How I look after your data
I only collect what I need to reply to you, deliver what you ask for and keep the records the law requires. I never sell your data.
Who is responsible for your data (the controller)
Veronika Liprtová, brand strategy and websites
Panoší Újezd 41, 270 21, Czech Republic
Email: [email protected]
What I collect and why
| When | What | Why, and the legal basis |
|---|---|---|
| You send the project form | Name, email, website or LinkedIn, the service you’re interested in, budget, your message | To reply and prepare an offer. Steps before a contract (Art. 6(1)(b) GDPR). |
| You enquire about a Website Review (from the website or from your assessment result) | Name, email, website address, notes on what you’d like me to focus on, the language of the page, the price shown and the time you sent it. This is an enquiry only and is sent to me by email | To reply, take the order and deliver the Review. Steps before a contract and performance of the contract (Art. 6(1)(b) GDPR). |
| You pay for the Review | Payment is made on the Wise website. I receive the payment details Wise passes on to me (for example your name, the amount and the date) | To confirm the payment and keep accounting records. Performance of the contract and legal obligation (Art. 6(1)(b) and (c) GDPR). |
| After you pay | Your answers to my short questionnaire and any materials or access you send | To make your Review. Performance of the contract (Art. 6(1)(b) GDPR). |
| You ask for your assessment result by email (optional) | Your email address, your answers to the 20 questions and the language of the page | To create and send you that one email. I do not keep your address or answers myself; the email provider keeps a delivery log (see below). Your consent by submitting the form (Art. 6(1)(a) GDPR). You can withdraw it at any time. |
| You email or message me | Whatever you choose to share | To reply. Legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). |
| You visit the website | Technical data your browser sends, such as IP address, date and time, and the page requested | To deliver the website and keep it secure. Legitimate interest (Art. 6(1)(f) GDPR). These logs are kept by the hosting provider. |
The 20-question Website Assessment runs in your browser. While you take it, your answers stay on your own device (see Cookies and browser storage). They are sent to me or to anyone else only if you ask for the result by email. The Website Review request from the assessment sends only your contact details, website address and notes, not your answers.
I don’t run a newsletter and I don’t send marketing emails. I will only use your email to deal with your request, your order and your result.
Who receives your data
Some providers process data on my behalf or receive it to provide their own service:
- Cloudflare (Cloudflare Pages): hosts this website and keeps technical server logs, such as your IP address.
- Web3Forms: receives what you type into the contact and order forms and forwards it to my email.
- Google (Gmail): my mailbox, where form messages arrive and where I reply to you.
- Wise: takes your payment for the Website Review on its own payment page. Wise handles your payment details under its own privacy policy and is responsible for them; I never see your card or bank details.
- Resend: sends the one-off email with your assessment result, only when you ask for it by entering your address. Your address and your 20 answers are passed to it for that single message. It is not used for newsletters.
- Google Fonts: delivers the typefaces. Your browser connects to Google’s servers directly when the page loads, so Google receives your IP address. The animation code (GSAP) is served from this website itself.
If I start using another payment provider, I will add it here first.
Transfers outside the EU
Some of these providers are based in, or process data in, countries outside the European Economic Area, including the United States. Such transfers rely on a safeguard allowed by the GDPR, for example the European Commission’s adequacy decision for the EU–US Data Privacy Framework or the Standard Contractual Clauses, as set out by each provider. You can ask me for details at [email protected].
How long I keep your data
- Enquiries that don’t lead to an order: 12 months from our last communication, unless another legitimate reason applies (for example, defending a legal claim).
- Orders, payments and invoices: as long as Czech accounting and tax law requires.
- Materials and questionnaire answers for a Review: while the order is carried out and afterwards for as long as needed to handle complaints or legal claims, then deleted.
- Assessment answers in your browser: until you clear them or your browser does.
- Assessment result by email: I do not store your address or answers after the email is sent.
- Server and delivery logs kept by providers (including the delivery log of the email provider): for the periods those providers set.
Your rights
You can ask me at any time to:
- tell you whether I process your personal data, and give you access to it,
- correct it or delete it,
- limit how I use it,
- give you your data in a portable format,
- stop using it where I rely on legitimate interest (you can object),
- withdraw your consent where I rely on it. Withdrawing doesn’t affect what happened before.
Just email [email protected]. I’ll reply within one month.
If you think I’ve handled your data wrongly, you can complain to the Czech data protection authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz, or to the authority in the country where you live or work.
Automated processing
The result and action plan of the Website Assessment are put together automatically from your 20 answers by fixed rules written into the website. It is general guidance, not a decision about you, and it has no legal or similarly significant effect on you. I make no other automated decisions and I don’t profile you.
Other things worth knowing
- I don’t sell or rent your personal data.
- Giving me your data is voluntary, but without the details a form asks for, I can’t reply to you or deliver a Review.
- I may update this policy when my services or tools change. The date at the top shows the latest version.