Privacy policy
To be reviewed. Before publication, have the text reviewed by a lawyer — this is not legal advice.
Last updated: 1 October 2026
1. Data controller
The controller of your personal data is Piotr Piechota, running a business as Sellerspal Piotr Piechota, tax ID (NIP) 5321958643, under the Vivid Estate brand (“we”). For any data protection matters, write to us at hello@vividestate.ai.
2. What data we collect
We only process the data you give us yourself:
- contact form — your name, company or development, e-mail address, phone number (optional) and your message;
- “Book a consultation” window — your e-mail address and the service you choose;
- correspondence — the data you provide when you e-mail or call us.
3. Purposes and legal basis
We process your data to respond to your enquiry, arrange a consultation and prepare an offer — steps taken at your request before a possible contract (Article 6(1)(b) GDPR). If you contact us on behalf of a company, the basis is our legitimate interest in conducting business correspondence (Article 6(1)(f) GDPR).
You can withdraw the consent given in the contact form (Article 6(1)(a) GDPR) at any time; this does not affect the lawfulness of processing before withdrawal. We may also process data to establish, pursue or defend legal claims (Article 6(1)(f) GDPR).
4. How long we keep your data
Form submissions are stored in the website’s admin panel and delivered to our mailbox. We keep them for as long as needed to handle your enquiry and then for no longer than 12 months from our last contact. If we sign a contract, data related to it is kept for the duration of the contract and for the period required by law (e.g. tax law) or until any claims become time-barred.
5. Who receives your data
We do not sell your data. Access to it is limited to companies that provide services we need to run the website and communicate with you, under data processing agreements: the hosting provider whose servers run the website and store form submissions, our e-mail provider — Google (Google Workspace) — and, where necessary, people who give us technical support. Google may also process data outside the European Economic Area, as described in its data processing terms and privacy policy.
6. Vimeo and YouTube videos
We embed videos from Vimeo and YouTube on project pages and in the showreel section. When a player loads, your browser connects to their servers, which receive your IP address and basic browser information, among other things. We use privacy-enhanced modes: Vimeo videos have “Do Not Track” enabled and YouTube videos are shown in privacy-enhanced mode (youtube-nocookie.com). Vimeo and Google may also process data outside the European Economic Area, as described in their privacy policies.
7. Cookies and analytics
This website does not use analytics or advertising cookies and does not use tracking tools (e.g. Google Analytics, Meta Pixel). Fonts are loaded from our own server, not from Google’s. Cookies are set only by the website’s admin panel, and only for people who log in to it. If we add visitor statistics in the future, we will update this policy and, where required, ask for your consent.
8. Server logs
The hosting server automatically records technical information about visits in its logs (including IP address, date and time, the page visited and browser type). These logs are used only to keep the website secure and working properly (Article 6(1)(f) GDPR) and are deleted after the period set by the hosting provider.
9. Your rights
You have the right to access your data and receive a copy of it, to rectify it, to have it erased, to restrict its processing, to data portability, to object to processing based on our legitimate interest and to withdraw your consent at any time. To exercise these rights, write to hello@vividestate.ai.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl).
10. Do you have to provide your data?
Providing your data is voluntary, but without an e-mail address (and, in the contact form, your name, company and message) we cannot reply to your enquiry. We do not make automated decisions about you and do not profile your data.
11. Changes to this policy
We may update this policy, for example when the services we use change. The current version is always available on this page, with the date of the last update.