Privacy & Cookies

Privacy Policy

Last updated: March 2026

Data Controller

For EU/EEA residents: the UK holds an adequacy decision from the European Commission, meaning it is recognised as providing an equivalent level of data protection to the EU.

What Data We Collect

• Identity data – name, preferred name
• Contact data – email address, phone number
• Communication data – messages sent via contact forms, email, or social media
• Financial data – payment records (processed via third-party payment providers; we do not store card details)
• Technical data – IP address, browser type, device type, pages visited, session duration (collected via analytics tools)
• Marketing data – email engagement data (opens, clicks) if you subscribe to our newsletter

Legal Bases for Processing

• Contract – to deliver services you have purchased
• Legitimate interests – to improve our services, respond to enquiries, and maintain business records
• Consent – for marketing emails and non-essential cookies (you may withdraw at any time)
• Legal obligation – to comply with applicable law, including HMRC requirements

International Transfers

Where we use third-party providers that process data outside the UK or EU/EEA, we ensure appropriate safeguards are in place (adequacy decisions, UK IDTAs, or Standard Contractual Clauses).

Data Sharing

We do not sell your data. We may share it with service providers acting as data processors (email platforms, payment processors, scheduling tools, analytics), professional advisors bound by confidentiality, and HMRC or legal authorities where required by law. All processors are bound by data processing agreements.

Data Retention

• Client and financial records – 6 years from the end of the relevant UK tax year (HMRC requirement)
• Marketing data – until you withdraw consent or request deletion
• Pre-contract inquiry data – up to 2 years from last contact where no contract followed
• Analytics data – per the retention policy of the relevant tool (typically 14–26 months)

Your Rights

Under UK GDPR (and EU GDPR where applicable) you have the right to access, rectify, erase, restrict, or port your personal data; to object to processing based on legitimate interests or for direct marketing; to withdraw consent at any time; and not to be subject to solely automated decisions that significantly affect you.

To exercise any right, contact us at hello@keffect.pl. We will respond within one calendar month. No fee applies to most requests.

Supervisory Authorities

UK residents may complain to the ICO: ico.org.uk | 0303 123 1113

EU/EEA residents may contact their local data protection authority. We will cooperate with the relevant supervisory authority.

Cookie Policy

Last updated: March 2026

Cookies are small text files placed on your device. We use them to make the site work, understand how it’s used, and occasionally for marketing purposes. Below is a full list of the cookies and third-party tools active on keffect.pl.

Cookies We Use

Each provider is responsible for its own data practices. We recommend reviewing their privacy policies independently.

Managing Your Cookie Preferences

You can manage or disable cookies through your browser settings:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Additional opt-outs: Google Analytics opt-out  |  Meta ad preferences. Disabling certain cookies may affect site functionality.

Updates

We update this Cookie Policy whenever we change the tools used on our site. The date at the top of this section reflects the most recent update.