Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your information in compliance with GDPR and applicable data protection laws.

Last updated: February 2026

1. Introduction

This Privacy Policy explains how Pluscode Sp. z o.o. ("Pluscode", "we", "us", or "our"), with its registered office at Kosowska 12/3, 60-464 Poznań, Poland (KRS: 0000811470, NIP: PL7812002984, REGON: 384741150), collects, uses, discloses, and safeguards your personal data when you visit our website (pluscode.io) or use our services. We are committed to protecting your privacy and ensuring transparency in how we handle your information. This policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect several types of information to provide and improve our services. Personal Information: When you fill out a contact form, subscribe to our newsletter, or communicate with us, we may collect your name, email address, phone number, company name, job title, and project details. Technical Data: We automatically collect certain information when you visit our website, including your IP address, browser type and version, device information, operating system, referral source, pages visited, time spent on pages, and click patterns. Communication Data: We retain records of correspondence when you contact us via email, contact forms, or other channels. This includes the content of your messages and any attachments.

3. How We Use Your Information

We use the information we collect for the following purposes: Service Delivery - to provide, maintain, and improve our software development and consulting services; Communication - to respond to your inquiries, send project updates, and provide customer support; Marketing - with your consent, to send you newsletters, promotional materials, and information about our services; Analytics - to understand how visitors use our website and to improve user experience; Legal Compliance - to comply with applicable laws, regulations, and legal processes; Security - to detect, prevent, and address technical issues, fraud, and security threats. We process your data based on legitimate interests, contractual necessity, legal obligations, or your explicit consent, depending on the specific processing activity.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: encryption of data in transit using TLS/SSL protocols; secure data storage with access controls and authentication; regular security assessments and penetration testing; employee training on data protection and security practices; incident response procedures for potential data breaches. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protection measures.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect analytical data. Essential Cookies: Required for basic website functionality, including session management and security features. These cannot be disabled. Analytics Cookies: Help us understand how visitors interact with our website through services like Google Analytics. This data is anonymized and used to improve our site. Marketing Cookies: Used to track visitors across websites and display relevant advertisements. These are only activated with your explicit consent. You can manage your cookie preferences through your browser settings or our cookie consent banner. Most browsers allow you to block or delete cookies, but this may affect website functionality.

6. Third-Party Services

We may share your information with trusted third-party service providers who assist us in operating our business. These include: Cloud hosting providers (for website and data hosting); Email service providers (for communication and marketing); Analytics services (for website performance analysis); Payment processors (for transaction processing); CRM systems (for customer relationship management). All third-party providers are contractually obligated to protect your data and use it only for the specified purposes. We do not sell your personal information to third parties.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Contact form submissions and inquiries are retained for up to 3 years after our last interaction. Newsletter subscriptions are retained until you unsubscribe. Project-related data is retained for the duration of our business relationship and for 7 years thereafter for legal and accounting purposes. Analytics data is retained in anonymized form for up to 26 months.

8. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data: Right of Access - request a copy of your personal data we hold; Right to Rectification - request correction of inaccurate or incomplete data; Right to Erasure - request deletion of your personal data ("right to be forgotten"); Right to Restriction - request limitation of processing of your data; Right to Data Portability - receive your data in a structured, machine-readable format; Right to Object - object to processing based on legitimate interests or direct marketing; Right to Withdraw Consent - withdraw consent at any time where processing is based on consent. To exercise any of these rights, please contact us using the details provided below. We will respond to your request within 30 days.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including: Standard Contractual Clauses approved by the European Commission; adequacy decisions by the European Commission; or other legally recognized transfer mechanisms. We take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

10. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your data, please contact us at: Pluscode Sp. z o.o., Kosowska 12/3, 60-464 Poznań, Poland. Email: contact@pluscode.io, Phone: +48 667 688 927. Data Protection Contact: Dawid Kubicki (CEO) - contact@pluscode.io. You also have the right to lodge a complaint with the Polish Data Protection Authority (Prezes Urzędu Ochrony Danych Osobowych - UODO) if you believe your data protection rights have been violated.