1. Data controller

The controller of your personal data is codeAmore Marcin Kożuchowski, Lisów 27a, 21-100 Lubartów, Poland, Tax ID (NIP) 7142057870, email: contact@codeamore.com.

2. What data we process and why

• Contact form: email address (required), name, phone number, selected service, and message content — purpose: responding to your inquiry and preparing a quote — legal basis: Art. 6(1)(b) and (f) GDPR.
• Anti-bot verification (Cloudflare Turnstile): IP address and technical browser signals — purpose: protecting the contact form from spam and bots — legal basis: Art. 6(1)(f) GDPR (legitimate interest).
• Website analytics (PostHog), only after you give consent: pages visited, interactions with the site, device and browser type, approximate location — purpose: visit statistics and improving the site — legal basis: Art. 6(1)(a) GDPR (consent).
• Cookie consent record: your choice (yes/no) and the date it was given, stored locally in your browser — purpose: remembering your preferences — legal basis: Art. 6(1)(f) GDPR.

3. Who we share data with

Your data is only used by trusted service providers who help us run the website:

• OVH — website and email server hosting (Warsaw, Poland).
• Cloudflare, Inc. — Turnstile anti-bot verification; as a US-based company, it may process data outside the EEA under Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.
• PostHog — website analytics, data processed on servers within the European Union (Frankfurt).

4. How long we keep data

Contact form messages are kept for as long as needed to handle your inquiry, and no longer than the applicable statute-of-limitations period for potential claims. Analytics data is kept until you withdraw consent, in accordance with our PostHog account settings. The cookie consent record is kept until you change your decision.

5. Your rights

In connection with the processing of your personal data, you have the right to:

• access your data and receive a copy of it,
• rectify (correct) your data,
• request erasure of your data,
• restrict processing,
• object to processing,
• data portability,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with the President of the Polish Data Protection Authority (UODO) (ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, email: kancelaria@uodo.gov.pl).

6. Cookies

Our website uses the following cookies and similar browser-storage technologies:

• cookie-consent (localStorage, essential) — stores your cookie consent choice; removed when you change your decision.
• ph_* (PostHog, localStorage/cookie, analytics, only after consent) — identifier used for visit analytics, stored for up to 1 year.
• Cloudflare Turnstile cookies (essential, security) — last for the duration of the verification session.

7. Managing your consent

You can withdraw or change your analytics consent at any time in the cookie settings, available in the site footer under the "Cookie Settings" button.

8. Voluntary provision of data and no profiling

Providing data in the contact form is voluntary, but necessary for us to respond to your inquiry. We do not use automated decision-making or profiling that produces legal effects.

9. Data security and changes to this policy

Connections to our website are encrypted (HTTPS/TLS), and access to data is limited to those who need it to provide our services. This policy may be updated from time to time — the current last-updated date is shown at the top of this page.