Privacy Policy

We collect and process the following categories of personal data:

Information You Provide Directly

• •Contact Information: Name, email address, phone number, company name, and job title when you enquire about our services or submit a contact form.
• •Business Information: Details about your organisation, project requirements, and e-commerce operations that you share during consultations.
• •Communication Records: Correspondence and meeting notes from our interactions.
• •Contractual Information: Billing details, payment information, and contract-related documentation for clients.

Information Collected Automatically

• •Technical Data: IP address, browser type and version, time zone setting, operating system, and platform.
• •Usage Data: Information about how you use our website, including pages visited and navigation patterns.

We process your personal data only when we have a valid legal basis to do so. Under Article 6 of the GDPR, we rely on the following grounds:

We use your personal data for the following purposes:

• •Service Delivery: To provide our consulting services, including Polish market entry strategies, payment localisation, logistics setup, and compliance advisory.
• •Communication: To respond to your enquiries, provide information about our services, and maintain our business relationship.
• •Contract Management: To administer contracts, process payments, and maintain accurate records of our engagements.
• •Service Improvement: To analyse how our website and services are used, enabling us to enhance user experience and develop new offerings.
• •Marketing: To send you information about our services that may be of interest to you (where we have a lawful basis to do so).
• •Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• •Security: To protect our website, systems, and data from unauthorised access, misuse, or security threats.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

Retention Periods

• •Client Records: We retain client data for the duration of our business relationship plus 7 years thereafter to comply with Polish accounting and tax regulations.
• •Enquiry Data: If you enquire about our services but do not become a client, we retain your data for up to 2 years unless you request earlier deletion.
• •Marketing Preferences: We retain records of your marketing preferences until you withdraw consent or update your preferences.
• •Website Analytics: Technical and usage data is retained for up to 26 months.

When personal data is no longer required, we securely delete or anonymise it in accordance with our data retention policies and applicable regulations.

We may share your personal data with third parties in the following circumstances:

Service Providers

We engage trusted third-party service providers who process data on our behalf to support our business operations. These include:

• •Cloud hosting and infrastructure providers
• •Email and communication platforms
• •Payment processors
• •Analytics services
• •Professional advisors (legal, accounting)

All service providers are contractually bound to protect your data and may only process it according to our instructions and for the specified purposes.

Legal Requirements

We may disclose your personal data if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, safety, or property, or that of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring organisation. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

Under the GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by the GDPR.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• •Encryption: We use industry-standard encryption (TLS/SSL) to protect data in transit and at rest.
• •Access Controls: Access to personal data is restricted to authorised personnel who require it for legitimate business purposes.
• •Secure Infrastructure: Our systems are hosted on secure, reputable cloud platforms with robust security certifications.
• •Regular Reviews: We regularly review and update our security practices to address emerging threats.
• •Incident Response: We maintain procedures for detecting, reporting, and investigating personal data breaches.

While we take all reasonable precautions to protect your data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any incidents that may occur.

glpd sp. z o.o. is based in Poland, within the European Economic Area (EEA). Your personal data is primarily stored and processed within the EEA.

In some cases, we may transfer your data to service providers located outside the EEA. When we do so, we ensure that appropriate safeguards are in place to protect your data, including:

• •Adequacy Decisions: Transfers to countries that the European Commission has determined provide an adequate level of data protection.
• •Standard Contractual Clauses: For transfers to other countries, we use EU-approved Standard Contractual Clauses to ensure your data receives equivalent protection.
• •Additional Safeguards: Where necessary, we implement supplementary measures such as encryption and access controls to enhance protection.

You may request information about the specific safeguards applied to any international transfers of your data by contacting us.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.

When we make material changes to this policy, we will:

• •Update the "Last updated" date at the top of this page
• •Notify existing clients via email where appropriate
• •Post a prominent notice on our website for significant changes

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of our services after any changes indicates your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

We aim to respond to all enquiries within 5 business days. For data protection requests under the GDPR, we will respond within the legally required timeframe of one month.