Privacy Policy
Last updated: 23 September 2026
1. Data Controller
The controller of your personal data is:
SecureWarp Sp. z o.o., ul. Dobra 10/15, 05-800 Pruszków, Poland
Contact: office [at] securewarp.pl
We have not appointed a Data Protection Officer. For matters relating to the processing of personal data, you may contact us directly at the address given above.
2. Purposes and Legal Bases for Processing
| Purpose of processing | Legal basis | Retention period |
|---|---|---|
| Responding to enquiries submitted via contact form or email | Art. 6(1)(b) GDPR — steps prior to entering into a contract; Art. 6(1)(f) GDPR — legitimate interest of the controller | Up to 2 years from the last contact |
| Performance of a cybersecurity services contract | Art. 6(1)(b) GDPR — necessity for the performance of a contract | Up to 5 years after the end of the contract (tax and archival requirements) |
| Issuing invoices and accounting documentation | Art. 6(1)(c) GDPR — legal obligation (Accounting Act) | 5 years from the end of the tax year |
| Establishment or defence of legal claims | Art. 6(1)(f) GDPR — legitimate interest of the controller | Until the limitation period expires (up to 6 years) |
3. Recipients of Data
Your data may be transferred exclusively to:
- IT service providers — hosting (Cloudflare Pages), email (Microsoft 365). They process data solely on our instructions and on the basis of data processing agreements.
- Public authorities — only when required by law (e.g. tax authorities, courts).
We do not sell, rent or share personal data with third parties for marketing purposes. We do not use external advertising trackers.
4. International Transfers of Data
Data may be processed by Cloudflare, Inc. (USA) on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection.
5. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15) — you may obtain information about the data being processed and a copy thereof
- Right to rectification (Art. 16) — you may request the correction of inaccurate data
- Right to erasure (Art. 17) — you may request the deletion of data when it is no longer necessary
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20) — for data processed automatically on the basis of consent or a contract
- Right to object (Art. 21) — to processing based on legitimate interest
- Right to lodge a complaint — with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland)
Please send requests to exercise your rights to: office [at] securewarp.pl. We will respond within 30 days.
6. Cookies, Browser Storage and Tracking Technologies
The securewarp.pl website does not use advertising cookies, tracking pixels, behavioural analytics tools or any third-party web analytics system. We do not collect or store visit statistics.
Only the following technical mechanisms are used:
| Name | Type | Purpose | Duration |
|---|---|---|---|
__cf_bm | Technical cookie (Cloudflare) | Distinguishing human traffic from bot traffic; abuse protection | 30 minutes |
cf_clearance | Technical cookie (Cloudflare) | Storing the result of a security challenge so that it is not repeated on every request | Up to 1 year |
sw_cookie_ok | localStorage (browser storage) | Remembering that you dismissed the cookie notice. This is not a cookie — it is never sent to the server and remains solely on your device | Until you clear your browser data |
All of the above are strictly necessary for the operation or security of the website and therefore do not require consent. They are not used for profiling or cross-site tracking.
The website is hosted on Cloudflare Pages — Cloudflare may process network connection metadata (IP address, HTTP headers) for network security and CDN purposes, in accordance with its own privacy policy.
7. Data Security
We apply technical and organisational measures proportionate to the risk, including transmission encryption (TLS), access controls, pseudonymisation where possible, and regular security reviews. As a cybersecurity company, we treat data protection as an operational priority.
8. Changes to the Privacy Policy
This policy may be updated in response to legal or technical changes. We will give advance notice of material changes on this page. The date of the last update appears at the top of this document.
9. Contact
For matters relating to personal data protection, please contact the controller: office [at] securewarp.pl