Privacy
Last updated 10 November 2026
Canary Design is run by A Man of Few Words Jarosław Ceborski, ul. Opolska 75/6, 52-010 Wrocław, Poland, VAT ID PL9591628751 (“we”). We decide how your personal data is used here. Questions or requests: [email protected].
What we collect, and why
- Visiting this site. We use Umami, a privacy-friendly analytics tool we host ourselves on servers in Amsterdam. It sets no cookies and doesn’t store your IP address. It records pages viewed, the site you came from, your browser, device and country, clicks on our buttons, and where on the page people click and scroll (heatmaps). We use this to improve the site, which is our legitimate interest (GDPR art. 6(1)(f)).
- Writing to us. We use what you send (your name, email and message) to reply and to discuss working together.
- Booking a call. Cal.com handles the booking with the details you enter there, and the call happens on Google Meet.
- Paying. Stripe processes card payments. We receive your name, email, billing details and the payment status, never your full card number. We keep invoices for 5 years, as Polish tax law requires.
- Working together. What you share during a project stays confidential (see our terms). If our work involves personal data you control, we’ll sign a data processing agreement.
Who else handles it
Service providers that run parts of this for us: DigitalOcean and Cloudflare (hosting), Zoho (email), Cal.com (bookings), Google (video calls), Figma (design files), Stripe (payments) and Infakt (invoicing). Some are based outside the EU; they protect transfers with the EU’s standard contractual clauses or the EU–US Data Privacy Framework. We don’t sell your data.
How long we keep it
- Analytics: 12 months.
- Emails: as long as we’re in touch or working together.
- Invoices: 5 years.
Your rights
You can ask to see, correct or delete your data, to limit how we use it, to take a copy of it, or object to our analytics. Write to [email protected]. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO).
Cookies
This site sets none. Stripe’s checkout and Cal.com’s booking page set their own cookies on their own sites.