Privacy Policy and information about data processing

1. Data controller

The controller of your personal data is Lead Rescue Studio.
Address: [to be completed]
Contact email: [email protected]

2. Data we collect

We collect only the information you provide voluntarily in the enquiry form:

• Company name
• Full name of the contact person
• Website address
• Business email address
• Industry or business type and a description of the situation
• Optionally: a phone number, additional context and your preferred next step

We do not ask for information that is unnecessary to handle your enquiry. We do not collect sensitive data or information about children.

3. Purpose of processing

We process submitted data to:

• Assess your enquiry and check whether the service suits your situation
• Contact you about the services and propose a next step
• Fulfil a service agreement if you decide to proceed

4. Marketing communication consent

If you separately consent to marketing communications, we may send you messages about website improvement, generating sales enquiries, analytics and related services.

This consent is voluntary. Refusing it does not affect how we handle your enquiry. You may withdraw it at any time by emailing the address below.

5. Legal basis

The legal basis for processing is the voluntary consent given in the form under Article 6(1)(a) of the GDPR. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Where processing is necessary to take steps at your request before entering into a service agreement or to perform that agreement, Article 6(1)(b) of the GDPR may also apply.

6. Data sharing and processors

We do not sell your personal data or share it with third parties for marketing purposes.

To provide our services, we may use support from the following types of providers:

• Hosting and infrastructure providers for the website and forms
• Email service providers used to handle enquiries
• Analytics tools, if introduced in the future

Each processor acts on our instructions and in accordance with applicable data protection law.

7. Retention period

We retain data until the enquiry has been handled or consent is withdrawn, but no longer than 12 months from the date of submission unless an active agreement or the law requires a longer period. We then delete or anonymise it.

8. Your rights

In relation to your personal data, you have the right to:

• Access — ask what personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Restriction of processing — ask us to limit how we process your data
• Object — object to further processing of your data
• Withdraw consent — at any time and without giving a reason
• Data portability — where this right applies

To exercise any of these rights, email the address below.

9. Withdrawing consent or requesting deletion

Email: [email protected]
We will delete the data within 7 working days of receiving your request. You may also ask us to stop contacting you without requesting deletion.

10. What we do not do

• We do not sell personal data to third parties
• We do not use your data for profiling or automated decision-making
• We do not collect sensitive data, such as information about health, religion or political views
• We do not collect information about children

11. Cookies

The website may use essential cookies needed for sessions and display preferences. Without your explicit consent, we do not use them to track activity on other websites or for remarketing. You can block cookies in your browser settings — the website will remain fully functional.

12. International transfers

Some infrastructure providers may process data outside the European Economic Area. Where this happens, we use an appropriate transfer mechanism, such as an adequacy decision or standard contractual clauses, as required by law.

13. Personal data contact

For questions about personal-data processing or to exercise your rights, contact:

Email: [email protected]
We respond within 3 working days.

You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) if you believe we process your data in breach of the GDPR.