Legal

Privacy Policy

Last updated: 2 July 2026

1. Controller

Secure7 Innovations Sp. z o.o., ul. Erazma Ciołka 17/304, 01-445 Warsaw, Poland (KRS: 0000857729, REGON: 386901920, NIP: PL5272935084).

Privacy enquiries: . We respond within one month. No Data Protection Officer has been appointed; our processing activities do not currently meet the thresholds for mandatory DPO designation under Article 37 GDPR. We will review this as the business grows.

2. What we collect and why

We collect only what is necessary to respond to business enquiries submitted through our contact form: name, company, role, work email address, and message content. Legal basis: our legitimate interests (Article 6(1)(f) GDPR) — to respond to enquiries and develop business relationships.

We do not collect special-category data, payment details, or data relating to minors. We have no user accounts on this website, and operational data from service clients is processed under separate service agreements, not this policy.

3. Processors and recipients

Formspree Inc. (United States) processes contact form submissions on our behalf. Data is transferred outside the EEA under Standard Contractual Clauses (Article 46(2)(c) GDPR). See Formspree's privacy policy.

Cloudflare, Inc. (United States / EU infrastructure) provides website hosting, CDN, and network protection. Cloudflare may process IP addresses as part of normal network operations. Cloudflare is certified under the EU-U.S. Data Privacy Framework and applies Standard Contractual Clauses. Cloudflare Web Analytics is cookieless and collects only aggregated, non-personal traffic data. See Cloudflare's privacy policy.

We do not sell, rent, or share personal data with any other third parties for marketing or commercial purposes.

4. Retention

Contact form submissions are retained for 12 months from receipt. If a business relationship is established, relevant data may be retained for the duration of that relationship and for up to 6 years thereafter, consistent with Polish accounting law obligations.

5. Cookies and tracking

We use only technically necessary cookies set by Cloudflare for network security and performance (e.g. __cf_bm). These are essential to deliver the website and cannot be disabled without affecting functionality. We also use Cloudflare Web Analytics to measure site traffic — it sets no cookies and uses no client-side storage or fingerprinting, and reports only aggregated, anonymized statistics. Neither tool requires consent under Article 173 of the Polish Telecommunications Act, since no non-essential cookie or device storage is used. We do not use tracking cookies, advertising pixels, or any analytics tool that collects personal data.

You can manage cookies through your browser settings. Blocking necessary cookies may affect website functionality. Legal basis: Article 173 of the Polish Telecommunications Act (Prawo telekomunikacyjne).

6. Your rights

Under GDPR you have the right to: access data we hold about you; rectify inaccurate data; request erasure (subject to legal retention obligations); restrict processing; object to processing based on legitimate interests; and data portability where processing is based on consent or a contract.

To exercise any right, contact . You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw — uodo.gov.pl.

7. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

8. Children

This website and our services are directed exclusively at business clients. We do not knowingly process personal data of individuals under the age of 16.

9. Changes

We update the date at the top of this page when changes are made. For material changes we will post a notice on the website.