Privacy Policy

1. Who we are

The controller of personal data collected through this website is Sparkler Soft spółka z ograniczoną odpowiedzialnością, ul. Konduktorska 18, lok. 7, 00-775 Warszawa, Poland. KRS: 0000879740; NIP: 5213918500; REGON: 388038499. For privacy requests, contact hello@sparklersoft.com.

2. Inquiries and correspondence

When you contact us, we process your name, email address, optional company name, project type, budget, timeline, message and the website location from which you opened the form. We use these details to answer your inquiry and discuss potential services. Providing the required form details is voluntary, but we need them to respond. Please do not send passwords or sensitive personal information.

Where you request steps towards a contract with us, the legal basis is Article 6(1)(b) GDPR. For business correspondence, including when you represent another organisation, we rely on our legitimate interest in responding to requests and managing business relationships under Article 6(1)(f).

3. Website operation and security

Our website is hosted on Amazon Web Services EC2 in Frankfurt, Germany. Hosting logs can include IP addresses, request URLs, timestamps, browser information and response codes. We use an IP-based, temporary request limit to reduce spam. Sentry helps diagnose technical errors and may process error details, browser and device information, URLs and technical context. Its default personal-information collection setting is disabled; this does not mean every diagnostic event is anonymous.

We use this information for our legitimate interests in keeping the website reliable, preventing abuse and resolving faults (Article 6(1)(f) GDPR).

4. Email and service providers

Resend sends inquiry notifications to our team and acknowledgement emails to you. Google Workspace hosts our business mailboxes and correspondence. HubSpot stores contact details and inquiry information in our CRM so we can follow up on your request. Submitting an inquiry does not subscribe you to marketing emails. These providers, AWS and Sentry process relevant data to provide their services. Access may also be given to authorised personnel, professional advisers or authorities where necessary to meet legal obligations or protect legal rights. We do not sell your personal data.

Some providers operate internationally, so processing may involve countries outside the European Economic Area. Such transfers must have a valid GDPR basis, such as an applicable adequacy decision or standard contractual clauses with appropriate safeguards. Contact us for information about the safeguards applicable to your data.

5. Optional analytics and maps

Google Analytics is loaded only after you allow Analytics in our privacy settings. It measures visits and interactions, including clicks and form submission events, using cookies and technical information about your browser and device. We do not deliberately send your form message or email address as analytics event data. Advertising storage, advertising user data and ad personalisation are not enabled by our consent configuration.

Google Maps is loaded only after you allow Google Maps. Loading the map connects your browser to Google and may involve its cookies, your IP address and browser information. You can instead follow the external map link, which opens Google directly.

The basis for these optional services is your consent (Article 6(1)(a) GDPR). Both are off by default. Accepting one does not require accepting the other. Use Privacy settings in the footer to change or withdraw consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. For Google’s practices, see its Privacy Policy.

6. Storage and retention

We store your privacy choice in your browser under sparkler-consent-v1 for up to 180 days before asking again. This storage is used to remember your preferences. Clearing your browser storage removes the choice. If browser storage is unavailable, your choice applies to the current page session.

When analytics is allowed, Google Analytics may set cookies such as _ga and _ga_*. Our configuration limits their lifetime to 180 days; Google may refresh them during use. Withdrawing analytics consent disables further collection on this website and removes accessible first-party Google Analytics cookies. We cannot remove cookies held on Google’s own domains.

We keep inquiries and correspondence for as long as needed to handle the request and the resulting business relationship. Records may be retained longer where necessary for legal obligations or the establishment, exercise or defence of legal claims. Technical logs and diagnostic data are retained according to operational needs and the retention settings of the relevant services. Browser cookie expiry does not determine how long a provider retains server-side records. You can contact us to ask about retention or request deletion of your data.

7. Your rights

Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time. Email hello@sparklersoft.com; we may need information to verify your identity. We normally respond within one month, subject to extensions permitted by law.

You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or your local supervisory authority in the EEA. We do not use inquiry data to make solely automated decisions that have legal or similarly significant effects on you.

8. Updates

We may update this policy when the website or our processing practices change. The date above identifies the latest version. Newsletter signup is currently disabled; inquiries do not subscribe you to marketing emails.