Privacy policy

Who is responsible for your data

The data controller is Adam Kramarczyk. For anything related to your data, write to [email protected].

What I collect and why

The contact form gives me your name, email address and the message itself. If you click “Order” next to a service, the message also carries that service's name, the package price and the language you were browsing in.

The message also carries one line about how you reached the site: the address that referred you, the first page you opened and the campaign tags from the link, when there are any. That line sits in the browser's session storage, it disappears when you close the tab, and it goes nowhere except the message you send yourself. I read it to know which of my pages brings people in.

I use the form data to reply to your inquiry and prepare an offer or a contract. The legal basis is steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), and my legitimate interest in keeping the correspondence itself (Article 6(1)(f)).

Providing your data is voluntary. Without an email address I simply have no way to reply.

Where your message goes

The form delivers its content through Web3Forms, a form-delivery service run by Web3Creative in India, to my [email protected] mailbox on Zoho Mail. Mail for this domain sits in Zoho's European data centres, in Amsterdam and Dublin. The site itself is hosted by Cloudflare.

Web3Forms runs on infrastructure from Amazon Web Services, Cloudflare and Hetzner, and it covers transfers outside the European Economic Area with Standard Contractual Clauses. The mailbox itself stays in Europe, so for the correspondence no such transfer happens.

Web3Forms filters spam through CleanTalk and Akismet. The IP address and email address of whoever sends the form may reach those two services. Beyond that I pass your data to nobody and I do not sell it.

How long I keep it

Inquiries that never turn into work are deleted no later than a year after the last message. Correspondence tied to a signed contract is kept as long as tax law and claim limitation periods require. In the Web3Forms panel I set submissions to be deleted after a year.

Your rights

You can access your data, correct it, have it deleted, restrict its processing, take it with you or object to it. An email to [email protected] is enough, no forms needed.

If you believe I process your data unlawfully, you can lodge a complaint with the President of the Polish Data Protection Office at uodo.gov.pl.

Cookies, browser storage and the demos

This site sets no cookies and loads no analytics or ad scripts. It keeps two things in your browser, both in session storage, which dies when you close the tab: the package you picked if you click “Order” (the helbanOrder key) and one line about how you reached the site (helbanFirstTouch). Neither identifies you, and they leave the browser only inside a message you send.

The demo sites on the subdomains (salon.helban.dev, kalkulator.helban.dev and the rest) carry no trackers either. If you submit a sample form in one of the demos, the message lands in the same inbox under the same rules.

One exception: the payment demo at pay.helban.dev runs on Stripe in test mode, and Stripe sets its own cookies used for payment fraud prevention. All payments there are fictional and no real money moves.

What you won't find here

I do not profile visitors, I make no automated decisions about anyone and I send no newsletter. Any change to this policy will be published on this page with a new date at the top.