Privacy Policy

1. Data Controller

The data controller is Szymon Bubała, operating StoreKite — an AI-powered e-commerce development service. Registered in Poland. Contact for privacy matters: [email protected]. Websites: storekite.ai and storekite.com.

2. What Data We Collect

We collect personal data in the following situations:

Data you provide directly:

• Name, email address, company name, and any other information you submit via our contact form
• Name, email address, company details, and scheduling preferences when you book a discovery call via Cal.com
• Any information you voluntarily share in email correspondence or during calls

Data collected automatically:

• IP address, browser type, operating system, and device type
• Pages visited, time on page, scroll depth, and click patterns
• Traffic source, search queries, and referral URLs

Automatically collected data is gathered through Google Analytics 4 and Vercel Analytics. See Section 5 for details on how these tools handle your data.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): analytics cookies and any optional marketing communications
• Contract performance (Art. 6(1)(b)): processing necessary to deliver services you have engaged us for
• Legitimate interest (Art. 6(1)(f)): website security, fraud prevention, and improving our services based on usage patterns
• Legal obligation (Art. 6(1)(c)): accounting records, invoicing, and tax compliance required by Polish law

4. Purposes of Processing

We use your personal data to:

• Respond to your inquiries, messages, and contact form submissions
• Schedule and conduct discovery calls and project consultations
• Deliver and manage our e-commerce development services
• Issue invoices and maintain required accounting records
• Analyze website traffic and improve our website and services
• Comply with applicable legal obligations

5. Cookies and Analytics

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us provide a better experience.

Essential Cookies

Essential cookies are necessary for the website to function correctly. They enable core features such as session management and security. These cookies cannot be disabled and do not require consent.

Google Analytics 4 (GA4)

We use Google Analytics 4 with IP anonymization enabled to understand how visitors interact with our website. GA4 uses cookies to collect anonymized usage data including pages visited, session duration, and conversion events. Data is processed by Google LLC (USA) under Standard Contractual Clauses. Analytics data is retained for 14 months. You can opt out using the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).

Vercel Analytics

We use Vercel Analytics for website performance monitoring. Unlike traditional analytics, Vercel Analytics does not use cookies and does not store personally identifiable information. It measures Core Web Vitals and page load metrics in an aggregated, privacy-preserving manner. Data is processed by Vercel Inc. (USA).

You can manage cookie preferences at any time through your browser settings. Blocking essential cookies may affect website functionality.

6. Third-Party Services and Data Processors

We work with the following third-party services that may process your personal data on our behalf:

Cal.com (Meeting Scheduling)

When you book a discovery call through our website, you interact with Cal.com's scheduling platform. Cal.com processes your name, email address, and scheduling preferences to book and manage your appointment. Cal.com is GDPR-compliant. For more information, see Cal.com's Privacy Policy at cal.com/privacy.

Google Analytics / Google LLC

Analytics data may be transferred to Google LLC servers in the United States. This transfer is governed by Standard Contractual Clauses as approved by the European Commission. For more information, see Google's Privacy Policy at policies.google.com/privacy.

Vercel Inc. (Hosting)

Our website is hosted on Vercel's infrastructure. Vercel may process server logs and technical request data as part of providing hosting services. For more information, see Vercel's Privacy Policy at vercel.com/legal/privacy-policy.

7. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

• Contact form and inquiry data: 3 years from last contact
• Service agreement and project data: 5 years (required by Polish accounting and tax law)
• Analytics data: 14 months (as configured in Google Analytics 4)
• You may request deletion of your data at any time (subject to legally required retention periods)

8. Your Rights Under the GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access (Art. 15): obtain confirmation and a copy of your personal data we process
• Right to rectification (Art. 16): request correction of inaccurate or incomplete data
• Right to erasure (Art. 17): request deletion of your data ("right to be forgotten")
• Right to restrict processing (Art. 18): request that we limit how we use your data
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format
• Right to object (Art. 21): object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3)): withdraw any consent given at any time without affecting previous processing

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the supervisory authority. In Poland: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

9. International Data Transfers

Some of the third-party services we use (Google Analytics, Vercel) are operated by companies based in the United States. When data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission, or reliance on an adequacy decision such as the EU-US Data Privacy Framework.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the most recent update is displayed at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acceptance of the updated policy.

11. Contact

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact:

Email: [email protected]

Website: storekite.ai / storekite.com