Privacy policy
Effective from 10 October 2026
Who processes your data
The data controller is Maciej Trela, who runs Amber Bear in Łódź, Poland. For anything related to your personal data, email contact@amberbear.studio or call 666 860 960.
What I collect and why
Contact form. I collect your name, email address and message. Your IP address, the time of sending and the page you sent it from are recorded along with them. All of this reaches me as an email. I use this data only to reply, prepare a quote and fulfil an order.
The legal basis is Article 6(1)(b) GDPR (steps taken before entering into a contract, and performing it) and Article 6(1)(f) GDPR (my legitimate interest in handling correspondence and protecting the form from abuse).
Spam protection. So that nobody can send hundreds of messages, the server keeps a hash of the IP address (not the address itself) together with sending times for one hour. This allows at most five messages per hour from one address.
Email and phone. If you write or call directly, I process the data you give me for the same purposes and on the same terms.
Orders. To ship an order I need your full name, delivery address and a phone number for the courier.
Server logs. Like any server, it records basic information about visits: IP address, date, the page visited and browser type. These are used for security and general visit statistics. I don't combine them with form data.
Who receives your data
Form data and server logs are stored by OVH, which hosts the website and the amberbear.studio mailbox. If you write to amberbearit@gmail.com, the message is stored by Google. When shipping an order, I pass the delivery details to the chosen carrier. I don't sell data or use it for advertising.
How long I keep it
I keep correspondence for as long as it's needed to handle your enquiry or order. After that, only as long as the law requires (for example tax law) or as long as claims related to an order may arise. The IP hash stops being taken into account after one hour. Server logs are deleted according to the hosting provider's settings.
Cookies and third-party services
This website uses no cookies and no analytics or advertising tools. Fonts, images and scripts all load from the same server, so your browser doesn't connect to other companies. Links to Instagram, LinkedIn, the App Store and Google Play lead to external services with their own privacy policies.
Your rights
You have the right to access, rectify, erase, restrict and port your data. You can also object to processing based on legitimate interest. Just send a message to contact@amberbear.studio.
If you believe I process your data unlawfully, you can lodge a complaint with the Polish data protection authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warszawa).
Do you have to provide data
No. Providing data is voluntary, but without a name and email address I can't reply, and without an address I can't ship an order.