← Back to website

Legal · GDPR

Privacy Policy

This policy explains how Kleoso Agency (“we”, “us”) collects, uses, stores, and protects personal data when you visit kleoso.com or contact us. Last updated: May 2026.

1. Data controller

The data controller responsible for your personal data is Kleoso Agency, operating at www.kleoso.com.

Contact: Kleoso.agency@proton.me

We are based in Poland and process data in accordance with the EU General Data Protection Regulation (GDPR).

2. What data we collect

We collect only the data necessary to respond to your inquiry or provide our services:

  • Contact form: name, email address, selected service, and message content.
  • Communication: any information you voluntarily provide by email or Telegram.
  • Technical data: standard server logs (IP address, browser type, timestamp) collected by our hosting provider for security and performance.

We do not knowingly collect sensitive personal data unless you explicitly include it in your message.

3. Why we use your data

  • To respond to project inquiries and partnership requests.
  • To prepare proposals, quotes, and deliver contracted services.
  • To maintain website security and prevent abuse.
  • To comply with applicable legal obligations.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. Third-party processors

We use trusted service providers who process data on our behalf:

  • Formspree — contact form delivery and storage.
  • Vercel — website hosting and CDN.
  • Google Fonts — typography delivery (may involve IP transfer to Google).

Each provider is selected for reliability and operates under appropriate data protection agreements where applicable.

6. Data retention

Contact form submissions and related correspondence are retained only as long as necessary to handle your inquiry, maintain business records, or comply with legal requirements — typically no longer than 24 months unless a longer period is required by law or an active project relationship.

7. Your rights under GDPR

If you are located in the European Economic Area, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (“right to be forgotten”).
  • Restrict or object to certain processing.
  • Request data portability where applicable.
  • Withdraw consent at any time (without affecting prior lawful processing).
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email us at Kleoso.agency@proton.me. We will respond within 30 days.

8. Contact & updates

We may update this policy from time to time. Material changes will be reflected on this page with an updated date.

Questions about this policy: Kleoso.agency@proton.me