Privacy policy

Last updated: 30 September 2026

This page explains what personal data I collect through tykkydesign.com, why, and what your rights are. I keep it short, because I collect very little.

Who is responsible for your data

What I collect and why

The contact form. When you book a Digi-check or send a message, I receive your name, email address and, if you add them, your business or website and your message. I use this only to reply to you, arrange the Digi-check and, if we agree to work together, prepare an offer.

• Legal basis: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR), and my legitimate interest in answering messages sent to me (Art. 6(1)(f) GDPR).
• The form is not stored in a database. It is forwarded to my mailbox as an email.

Email. If you write to me directly, I receive your email address and whatever you include in the message, and use it the same way.

Visit statistics. I use Cloudflare Web Analytics to see how many people visit the site and which pages they read. It does not use cookies, does not track you across sites and does not identify you.

I don't use advertising, tracking pixels or marketing cookies, and I never sell or share your data for marketing.

Cookies and third-party requests

This site does not set any cookies. Fonts and all other files are served from tykkydesign.com itself. The only other request goes to Cloudflare's cookie-free statistics script (see below). Your visit doesn't send your IP address to Google or to advertising networks.

Who else processes the data

I use a few service providers to run the site and my email. They process data on my behalf and only as needed to provide their service:

• Cloudflare, Inc.: hosting, security, the contact form and cookie-free visit statistics.
• Google: my email inbox (Gmail), where form messages and emails arrive.

Some of these providers may process data outside the European Economic Area. In that case the transfer is protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long I keep it

• Messages that don't lead to a project: up to 12 months after our last contact, then deleted.
• If we work together: for as long as the project lasts, and afterwards as long as tax and accounting law requires me to keep business documents (in Poland, usually 5 years from the end of the tax year).

Your rights

You can ask me to show you the data I have about you, correct it, delete it, restrict how I use it, or send it to you in a portable format. You can also object to processing based on my legitimate interest. Just email hello@tykkydesign.com, and I'll reply within one month at the latest.

You can also lodge a complaint with a data protection authority: in Poland the President of the Personal Data Protection Office (UODO), or in the country where you live, for example in Finland the Data Protection Ombudsman.

Changes

If anything here changes, I'll update this page and the date at the top.