Northolt Partners

Privacy policy

Last updated: 30 October 2026.

1. Controller

The controller of personal data is Kacper Woźniak, running a sole proprietorship under the business name Northolt Kacper Woźniak, ul. św. Andrzeja Boboli 63/22, 15-649 Białystok, Poland, registered in the Polish Central Register and Information on Business (CEIDG), tax ID (NIP) 5423454834, REGON 522986416. Northolt Partners is the trade name of this business. Data protection contact: kacper@northoltpartners.com, phone +48 790 889 097, or by post at the address above.

2. What data, why and on what legal basis

• Contact (form, email, phone, call booking): name, company, email address, phone number and message – to reply to your enquiry and correspond with you. Legal basis: the controller’s legitimate interest in communicating with people who contact it (Art. 6(1)(f) GDPR) and, where the enquiry concerns a contract, steps taken at your request before entering into it (Art. 6(1)(b) GDPR).
• Technical data: IP address, browser information and time of visit, processed by the hosting provider in server logs – to keep the site secure and running. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Visit statistics: if collected, only in aggregate, with a tool that sets no cookies and does not identify individuals. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Establishing, exercising or defending legal claims, where needed. Legal basis: Art. 6(1)(f) GDPR.

3. Voluntary provision

Providing data is voluntary, but without an email address or other contact details I cannot reply.

4. Recipients

Data may be shared with providers processing it on my behalf under a data processing agreement:

• Cloudflare, Inc. – website hosting, attack protection and visit statistics,
• Web3Forms – delivering contact form messages to my inbox,
• Google Ireland Limited (Google Workspace) – email and the call booking calendar.

Data may also be disclosed to public authorities where required by law.

5. Transfers outside the European Economic Area

The providers above may process data outside the EEA, including in the United States. Such transfers rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) for certified recipients, or on standard contractual clauses adopted by the Commission (Art. 46(2)(c) GDPR). You can request a copy of the safeguards at the email address above.

6. Retention

• correspondence – while it lasts and up to 12 months after the last message; if a contract is concluded – for the limitation period of claims and the period required by tax law,
• technical data – for the period set by the hosting provider’s rules, as needed for security,
• data processed for legal claims – until the claims become time-barred.

7. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability (where processing is based on a contract), and to object to processing based on legitimate interest (Art. 21 GDPR). You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Automated decisions

Data is not used for automated decision-making, including profiling.

9. Cookies

This site does not store cookies or any other information on your device and uses no third-party marketing tools. Fonts and images are served from the same server as the site.

10. Changes

This policy may be updated. The current version is always available on this page.