Privacy policy
Effective from 2 November 2026
This is an English translation of the Polish privacy policy. In case of any discrepancy, the Polish version prevails.
1. Data controller
The controller of your personal data is Q&D Tomasz Kordiak, owner of the Czysta Szyba brand (“we”). Address: ul. Feliksa Nowowiejskiego 10b lok. 8, 75-587 Koszalin. Tax ID (NIP): 6692440579.
For anything related to personal data, write to us at kontakt@czysta-szyba.pl.
2. What data we collect
Through the quote form we collect the data you give us:
- your full name and phone number (required),
- your email address, district or address, floor and access details (optional),
- information about the property: type, number of windows, preferred date and your message,
- photos of your windows, if you attach them.
Please make sure the photos do not show people or documents.
3. Purposes and legal basis
- Preparing the quote, arranging the date and providing the service: steps taken at your request before entering into a contract and performing it (Art. 6(1)(b) GDPR).
- Preventing abuse and pursuing claims: our legitimate interest (Art. 6(1)(f) GDPR).
- Tax and accounting obligations, if the service is carried out (Art. 6(1)(c) GDPR).
Providing your data is voluntary, but without your name and phone number we cannot prepare a quote. We do not make automated decisions about you and we do not profile you.
4. Who we share data with
We do not sell data. We use service providers who process it on our behalf:
- partners who carry out the window cleaning in your city (our subcontractors): they receive the data needed to prepare the quote and do the job, i.e. your name, phone number, address, window details and photos,
- Supabase: database and photo storage,
- Lovable: website hosting and sending email notifications,
- Cloudflare: delivering the website and protecting it from attacks,
- Google: the email inbox that receives requests,
- Retell AI: handling calls with the voice assistant on the Polish version of the website, including the recording, transcript and call summary.
All of these entities process data only on our instructions, under data processing agreements (Art. 28 GDPR).
Some of these companies may process data outside the European Economic Area. This is based on a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
5. How long we keep data
- If no job follows: up to 12 months from our last contact.
- If we carry out the service: for the duration of the job, and data needed for accounting for the period required by tax law (usually 5 years).
- Photos of windows: until the quote is prepared and the service carried out, no longer than 12 months.
- Voice assistant recordings and transcripts: until the request is handled, no longer than 12 months.
6. Your rights
You have the right to:
- access your data and receive a copy,
- have your data corrected,
- have your data erased or its processing restricted,
- data portability,
- object to processing based on our legitimate interest,
- lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw).
7. Cookies
We do not use analytics or advertising cookies. Cloudflare may set a technical cookie (__cf_bm) that protects the website from bot traffic and expires after 30 minutes. You can block cookies in your browser settings.
8. Changes to this policy
If we change the way we process data, we will update this page and the effective date shown at the top.