Privacy Policy

The controller responsible for the personal data described in this policy is Rondesignlab, a digital experience design agency operating from ul. Gęsia, 31-535 Kraków, Poland.

You can reach us about any privacy matter at [email protected].

Contact and estimate forms. When you submit any form on rondesignlab.com — Say Hello, Request Your Quote, or an embedded contact form — we collect your name and email address, and, depending on the form, your phone number, company, job title, LinkedIn profile, and the project details you choose to share (monthly rate, timeline, goals and similar free-text answers).

Career applications. If you apply through our Career page, we collect your name, email, phone number, portfolio/LinkedIn link, and your résumé/CV file.

Approximate location. We derive an approximate location (country, region, city, postal code, time zone) from your IP address via our hosting provider’s network.

Campaign and referral data. If you arrive via a marketing link, we capture UTM parameters (source, medium, campaign, content, term) and, where applicable, the external site that referred you, and store them in your browser for up to 90 days so a later form submission can be credited to the right campaign.

Usage and analytics data. Through Google Analytics, Google Ads, and the Meta (Facebook) Pixel, we and these providers collect standard analytics/advertising identifiers and events — page views, device/browser information, approximate location, and interactions with our forms. See our Cookie Policy for the full list of trackers and how your consent choice applies to each.

— Performance of a contract, or steps taken at your request before entering one: when you submit a form to request an estimate or a service, we process your data to respond and, where relevant, prepare a proposal.

— Consent: for analytics and advertising cookies/trackers, and for any marketing communications you separately opt into. You can withdraw consent at any time through the cookie banner or by clearing your browser storage.

— Legitimate interests: for basic security and spam prevention on our forms, and for understanding aggregate site usage to improve it, balanced against your rights and freedoms.

We use the data you submit to respond to your inquiry, evaluate and scope potential projects, prepare estimates, and, if you become a client, deliver our services.

Where you’ve consented, we use analytics and advertising data to understand which pages and campaigns bring visitors to the site and to measure the effectiveness of our advertising.

We do not use your personal data for any automated decision-making or profiling that produces legal or similarly significant effects on you.

Zoho CRM — form submissions, including abandoned/partial submissions, are stored as Lead and Partial Lead records in our Zoho CRM, together with the attribution and approximate-location data described above. This is our system of record for leads and clients.

Resend — we use Resend to deliver the email notifications generated when you submit a form; those emails include the content of your submission.

Vercel — our hosting provider, which processes your IP address (including to derive the approximate location above) as part of serving the site.

Google (Analytics, Ads, Tag Manager) and Meta (Facebook Pixel) — see our Cookie Policy for what each collects and how your consent choice applies.

We do not sell your personal data, and we do not share it with anyone for purposes unrelated to operating this site and providing our services.

Rondesignlab is based in the European Union (Poland). Several of the providers listed above — including Vercel, Resend, Google, Meta and, depending on account configuration, Zoho — may process data outside the European Economic Area, including in the United States. Where that happens, we rely on the transfer safeguards each provider offers under GDPR, such as the EU–U.S. Data Privacy Framework or Standard Contractual Clauses.

We currently retain lead and client data in our CRM for 1095 days — as of this draft we do not apply an automatic deletion schedule, so data is kept until you request its deletion.

You can request deletion at any time by emailing [email protected].

Attribution data stored in your browser (UTM parameters and referrer, above) expires automatically after 90 days.

— Access the personal data we hold about you.

— Correct inaccurate or incomplete data.

— Request erasure of your data ("right to be forgotten").

— Restrict how we process your data in certain circumstances.

— Receive your data in a portable, machine-readable format.

— Object to processing based on our legitimate interests.

— Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

— Lodge a complaint with a supervisory authority — for Poland, the Urząd Ochrony Danych Osobowych (UODO), or the data protection authority in your own EU member state.

To exercise any of these rights, contact [email protected]. We will respond within the timeframes required by law.

If you are a California resident, the categories of personal information described above fall under identifiers, commercial/professional information, internet or network activity, and approximate geolocation as defined by the CCPA/CPRA. You have the right to know what we collect, to request deletion, and to request correction of inaccurate information.

We do not sell personal data for money.

This site does not currently detect or automatically honor Global Privacy Control (GPC) browser signals.

We will not discriminate against you for exercising any of these rights.

This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We employ reasonable technical and organizational security measures to protect your personal data, and access to it is limited to the people who need it to do their jobs. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will update the “last updated” date at the top of this page, and where a change is material we will give more prominent notice. We encourage you to review this page periodically.

Questions about this policy or your data: [email protected].