Privacy Policy

Last updated: 27/10/2026

1. Controller

The controller of your personal data is Nethype Sp. z o.o., ul. Mogilska 35, 31-545 Kraków, Poland, entered in the National Court Register (KRS) under no. 0001042291, NIP (VAT) PL6793269650, REGON 525615910. Contact in data protection matters: info@nethype.co or by post to our registered office.

2. Data we collect

• Contact form and enquiries: name, email address, company, store URL, your message and any other data you provide.
• Email correspondence: data contained in messages you send us.
• Analytics data: how you use the site (pages visited, approximate location, device and browser, referral source), collected via cookies – see our Cookie Policy.
• Technical data: IP address and server logs processed by our hosting and security providers.

3. Purposes and legal bases (GDPR)

• Responding to enquiries and preparing offers – Art. 6(1)(b) and (f) GDPR.
• Performing contracts and client service – Art. 6(1)(b) and (f).
• Accounting and tax obligations – Art. 6(1)(c).
• Website analytics – Art. 6(1)(a) (your consent).
• Marketing of our services, including ad measurement – Art. 6(1)(a) or (f).
• Establishing, pursuing or defending legal claims – Art. 6(1)(f).
• Website security and spam protection – Art. 6(1)(f).

4. Retention

• Enquiries that do not lead to a contract: up to 2 years after the last contact.
• Client data: for the duration of the contract and then until claims become time-barred.
• Accounting records: 5 years from the end of the tax year.
• Analytics data: up to 14 months.
• Data processed on the basis of consent: until consent is withdrawn.

5. Recipients

• Webflow, Inc. – website hosting and forms.
• Cloudflare, Inc. – CDN and security.
• Google Ireland Ltd / Google LLC – Google Analytics, Google Ads, Google reCAPTCHA (form spam protection), Google Workspace (email).
• Accounting and IT service providers acting on our behalf.

We do not sell personal data.

6. Cookies

We use necessary, analytics (Google Analytics 4) and marketing (Google Ads) cookies. Non-essential cookies are set only with your consent, which you can change at any time via “Cookie settings” in the footer. Details are in our Cookie Policy.

7. Transfers outside the EEA

Some providers (Webflow, Cloudflare, Google) may process data in the USA. Such transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

8. Your rights

• access to your data and a copy of it,
• rectification,
• erasure,
• restriction of processing,
• data portability,
• objection to processing based on legitimate interest,
• withdrawal of consent at any time (without affecting prior processing),
• lodging a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.

To exercise your rights, email info@nethype.co.

9. Voluntary provision of data

Providing data is voluntary, but without it we cannot respond to your enquiry or conclude a contract.

10. Automated decision-making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects.

11. Changes

We may update this policy. The current version is always available on this page.