Privacy Policy

Last updated: 12 February 2026

1. Who We Are

The data controller for capitalpacts.com is:

Krystian Sulewski
Kwiatowa 7
41-902 Bytom, Poland
Email: info@capitalpacts.com

2. What Data We Collect

2.1 Data You Provide Directly

When you use our contact form, we collect:

• Your first and last name
• Your email address
• The subject and content of your message

This data is used solely to respond to your enquiry and is not used for marketing purposes without your explicit consent.

2.2 Data Collected Automatically

Like most websites, we may collect certain technical information automatically when you visit, including:

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent on each page
• Referring website
• Date and time of your visit

This data is used only for the purposes of website security, performance monitoring, and improving user experience. It is not used to identify individual visitors.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent – for cookies and any direct marketing communications you opt into.
• Legitimate interests – for website security, analytics, and improving our content.
• Contract performance – when responding to enquiries you initiate.
• Legal obligation – where required to comply with applicable law.

4. How We Use Your Data

We use your personal data for the following purposes:

• Responding to enquiries submitted via the contact form
• Improving the content and functionality of the website
• Monitoring and maintaining website security
• Complying with legal obligations

We do not use personal data for automated decision-making or profiling.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share data in the following limited circumstances:

• Service providers: Trusted third-party companies (e.g., web hosting providers) who assist us in operating the website, subject to data processing agreements.
• Legal requirements: Where required by law, court order, or governmental authority.
• Business transfers: In the event of a merger or acquisition, with appropriate confidentiality protections.

6. Cookies

We use cookies to improve the functionality of our website and to understand how visitors use it. You can manage your cookie preferences via our cookie consent tool. For full details, please read our Cookie Policy.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: retained for up to 24 months, then deleted.
• Website logs: retained for up to 90 days for security purposes.
• Cookie consent records: retained for the duration of the consent period (typically 12 months).

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include HTTPS encryption, access controls, and regular security reviews. However, no transmission over the internet is completely secure and we cannot guarantee absolute security.

9. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data where there is no legal basis for continued processing.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at info@capitalpacts.com. We will respond within 30 days. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO) or your local supervisory authority.

10. International Data Transfers

Our website may be hosted on servers located within the European Economic Area (EEA) or in countries that provide an adequate level of data protection. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Third-Party Links

Our website may contain links to third-party websites for informational purposes. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any external sites you visit.

12. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will indicate the date of the most recent update at the top of this page. We encourage you to review this policy regularly. Continued use of the website following any update constitutes acceptance of the revised policy.

14. Contact

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: info@capitalpacts.com
Post: Krystian Sulewski, Kwiatowa 7, 41-902 Bytom, Poland