Privacy notice

Who is responsible for your data

The site is run by TargetX Łukasz Górny, Jana Pawła II 12 lok. 17, 19-300 Ełk, Poland. VAT PL8481745076, REGON 380683898. That business is the controller of anything you send here.

For anything in this notice, write to hello@wldev.co.uk.

What the form collects

The enquiry form asks for your name, your email address, the subject of the enquiry and your message. Nothing else is asked for, and there is no account to create.

Two things are recorded alongside what you type: your IP address and the moment the form was opened. Both exist to tell a person from a script, not to profile anyone.

Why it is used and on what basis

Your details are used to answer the enquiry and to take the steps you asked for before any contract — a price, a date, a signed NDA. Under UK GDPR that is Article 6(1)(b), steps taken at your request before entering a contract, and Article 6(1)(f), the legitimate interest in replying to business enquiries and keeping the form usable.

There is no mailing list, no newsletter and no marketing. Your address is not sold, rented or passed to anyone for their own purposes.

Who else sees it

The spam filter is Cloudflare Turnstile. When you submit the form, a Turnstile token and your IP address go to Cloudflare so it can confirm the submission came from a browser and not a script. Cloudflare acts as a processor for that check.

The message itself arrives in an email inbox and is stored on hosting in Poland. No part of it goes to an advertising network, a CRM or an analytics service.

How long it is kept

To stop one address flooding the form, the server keeps a SHA-256 hash of your IP address for fifteen minutes. The raw address is not stored in that file, and the file is overwritten as the window rolls.

The enquiry itself stays in the inbox for as long as it takes to answer it and, where the enquiry turns into work, for as long as the paperwork for that work has to be kept. Where it does not turn into work, it is deleted after 12 months. Ask sooner and it is deleted sooner, unless tax law requires the invoice behind it to stay.

Cookies and measurement

The site counts page views with Google Analytics 4, loaded through Google Tag Manager. It starts only after the page has finished rendering, or at your first click or keypress, whichever comes first, so it never competes with the content for the browser.

Until you accept, analytics storage is switched off through Google Consent Mode. Google still learns that a page was opened, but no cookie is set and no identifier is carried, so no visit is tied to it or to any other. Accepting switches on that one setting, and Google Analytics then sets its own cookies, named _ga and _ga_ followed by the property identifier, which expire after two years by default.

Advertising storage, ad personalisation and ad user data stay denied whether you accept or not. There is no advertising on this site, no remarketing and no advertising pixel, so nothing here follows you anywhere else.

Your answer is remembered in a cookie named wldev_consent for 180 days. The link in the footer reopens the choice at any time, and declining later stops the measurement from that moment.

Two more cookies have nothing to do with measurement: Cloudflare Turnstile may set a short-lived one as part of the spam check, and the hosting platform may set a technical one that tells a browser from a crawler.

Your rights

You can ask for a copy of what is held about you, ask for it to be corrected or deleted, ask for its use to be restricted, object to it being used, or ask for it in a portable form. Write to the address above and you get an answer within a month.

If the answer does not satisfy you, you can complain to the Information Commissioner’s Office in the UK at ico.org.uk, or to the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych, at uodo.gov.pl.

Where your data goes

The site and the inbox are hosted in Poland, inside the European Economic Area. Cloudflare, used only for the spam check, operates globally and handles that transfer under the standard contractual clauses.

If you accept analytics, Google processes that traffic data outside the European Economic Area, including in the United States, under the transfer safeguards Google publishes for Google Analytics. Nothing you type into the enquiry form is sent to Google.