Privacy notice

When you contact us, we process your name, email address, message, any company name you provide, and the time of submission. Name, email, and message are required to use the form; company is optional. Providing this information is voluntary, but without the required details we cannot handle an enquiry through the form. Please include only information needed for your enquiry.

We use these details to respond, discuss your requirements, and manage the resulting correspondence. For steps you ask us to take before entering into a contract with you, the legal basis is Article 6(1)(b) GDPR. For other enquiries, including contact on behalf of a company, it is our legitimate interest in responding to business correspondence under Article 6(1)(f) GDPR.

Vercel processes the form submission on our behalf. Resend delivers its contents to our business inbox, where our email provider also processes the message. Submitting the form does not subscribe you to a newsletter or marketing mailing list.

Our website is hosted by Vercel. Serving pages and handling requests involves technical information such as your IP address, request URL and time, browser information, and diagnostic or security logs. Our legitimate interest in operating a reliable, secure website and preventing misuse is the legal basis for this processing under Article 6(1)(f) GDPR.

Vercel Web Analytics measures visits using page addresses, referrers, timestamps, approximate location, and browser and device information. Speed Insights measures loading speed and responsiveness. These services currently run when you visit the site. We use the reports to understand which content is useful and improve website performance.

Vercel describes its standard analytics as using a request-derived visitor hash instead of third-party cookies, with visitor sessions discarded after 24 hours. This does not mean all statistics are deleted after 24 hours. We do not send contact-form contents to either analytics service or configure identified-user tracking.

The analytics script can check browser local storage for attribution information. We do not enable its optional identification or cookie features. Where measurement involves personal data, our purpose is website improvement and our intended basis is legitimate interests under Article 6(1)(f) GDPR. This basis does not replace any consent separately required for access to information on your device.

People handling enquiries at LUSI and our hosting, email delivery, and mailbox providers receive the information needed for their work. Vercel and Resend use subprocessors to provide their services. Information may also be disclosed where required by law or necessary to establish, exercise, or defend legal claims.

These services can involve processing outside the European Economic Area, including in the United States. Resend states that its primary processing takes place in the United States. The providers’ data processing agreements describe their transfer safeguards, including the European Commission’s Standard Contractual Clauses where applicable. Links to these agreements are below; contact us to request information about safeguards applicable to your data.

The retention period for correspondence is determined by the time needed to handle the enquiry and any resulting business relationship, applicable legal recordkeeping requirements, and the time needed to establish, exercise, or defend claims. A message in our business inbox has a separate retention period from the delivery copy held by Resend.

Resend publishes a 30-day retention period for email and log data on its standard Free, Pro, and Scale plans; Enterprise arrangements can differ. Vercel log and measurement retention depends on the service and account plan. Its 24-hour analytics visitor-session lifetime is separate from the retention of reports. You can contact us about retention or deletion of information relating to you.

Subject to the conditions in the GDPR, you may request access to your personal data, correction, deletion, restriction of processing, and data portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. Contact us using the email address above; we may need information to verify your identity.

You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), or with the competent supervisory authority where you live or work. We do not use your data to make solely automated decisions that have legal or similarly significant effects on you.