Privacy Policy
Effective 1 October 2026 · GDPR Compliant
SmartInsightFlow, with registered office at ul. Świdnicka 22, 50-068 Wrocław, Poland, and electronic contact at [email protected], is committed to protecting the personal data of clients, prospective clients, website visitors, and business partners in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), the Polish Act of 10 May 2018 on the Protection of Personal Data, and other applicable European Union law.
1. Controller Identification
The controller of personal data processed in connection with smartinsightflow.com and the delivery of our business intelligence services is SmartInsightFlow, ul. Świdnicka 22, 50-068 Wrocław, Poland. You may reach our data protection contact at [email protected] for any question regarding privacy, data access, or deletion requests.
2. Categories of Personal Data
We may process the following categories of personal data: identification data (name, job title, company name); contact data (business email address, telephone number, postal address); professional correspondence (project briefs, requirements, messages sent through our contact forms); billing and payment metadata (transaction identifiers, invoice data, billing address); and technical usage data (IP address, browser type, device identifiers, pages viewed, referring URLs, timestamps, cookie identifiers).
3. Purposes and Legal Bases
We process personal data on the following legal bases under Article 6 GDPR: performance of a contract or steps taken at the request of the data subject prior to entering into a contract (Article 6(1)(b)) for responding to project briefs, delivering services, and invoicing; legitimate interests (Article 6(1)(f)) for website security, service improvement, portfolio development, and marketing communications to existing business contacts, always balanced against your rights; and consent (Article 6(1)(a)) where we rely on consent for optional cookies, analytics, or marketing messages—consent may be withdrawn at any time.
4. Sources of Data
Personal data is collected directly from you (through contact forms, email, telephone, meetings, and contractual onboarding), indirectly through the use of our website and linked professional platforms, and from publicly available professional sources such as company websites and professional networking profiles when the business context warrants legitimate outreach.
5. Recipients and Service Providers
Personal data may be shared with trusted service providers acting as processors under written data processing agreements, including hosting providers, email service providers, project management tools, cloud analytics platforms, payment processors (including Stripe), and professional advisors such as lawyers and accountants. Recipients may be established in the European Economic Area; where a transfer outside the EEA is necessary, we apply appropriate safeguards such as Standard Contractual Clauses adopted by the European Commission.
6. International Transfers
We strive to keep personal data within the European Union. Where tools or processors involve transfers to third countries, SmartInsightFlow ensures that adequate safeguards exist, including the EU–US Data Privacy Framework where applicable, Standard Contractual Clauses, or Binding Corporate Rules, and that supplementary technical and organizational measures protect data in transit and at rest.
7. Retention Periods
Personal data collected for pre-contractual inquiries is retained for no longer than 24 months from the last substantive contact, unless a contract is concluded. Contractual and billing records are retained for the duration of the contractual relationship and thereafter for the period required by Polish tax and commercial law (generally 5 years). Website logs and analytics data are retained in aggregated or pseudonymized form for up to 12 months. You may request earlier deletion of your data subject to applicable legal retention obligations.
8. Your Rights
Subject to applicable law, you have the right to: access your personal data (Article 15 GDPR); rectify inaccurate or incomplete data (Article 16); request erasure of your data (Article 17); restrict processing of your data (Article 18); data portability (Article 20); object to processing based on legitimate interests (Article 21); and withdraw consent at any time where processing relies on consent (Article 7(3)).
9. Right to Lodge a Complaint
If you believe your rights under the GDPR have been infringed, you have the right to lodge a complaint with a supervisory authority. For data subjects in Poland, the competent authority is the President of the Office for Personal Data Protection (UODO), Stawki 2, 00-193 Warsaw, Poland. We encourage you to contact us first at [email protected] so we can address your concern directly.
10. Security Measures
SmartInsightFlow implements appropriate technical and organizational measures to secure personal data, including access controls on a need-to-know basis, encryption in transit (TLS), pseudonymization where feasible, regular vulnerability review of production systems, and staff training on confidentiality and data handling procedures.
11. Automated Decision-Making and Profiling
We do not perform solely automated decision-making that produces legal or similarly significant effects on data subjects in connection with our website or service procurement. Where forecasting models underpin commercial insights for our clients, those models operate on client-owned or authorized datasets under contract and are not used for decisions about individuals without human oversight.
12. Children’s Data
Our services are intended for business and enterprise audiences and are not directed at individuals under 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact [email protected] and we will delete such data promptly.
13. Changes to This Policy
SmartInsightFlow may update this Privacy Policy to reflect changes in law, technology, or our processing practices. The current version will be published on this page with a revised effective date. Material changes affecting existing clients will be communicated through reasonable channels.
14. How to Contact Us
For any privacy matter, data access request, or correction request, write to SmartInsightFlow at ul. Świdnicka 22, 50-068 Wrocław, Poland, email [email protected], or call +48 530 819 247 during business hours.