10. Security.
We use HTTPS, limit access to your data, and keep form data only as long as needed. We do not store payment card data.
11. Children.
The site is meant for businesses and adults. We do not knowingly collect data from anyone under 16.
12. Changes.
If we change this policy, we publish the new version here and update the date above. If the change is material, we tell you on the site.