Privacy Policy

Last updated: [add publish date]

This Privacy Policy describes how personal data of users of the Wakeup Makeup website, available at wakeupmakeup.pl (the "Service"), run by Aleksandra Łęcka (the "Controller"), operating under Poland's unregistered business activity regime, is processed.

1. Data Controller

Aleksandra Łęcka
ul. Cymbalistów 7P/2, 02-881 Warsaw, Poland
business conducted under Poland's unregistered business activity regime
e-mail: hello@wakeupmakeup.pl

2. What data is collected and why

Personal data is collected in the Service in two situations:

Situation	What data	Purpose	Legal basis
Sending a message via the contact form	name, e-mail address, message content	responding to the inquiry	Art. 6(1)(f) GDPR (legitimate interest of the Controller – contacting people interested in the offer)
Workshop sign-up and payment	first and last name, e-mail, optionally phone number, and data needed to process payment – collected directly by an external booking and payment operator	concluding and performing the workshop participation agreement	Art. 6(1)(b) GDPR (performance of a contract)
Signing up for a free resource (newsletter)	e-mail address – collected through a form handled by an external e-mail service provider	sending the requested free resource and any further e-mail communication	Art. 6(1)(a) GDPR (consent)

Important: workshop sign-ups and payments are handled by an external booking and payment platform. For data submitted directly within that system (booking form, payment), its provider may also act as a controller or processor – see that provider's own privacy policy on their website for details.

3. Who we share data with

Data may be shared with the following categories of recipients, only to the extent necessary for the stated purposes:

external booking and payment operator – handles workshop sign-ups and payments,
external e-mail service provider – handles the free-resource sign-up form and e-mail delivery,
hosting provider hosting the Service – limited to standard server logs (IP address, timestamp, requested page, browser), automatically recorded on every visit to the Service for technical and security reasons,
Google Analytics (Google Ireland Limited) – a tool for analysing Service visit statistics, activated only after consent is given in the cookie banner,
Meta Pixel (Meta Platforms Ireland Limited) – a tool for measuring the effectiveness of ads on Facebook/Instagram, activated only after consent is given in the cookie banner.

The Controller does not sell personal data to third parties. Google Analytics and Meta Pixel are only activated with the User's consent – see section 6 below for details.

4. Data retention period

Contact form data – for as long as necessary to respond to and handle the inquiry, no longer than 12 months from the last contact.
Data related to workshop sign-up and payment – for the period resulting from applicable law (e.g. tax and accounting regulations), usually 5 years counted from the end of the year in which the transaction took place.

5. Your rights

The data subject has the right to:

access their data and receive a copy of it,
rectify (correct) their data,
have their data erased,
restrict the processing of their data,
data portability,
object to processing based on Art. 6(1)(f) GDPR,
lodge a complaint with the President of the Polish Data Protection Authority (UODO), if you believe the processing of your data violates GDPR.

To exercise the above rights, write to: hello@wakeupmakeup.pl.

6. Cookies and external technologies

Fonts and icons used on the Service are hosted locally, on the same server as the website – they are not loaded from external servers (e.g. Google Fonts), so no data is transferred simply by loading the page.

The Service uses (or will use) the following analytics/marketing tools, which store cookies in the User's browser:

Google Analytics – collects anonymised visit statistics (e.g. number of visitors, traffic source, time spent on the site), helping to understand how Users use the Service.
Meta Pixel (Facebook/Instagram) – allows measuring the effectiveness of ads run on Meta platforms and targeting ads to people who visited the Service.

Both tools are activated only after consent is given in the cookie banner shown on the first visit to the Service (legal basis: Art. 6(1)(a) GDPR and Art. 173 of the Polish Telecommunications Law). Consent can be withdrawn or changed at any time – e.g. by clearing cookies in your browser or through the consent settings available on the Service. Lack of consent does not restrict access to the Service's content.

The external system used for sign-ups and payments may use its own cookies necessary for its operation – see that provider's documentation for details.

7. Data security

The Controller applies appropriate technical and organisational measures to protect the personal data processed, adequate to the identified risk.

8. Changes to this Privacy Policy

This Privacy Policy may be updated periodically, in particular due to changes in the law or in the scope of the Service's functionality. The current version is always available at this address.

9. Contact

For matters related to personal data protection, you can contact the Controller at: hello@wakeupmakeup.pl.

This is a starting-point document tailored to your website's functionality (contact form, external booking and payment operator, Google Analytics, Meta Pixel). Before publishing, fill in the missing details (address, tax ID if applicable, domain address) and – where possible – have the text reviewed by a lawyer, especially regarding payment processing. Implementation status: Google Analytics is already active on the site (it only starts after consent is given in the cookie banner); Meta Pixel is not yet installed – once you add it, remember to update this section.