Privacy policy

Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains how personal data is collected, used, stored and protected when you visit the septsite.com website, create a customer account, place an order, contact us or use the services available through our online store.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, commonly referred to as the General Data Protection Regulation or GDPR, as well as applicable Polish data protection laws.

1. Data Controller

The controller of your personal data is:

SzokArt Anna Mieńko, operating under the Septsite brand
Registered address: swobodna 18/41, 15-756 Białystok, POLAND
Tax Identification Number (NIP): 5422996674
National Business Registry Number (REGON): 200165500
Email: biuro@septsite.pl

For matters concerning your personal data or this Privacy Policy, you may contact us using the email address above or through the contact form available on the website.

2. Personal Data We Collect

Depending on how you use our website, we may process the following categories of personal data:

  • first name and last name,
  • company or business name,
  • billing address and, where applicable, delivery address,
  • email address,
  • telephone number, if provided,
  • Tax Identification Number or VAT number,
  • customer account details and login information,
  • order history and details of purchased products or services,
  • payment and transaction information received from payment service providers,
  • correspondence and information included in support requests,
  • technical data, including IP address, browser type, device information, operating system, website activity and server logs,
  • cookie identifiers and information collected through similar technologies.

We do not normally receive or store complete payment card details. Card and electronic payment information is processed directly by the relevant payment service provider.

3. Purposes and Legal Bases for Processing

3.1 Customer accounts

We process your personal data to create and maintain your customer account, allow you to view your orders, access purchased digital products and manage your account settings.

The legal basis for this processing is Article 6(1)(b) GDPR – processing necessary to perform a contract or take steps at your request before entering into a contract.

3.2 Processing orders and providing digital products

We process your data to accept and fulfil orders, provide access to purchased modules, licences or downloadable files, process payments, issue order confirmations and provide after-sales support.

The legal basis is Article 6(1)(b) GDPR – performance of a contract.

3.3 Accounting and tax obligations

We process information included in invoices, accounting documents and transaction records to comply with tax, accounting and other legal obligations.

The legal basis is Article 6(1)(c) GDPR – compliance with a legal obligation to which the controller is subject.

3.4 Customer service and technical support

We process your contact details, correspondence, order information and technical information to answer questions, process complaints and provide technical assistance concerning purchased products or services.

The legal basis is Article 6(1)(b) GDPR when the request concerns a contract and Article 6(1)(f) GDPR when processing is necessary for our legitimate interest in providing customer service and protecting our business interests.

3.5 Establishing, exercising or defending legal claims

We may process data where necessary to establish, exercise or defend legal claims, prevent fraud, protect the website and investigate potential violations of our terms.

The legal basis is Article 6(1)(f) GDPR – our legitimate interest in protecting our rights, systems, customers and business.

3.6 Newsletter and marketing communication

Where you separately subscribe to our newsletter or agree to receive marketing messages, we may use your email address to send information about new modules, services, updates, promotions and special offers.

The legal basis is Article 6(1)(a) GDPR – your consent. You may withdraw your consent at any time by using the unsubscribe link included in the message or by contacting us.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

3.7 Website security and technical administration

Technical information, including IP addresses and server logs, may be processed to maintain the security and proper operation of the website, diagnose errors, prevent abuse and protect against unauthorised access.

The legal basis is Article 6(1)(f) GDPR – our legitimate interest in maintaining a secure and reliable online store.

4. Providing Personal Data

Providing personal data required during checkout is necessary to place and fulfil an order. Failure to provide the required information may prevent us from completing the transaction or providing the purchased product or service.

Creating a customer account is voluntary unless an account is technically necessary to provide access to a purchased product, licence, update or download.

Providing data for newsletter or marketing purposes is voluntary and is not required to place an order.

5. Recipients of Personal Data

Personal data may be disclosed to trusted service providers that support the operation of our business, including:

  • hosting, server and IT infrastructure providers,
  • payment service providers and banks,
  • accounting and bookkeeping service providers,
  • email and communication service providers,
  • website administration, maintenance and technical support providers,
  • analytics or security service providers, where applicable,
  • legal advisers, insurers, auditors or debt collection service providers, where necessary,
  • public authorities where disclosure is required by law.

These entities process personal data only to the extent necessary to provide their services or meet their legal obligations. Where required, we enter into appropriate data-processing agreements with service providers.

6. International Data Transfers

Some service providers used by the website may process information outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we use safeguards required by applicable data protection law, such as an adequacy decision issued by the European Commission, Standard Contractual Clauses or another lawful transfer mechanism.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

  • customer account data is retained while the account remains active and may be retained afterwards where required for legal claims or compliance obligations,
  • order and contract data is retained for the duration of the contract and until the expiry of applicable limitation periods,
  • invoices and accounting records are retained for the period required by Polish tax and accounting law,
  • customer service correspondence is retained for the time necessary to resolve the request and protect against potential claims,
  • marketing data is processed until consent is withdrawn, an objection is made or the marketing purpose no longer applies,
  • technical logs are retained for the period necessary to maintain security, diagnose errors and prevent abuse.

After the applicable retention period, personal data is deleted or anonymised unless further retention is required by law.

8. Cookies and Similar Technologies

The website uses cookies and similar technologies to ensure its correct operation, maintain user sessions, remember shopping-cart contents, support account login, improve security and remember selected settings.

Cookies used on the website may include:

  • necessary cookies, which are required for the website, shopping cart, customer account and checkout process to function correctly,
  • preference cookies, which remember selected settings such as language or currency,
  • analytics cookies, which help us understand how visitors use the website, where such tools are enabled,
  • marketing cookies, which may be used to measure advertising effectiveness or provide personalised content, where such tools are enabled.

Cookies that are not strictly necessary are used only where permitted by applicable law and, where required, after obtaining your consent.

You may manage your cookie preferences through the cookie settings available on the website or through your browser settings. Restricting necessary cookies may affect the operation of the shopping cart, account login or checkout.

9. Your Rights

Under the GDPR, you may have the right to:

  • request access to your personal data,
  • request correction of inaccurate or incomplete personal data,
  • request deletion of your personal data,
  • request restriction of processing,
  • object to processing based on our legitimate interests,
  • object at any time to the processing of personal data for direct marketing purposes,
  • receive personal data you provided in a structured, commonly used and machine-readable format and request its transmission to another controller, where technically feasible,
  • withdraw consent at any time where processing is based on consent,
  • lodge a complaint with the competent data protection supervisory authority.

These rights may be subject to conditions and limitations set out in the GDPR and other applicable laws. For example, the right to erasure does not apply where processing is necessary to comply with a legal obligation or establish, exercise or defend legal claims.

To exercise your rights, contact us at info@septsite.com. We may ask you to provide additional information necessary to verify your identity.

10. Right to Lodge a Complaint

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office
Prezes Urzędu Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warsaw
Poland

11. Automated Decision-Making

We do not use your personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

Where this changes in the future, we will provide appropriate information and safeguards required by applicable law.

12. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

These measures may include encrypted connections, access controls, software updates, backups, server security mechanisms and limiting access to personal data to authorised persons.

Although we take reasonable steps to protect personal data, no method of transmitting or storing information electronically can guarantee complete security.

13. External Links

The website may contain links to third-party websites or services. We are not responsible for the privacy practices, security or content of external websites. We recommend reviewing the privacy policy of each third-party website you visit.

14. Changes to this Privacy Policy

We may update this Privacy Policy where necessary due to changes in legal requirements, website functionality, services, payment methods or the way personal data is processed.

The current version will always be published on this page together with the date of the latest update. Significant changes may also be communicated through the website or by email where appropriate.

15. Contact

For questions concerning this Privacy Policy or the processing of your personal data, please contact:

SzokArt Anna Mieńko – Septsite
Email: biuro@septsite.pl
Contact form: available on the septsite.com website

Back to top