Privacy notice
What happens with the details you leave here
Controller. H2M sp. z o.o., Warsaw, Poland, NIP 5252680451. Contact: maksym@h2mai.com.
What is collected. What you type into the scoping-call form (email, optional phone, the time and the page). If you use the six-step request at /start: the brief, your name, email and phone, the call times you propose, and, only if you choose to add them, a video or voice recording and the files you attach. Where the request came from (UTM parameters, a Google or Meta click id when present, the referring page) is stored with it so I know which page worked.
Payment. The deposit is paid on a Stripe Checkout page. Card details go to Stripe and never reach this site; Stripe sends back only whether the payment succeeded, the amount and a session id. Stripe's own privacy notice applies to the payment itself.
Measurement. The site runs first-party analytics operated by H2M: page views and form events are written to a database under the H2M account (no third-party tracker receives them). Advertising or analytics tags from Google or Meta load only if you give consent in the cookie banner; without consent no third-party tracker runs.
Why, and on what basis. To reply to your request and arrange the scoping call. The legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the box next to the form; you can withdraw it at any time by writing to the address above, which does not affect processing done before the withdrawal.
How long. Until your request is closed, and no longer than 12 months from the last exchange, unless we start working together, in which case the details move to the contract file. Recordings and attachments are deleted with the request; you can ask for them to be deleted earlier at any time.
Who sees it. Only Maksym. The site is hosted on Cloudflare (edge network, EU and worldwide): requests are stored in a Cloudflare D1 database and recordings and files in a private Cloudflare R2 bucket, both under the H2M account. A summary of each request is relayed to a private message channel operated by H2M sp. z o.o., and a confirmation may be emailed to you through a transactional email provider. Fonts are loaded from Google Fonts, which receives your IP address when the page loads. No data is sold or shared for advertising.
Your rights. Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, by email to the address above. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.