Privacy Policy

GDPR-compliant privacy notice.

Last updated: August 1, 2026

This Privacy Policy explains how Unvertical sp. z o.o. ("Unvertical", “we”, “us”, “our”) processes personal data in connection with this website (unvertical.com), in accordance with Regulation (EU) 2016/679 (the “GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.

1. Data controller

The data controller for personal data processed in connection with this website is:

Unvertical Spółka z Ograniczoną Odpowiedzialnością (Unvertical Sp. z o.o.)
ul. Hetmańska 25, 15-727 Białystok, Poland
Entered in the Register of Entrepreneurs of the National Court Register (Krajowy Rejestr Sądowy) kept by the District Court in Białystok, XII Commercial Division of the National Court Register, under KRS number 0001249880
NIP 5423516506 · REGON 545082020 · Share capital: PLN 5,000
privacy@unvertical.com

For any matter concerning your personal data — including the exercise of any of your rights described below — please use the email address above.

2. What personal data we collect

We only collect personal data that you voluntarily submit to us through the contact form on this website. The form collects:

  • your name;
  • your email address;
  • your company or organization (optional);
  • the subject area of your inquiry (selected from a list);
  • the content of your message.

We do not use cookies, web analytics, advertising trackers, retargeting pixels, or social-media trackers. We do not collect any personal data passively from visitors who simply browse the site.

We process the data described in section 2 solely to read your inquiry, evaluate it, and respond to it.

The legal basis is:

  • Article 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering into a contract — when your inquiry concerns our products or services; or
  • Article 6(1)(f) GDPR — our legitimate interest in responding to correspondence addressed to us — for any other inquiry.

We do not use your data for marketing, profiling, or any purpose other than handling your inquiry.

4. Form processor — Formspree

Form submissions are routed through Formspree, a service provided by Formspree, Inc. (United States), which acts as our data processor. Formspree receives the data you submit through the form, stores it on our behalf, and forwards it to us by email.

Formspree may retain submissions on its infrastructure in accordance with its own terms and privacy policy: https://formspree.io/legal/privacy-policy/.

Because Formspree is established in the United States, your data is transferred outside the European Economic Area. Such transfers are protected by the EU–U.S. Data Privacy Framework and/or by the Standard Contractual Clauses adopted by the European Commission, as applicable.

5. Other technical processing

  • Hosting. This website is a static site hosted on GitHub Pages, a service provided by GitHub, Inc. (United States), a subsidiary of Microsoft Corporation. When your browser requests a page, GitHub receives technical connection data — your IP address, the time of the request, and your user agent — and may log it to serve the site and to maintain the security and integrity of its service. GitHub processes this data under its own responsibility, not on our instructions; we do not receive, access, or store these server logs. GitHub’s privacy statement is available at https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement.

    Because GitHub is established in the United States, serving this website involves a transfer of that technical data outside the European Economic Area. Such transfers are protected by the EU–U.S. Data Privacy Framework and/or by the Standard Contractual Clauses adopted by the European Commission, as applicable.

  • Web fonts. This site loads typefaces from the Google Fonts service operated by Google Ireland Limited. When your browser loads a font, it connects to Google’s font CDN, which receives your IP address. Google does not set cookies for Google Fonts requests. Google’s privacy notice is available at https://policies.google.com/privacy.

We do not embed advertising, social-media trackers, third-party analytics, comment widgets, or any other third-party scripts.

6. How long we keep your data

We retain contact form submissions for up to 24 months from the date of submission, after which they are deleted from our systems. If a submission leads to an ongoing business relationship, related correspondence may be retained for the duration of that relationship and for any further period required by Polish accounting and commercial law.

7. Recipients

We do not sell, rent, or share your personal data with third parties for their own purposes. The only recipients of your data are:

  • members of our team who handle inquiries;
  • our processors: Formspree (form delivery) and the email service we use to deliver responses; and
  • GitHub, Inc., which hosts this website and handles the technical connection data described in section 5 under its own responsibility.

8. Your rights under the GDPR

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR);
  • have inaccurate or incomplete data rectified (Art. 16);
  • have your data erased — the “right to be forgotten” (Art. 17);
  • restrict processing (Art. 18);
  • object to processing based on our legitimate interests (Art. 21);
  • request data portability (Art. 20), where applicable;
  • withdraw consent at any time, where consent is the legal basis (Art. 7(3)), without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with a supervisory authority (Art. 77). In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, “UODO”), https://uodo.gov.pl/.

To exercise any of these rights, write to privacy@unvertical.com. We will respond within one month of receiving your request, as required by Article 12(3) GDPR.

9. Automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

10. Children

This website addresses a business audience. We do not knowingly collect personal data from children under the age of 16. If you believe a minor has submitted personal data through this site, please contact us and we will delete it.

11. Changes to this policy

We may update this notice from time to time. The “Last updated” date at the top of this page reflects the most recent change. Where a material change affects data we have already collected, we will communicate it separately where feasible.