Privacy Policy

1. Who is the data controller?

The controller of your personal data is:
TW Consulting (trading as WebForge Studio)
ul. Romańska 1/3, 01-451 Warszawa, Poland
NIP (Tax ID): 5272599137
Website: webforgestudio.eu
Contact: office@webforgestudio.eu

2. What data do we collect and why?

a) Contact form and enquiries

When you submit the contact form, we collect: name, email address, phone number (optional), website URL (optional), message text, and your stated needs. Legal basis: legitimate interest (Article 6(1)(f) GDPR) — to respond to your enquiry. We do not use this data for marketing unless you explicitly consent.

b) Waitlist sign-ups

If you sign up to be notified about a service (SEO, automations), we collect your email address. Legal basis: consent (Article 6(1)(a) GDPR). You can withdraw consent at any time by clicking unsubscribe in any email.

c) Website analytics (cookieless, no consent required)

We use Plausible Analytics — a privacy-first, self-hosted analytics tool running on our own server (stats.webforgestudio.eu). Plausible does not use cookies, does not store personal data, and does not track visitors across sessions or websites. It collects only aggregated data: page path, referrer, country (derived from IP — IP is never stored), browser type, and device category. Legal basis: legitimate interest (Article 6(1)(f) GDPR). No cookie consent banner is needed. Your data never leaves our infrastructure.

d) Technical data

Our hosting provider (Hostinger) processes your IP address and browser information for security and performance purposes. Legal basis: legitimate interest. We do not store access logs beyond 30 days.

3. How long do we keep your data?

• Contact enquiries: 2 years from the date of the enquiry, or until you request deletion.
• Waitlist emails: Until you unsubscribe.
• Analytics data: Retained in aggregated, anonymised form. No personal data is stored by Plausible; there is no individual-level retention to limit.
• Client project data: For the duration of the contract plus 5 years (for tax/legal compliance).

4. Who do we share data with?

We do not sell your data. We share it only with processors necessary to deliver our services:

• Hostinger — web hosting (EU servers)
• Google LLC — Calendar (meeting scheduling), with EU data processing addendum; transfers outside the EU rely on Standard Contractual Clauses (SCCs)
• Plausible Analytics — self-hosted on our own EU server; no data is sent to Plausible Ltd or any third party

All processors are required to comply with GDPR.

5. Your rights under GDPR

You have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, email office@webforgestudio.eu. We respond within 30 days.

6. Complaints

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the supervisory authority in your country. In Poland, this is the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw. In Germany: www.bfdi.bund.de.

7. Cookies

We use only essential cookies required for the site to function. We do not use advertising, tracking, or analytics cookies. Our analytics tool (Plausible) is entirely cookieless — no consent banner is required. See our Cookie Policy for a full list of cookies used.

8. Changes to this policy

We may update this policy as our services change or to comply with new legal requirements. Material changes will be announced on this page. The "last updated" date at the top reflects the most recent revision.

9. Contact

For any privacy-related questions or requests:
WebForge Studio
Email: office@webforgestudio.eu
Website: webforgestudio.eu