Privacy policy.

The controller of your data is Tomasz Krygowski, a sole trader operating as Northern Lights Tomasz Krygowski, ul. Chmielna 73B lok. 14, 00-801 Warszawa, Poland, tax ID (NIP) 6842525717. For any question about your data, write to tomek@nlights.pl.

I only collect what you give me when you describe your project.

• The “Describe your project” form: your name and email address and, if you provide them, your company, phone number, project description, budget, deadline and the address of your current website. Name and email are needed so that I can reply; everything else is optional.
• An email: your address and whatever you write.

I use this data to answer your enquiry, prepare a quote and, if you decide to work with me, to conclude and perform the contract. The legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (my legitimate interest in handling correspondence and defending against claims). If we work together, I also process invoice data because tax law requires it (Article 6(1)(c) GDPR).

I do not send newsletters, build profiles or make automated decisions.

The website uses no cookies, no analytics and no third-party scripts, and stores nothing in your browser. The form does not keep your answers on a server: they become a single email delivered to my inbox.

• Cloudflare, Inc. (website hosting and form handling). On every visit the server receives technical data such as your IP address, browser type and the page requested; this is needed to display the site and protect it from abuse. Cloudflare may process data outside the European Economic Area under the Data Privacy Framework and standard contractual clauses.
• dhosting.pl Sp. z o.o., ul. Pamiętna 14B/2, 02-972 Warsaw, Poland (the mail server that sends the form message and the mailbox that receives correspondence).
• An accounting office, if we work together and an invoice is issued.

I do not sell your data or share it with anyone for marketing purposes.

I keep correspondence for as long as we discuss the project and, if we do not work together, for no longer than 12 months after the last message. If we do work together, I keep the data for the duration of the contract and until claims become time-barred, and accounting documents for 5 years from the end of the tax year.

You can ask for access to your data, its correction, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. A message to tomek@nlights.pl is enough. You can also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (uodo.gov.pl).

If the way this website works changes, I will update this policy and the date at the top.