Privacy policy

Who controls your data

The controller of personal data collected through stillform.pl is Maciej Nowak. For anything about your personal data, write to hello@stillform.pl.

What we collect and why

We only collect the data we need for a specific purpose:

• Contact form: your name, email address, subject and message, used to reply to you. The legal basis is our legitimate interest in corresponding with you (Article 6(1)(f) GDPR) or, if you ask about an order, steps taken before entering into a contract (Article 6(1)(b) GDPR).
• Configurator and saved designs: the panel's size, colour and thickness and any artwork you upload for printing. We keep them to show you a preview, save your design under a link and, once sales open, fulfil your order (Article 6(1)(b) and (f) GDPR).
• Basket: a basket identifier stored in a cookie so we remember what is in it (Article 6(1)(f) GDPR).
• Security: your IP address, used to limit the number of requests and protect the site from abuse (Article 6(1)(f) GDPR).
• Analytics and advertising: data about how you use the site, collected by Google and Meta tools – only if you consent in the cookie banner (Article 6(1)(a) GDPR).

How long we keep data

• Contact form messages: up to 2 years after they are sent.
• Artwork files that never reached an order: 30 days after upload.
• Unused baskets: 90 days after the last change.
• IP addresses used to limit requests: 24 hours.
• Data collected with your consent: until you withdraw it or the cookies expire (see the cookie policy).

Who processes data for us

We use external providers who process data on our behalf under data processing agreements:

• Vercel Inc. – website hosting.
• Supabase Inc. – database and file storage on servers in the European Union (Frankfurt).
• LH.pl sp. z o.o. – email.
• Resend, Inc. – sending email from the site.
• Google Ireland Ltd. and Meta Platforms Ireland Ltd. – analytics and advertising, only with your consent.

Transfers outside the European Economic Area

Some providers (Vercel, Resend, Google, Meta) may process data in the United States. This is based on the European Commission's decision on the EU-US Data Privacy Framework or on standard contractual clauses approved by the Commission.

Your rights

You have the right to access your data, have it corrected or erased, restrict its processing and receive it in a portable form, and to object to processing based on legitimate interest. You can withdraw consent at any time in “Cookie settings” in the site footer; this does not affect the lawfulness of earlier processing. To use these rights, write to hello@stillform.pl.

You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw), or with the authority in your own country.

Do you have to give us your data

Giving us your data is voluntary. Without an email address, however, we cannot reply to a message sent through the contact form.

Changes to this policy

Before sales open, we will add the rules for processing data for orders, payments and delivery. We announce changes on this page together with the date the new version takes effect.