Legal

Privacy Policy

Last updated: 22 May 2026  ·  Effective from: 1 January 2025

Privacy Policy

This policy explains clearly what personal data FindMe SEO collects, why, and how it's protected. No legal maze — if you have questions, just reach out directly.

Data Controller

Maciej Kowalczyk

Operating as

FindMe SEO

Based in

Poland (GDPR applies)

Who we are

FindMe SEO is operated by Maciej Kowalczyk, a freelance SEO specialist based in Poland. For the purposes of applicable data-protection law (including GDPR), Maciej Kowalczyk is the data controller responsible for the personal data collected through this website.

You can reach the controller at hello@mwkoval.com or via the contact form on this website.

Data we collect

We only collect what's necessary to run this website and respond to your enquiries. This includes:

  • Contact data — name, email address, and any message content you submit through the contact form.
  • Newsletter data — email address when you subscribe to SEO updates.
  • Usage data — pages visited, time on site, browser type, and approximate location, collected automatically via analytics cookies.
  • Technical data — IP address, device type, and operating system, collected by our hosting provider for security and performance purposes.

We never collect sensitive personal data (health, financial, political) and do not use automated profiling or decision-making that produces legal effects.

Why we use your data

Each category of data has a specific, limited purpose:

  • Responding to enquiries — contact data is used solely to reply to your message. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Sending the newsletter — email address used only to send SEO content you opted into. Legal basis: consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.
  • Improving the website — anonymous usage data helps us understand what's working. Legal basis: legitimate interest.
  • Security & fraud prevention — technical data retained by hosting infrastructure. Legal basis: legitimate interest.

Sharing your data

We do not sell, rent, or trade your personal data. We share it only where necessary with:

  • Hosting providers — for website infrastructure and uptime monitoring.
  • Email service providers — to send newsletter emails you subscribed to.
  • Analytics tools — anonymised, aggregated data only (see Cookies section).

All third-party processors are bound by data-processing agreements and may not use your data for their own purposes.

If required by law or a court order, we may disclose data to competent authorities. We will notify you where legally permitted to do so.

Cookies

We use cookies to make the site work correctly and to understand how visitors use it. Here's a plain-language breakdown:

  • Essential cookies — required for the site to function (e.g. session management). Cannot be disabled.
  • Analytics cookies — anonymous usage statistics (e.g. Google Analytics with IP anonymisation enabled). Activated only with your consent.
  • Preference cookies — remember settings like consent choices. Can be cleared in your browser.

You can review and change your cookie settings at any time via the Cookie Settings page or by adjusting your browser preferences. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.

How long we keep data

  • Contact enquiries — retained for up to 2 years from last correspondence, then permanently deleted.
  • Newsletter subscriptions — retained until you unsubscribe. Unsubscribe links are included in every email.
  • Analytics data — aggregated and anonymised; raw logs deleted after 14 months per Google Analytics defaults.
  • Technical / server logs — automatically deleted by our hosting provider after 30 days.

Your rights

Under GDPR you have the following rights regarding your personal data. You can exercise any of them by emailing hello@mwkoval.com. We will respond within 30 days.

  • Access — request a copy of the data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — ask us to pause processing while a dispute is resolved.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Withdraw consent — withdraw any consent given at any time, without affecting prior processing.

You also have the right to lodge a complaint with the Polish supervisory authority (UODO — uodo.gov.pl) or with the supervisory authority in your country of residence.

Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. These include HTTPS encryption for all data in transit, access controls on systems that store personal data, and regular review of third-party processors.

No method of transmission or storage is 100% secure. In the unlikely event of a data breach affecting your rights, we will notify you and the relevant supervisory authority as required by law.

Contact & updates

Questions, requests, or concerns about this policy? We're easy to reach. This policy may be updated periodically — the "last updated" date at the top of this page always reflects the current version.

Questions?

Get in touch directly

No forms, no bots. Real answers from a real person.