Privacy Policy

1. Data Controller

The controller of your personal data is:

2. Data We Collect

We collect only the data necessary to provide the Service:

• Account data — your email address and name provided during registration.
• Usage data — pages visited on consentkit.pl, actions taken in the dashboard, feature usage.
• Technical data — IP address, browser type, and operating system collected automatically via server logs.
• Communication data — messages you send us via email.

ConsentKit does notstore consent records collected by your widget on our servers. Consent data is processed and stored entirely on the end user's device or your own infrastructure.

3. Legal Basis for Processing

• Art. 6(1)(b) GDPR — processing necessary for the performance of the contract (providing the Service to registered users).
• Art. 6(1)(f) GDPR — legitimate interest in securing and improving the Service (server logs, usage analytics).
• Art. 6(1)(a) GDPR — your consent, where explicitly given (e.g. optional analytics cookies).

4. Data Recipients

Your data may be shared with:

• Hosting provider — the server infrastructure located at softwhale.pl (EU-based VPS), used solely to operate the Service.
• Email provider — used to send transactional emails (account confirmation, password reset).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Retention Periods

• Account data — retained for the duration of your account plus 30 days after deletion.
• Server logs — retained for 12 months.
• Email communications — retained for 3 years from the date of the last message.

6. Your Rights

Under the GDPR you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data — "right to be forgotten" (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)

To exercise any of these rights, contact us at hello@consentkit.pl. You also have the right to lodge a complaint with the Polish supervisory authority: uodo.gov.pl.

7. International Transfers

All personal data is stored and processed within the European Union. We do not transfer personal data to third countries outside the EEA.

8. Cookies

ConsentKit uses cookies and local storage on consentkit.pl for the following purposes:

We currently use no tracking, advertising, or analytics cookies. If this changes in the future, this policy will be updated with at least 30 days' notice.

9. Policy Changes

We may update this Privacy Policy from time to time. For material changes, we will notify registered users by email at least 30 days before the change takes effect. The "Last updated" date at the top of this page always reflects the most recent revision.

10. Contact

For any questions about this Privacy Policy or your personal data, contact us at: hello@consentkit.pl