Privacy Policy

How Unvertical handles your personal data — GDPR-compliant privacy notice.

Last updated: May 10, 2026

This Privacy Policy explains how Unvertical (“we”, “us”, “our”) processes personal data in connection with this website (unvertical.com), in accordance with Regulation (EU) 2016/679 (the “GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.

1. Data controller

The data controller for personal data processed in connection with this website is:

Robert Bałdyga · privacy@unvertical.com · Poland, EU

“Unvertical” is the trade name under which the controller operates this site.

For any matter concerning your personal data — including the exercise of any of your rights described below — please use the email address above.

2. What personal data we collect

We only collect personal data that you voluntarily submit to us through the contact form on this website. The form collects:

  • your name;
  • your email address;
  • your company or organization (optional);
  • the subject area of your inquiry (selected from a list);
  • the content of your message.

We do not use cookies, web analytics, advertising trackers, retargeting pixels, or social-media trackers. We do not collect any personal data passively from visitors who simply browse the site.

We process the data described in section 2 solely to read your inquiry, evaluate it, and respond to it.

The legal basis is:

  • Article 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering into a contract — when your inquiry concerns our products or services; or
  • Article 6(1)(f) GDPR — our legitimate interest in responding to correspondence addressed to us — for any other inquiry.

We do not use your data for marketing, profiling, or any purpose other than handling your inquiry.

4. Form processor — Formspree

Form submissions are routed through Formspree, a service provided by Formspree, Inc. (United States), which acts as our data processor. Formspree receives the data you submit through the form, stores it on our behalf, and forwards it to us by email.

Formspree may retain submissions on its infrastructure in accordance with its own terms and privacy policy: https://formspree.io/legal/privacy-policy/.

Because Formspree is established in the United States, your data is transferred outside the European Economic Area. Such transfers are protected by the EU–U.S. Data Privacy Framework and/or by the Standard Contractual Clauses adopted by the European Commission, as applicable.

5. Other technical processing

  • Hosting. This website is hosted by Zenbox sp. z o.o. (Poland, EU). The hosting provider may retain technical server logs (IP addresses, request timestamps, user agents) for security and operational purposes on our behalf.
  • Web fonts. This site loads typefaces from the Google Fonts service operated by Google Ireland Limited. When your browser loads a font, it connects to Google’s font CDN, which receives your IP address. Google does not set cookies for Google Fonts requests. Google’s privacy notice is available at https://policies.google.com/privacy.

We do not embed advertising, social-media trackers, third-party analytics, comment widgets, or any other third-party scripts.

6. How long we keep your data

We retain contact form submissions for up to 24 months from the date of submission, after which they are deleted from our systems. If a submission leads to an ongoing business relationship, related correspondence may be retained for the duration of that relationship and for any further period required by Polish accounting and commercial law.

7. Recipients

We do not sell, rent, or share your personal data with third parties for their own purposes. The only recipients of your data are:

  • members of our team who handle inquiries; and
  • our processors: Formspree (form delivery), Zenbox (hosting), and the email service we use to deliver responses.

8. Your rights under the GDPR

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR);
  • have inaccurate or incomplete data rectified (Art. 16);
  • have your data erased — the “right to be forgotten” (Art. 17);
  • restrict processing (Art. 18);
  • object to processing based on our legitimate interests (Art. 21);
  • request data portability (Art. 20), where applicable;
  • withdraw consent at any time, where consent is the legal basis (Art. 7(3)), without affecting the lawfulness of processing carried out before withdrawal;
  • lodge a complaint with a supervisory authority (Art. 77). In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, “UODO”), https://uodo.gov.pl/.

To exercise any of these rights, write to privacy@unvertical.com. We will respond within one month of receiving your request, as required by Article 12(3) GDPR.

9. Automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.

10. Children

This website addresses a business audience. We do not knowingly collect personal data from children under the age of 16. If you believe a minor has submitted personal data through this site, please contact us and we will delete it.

11. Changes to this policy

We may update this notice from time to time. The “Last updated” date at the top of this page reflects the most recent change. Where a material change affects data we have already collected, we will communicate it separately where feasible.