Privacy policy

1. General information

This Privacy Policy explains how we collect, use and protect personal data provided by Users in connection with the use of the sova-agency.co.uk website (hereinafter: the „Site").

We are based in Poland and we offer our services to people in the United Kingdom. Where we process the personal data of people in the UK, we do so in accordance with the UK GDPR and the Data Protection Act 2018. Our use of cookies and similar technologies is also governed by the Privacy and Electronic Communications Regulations 2003 (PECR).

2. Who is responsible for your data

The controller of your personal data is Euforia s.c., ul. Sienkiewicza 25, 44-240 Żory, Poland (company registered in Poland, VAT ID: 651-169-35-91), e-mail: iod@sova-agency.pl, tel.: +48 790 770 991.

For any question about how we handle your personal data, please write to iod@sova-agency.pl.

3. What we use your data for, and on what basis

We process personal data for the following purposes:

• Answering your enquiry sent through the contact form, by e-mail or by telephone — our lawful basis is your consent, given by getting in touch with us (Article 6(1)(a) UK GDPR).
• Keeping a record of correspondence we receive and send, in case we later need to show how an exchange went — our lawful basis is our legitimate interests in managing our business and defending our position (Article 6(1)(f) UK GDPR).
• Measuring how the Site is used, so we can improve it — our lawful basis is your consent, given through the cookie banner (Article 6(1)(a) UK GDPR).
• Marketing and remarketing — our lawful basis is your consent (Article 6(1)(a) UK GDPR).

Where we rely on consent, you are free to refuse it and free to withdraw it later. Where we rely on legitimate interests, you have the right to object — see section 11.

4. Contact form

When you use the contact form on the Site, you give us your e-mail address, your telephone number and the content of your message. Submitting the form requires your consent to us processing that data in order to deal with your enquiry.

You can withdraw that consent at any time by writing to iod@sova-agency.pl. Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it.

5. Information collected automatically

While you use the Site, the following technical information is collected automatically:

• IP address,
• browser type and version,
• operating system,
• screen resolution,
• time of your visit and the pages you viewed,
• how you reached the Site (referring address).

We use this information for statistics and to keep the Site working properly and securely. An IP address can be personal data under the UK GDPR — we process it on the basis of our legitimate interests (Article 6(1)(f) UK GDPR) in the security and correct functioning of the Site.

6. Cookies

The Site uses cookies — small text files stored on your device. We use them to:

• keep the Site working correctly (strictly necessary cookies),
• measure traffic and how the Site is used (analytics cookies),
• carry out marketing and remarketing (marketing cookies).

Strictly necessary cookies are set without consent, as PECR permits. Analytics and marketing cookies are only set once you have given your consent through the cookie banner shown on your first visit. The banner lets you:

• accept all cookies,
• refuse analytics and marketing cookies,
• choose which categories you allow,
• change your choice at any time.

Refusing analytics and marketing cookies does not affect the basic working of the Site. You can also manage or delete cookies in your browser settings at any time.

7. Analytics and marketing tools

We use the following third-party tools on the Site. None of them runs before you have given the relevant consent.

Google Analytics 4 (GA4)

A web analytics service provided by Google Ireland Limited. GA4 uses cookies to collect information about how the Site is used (pages visited, time of visit, traffic source). It anonymises IP addresses, but does collect pseudonymised session and device identifiers.

More information: https://policies.google.com/privacy

Meta Pixel (Facebook Pixel)

An analytics and advertising tool provided by Meta Platforms Ireland Limited. We use it to measure how our advertising performs, to build audiences and to run remarketing. It may collect information about what you do on the Site.

Managing your ad settings: https://www.facebook.com/settings/?tab=ads

More information: https://www.facebook.com/privacy/policy

Microsoft Clarity

A tool for understanding how visitors use the Site (heatmaps and session recordings), provided by Microsoft Ireland Operations Limited. Clarity masks the text typed into form fields by default. It collects device and browser information, location (country), interactions with the Site and a recording of how the visit proceeded. It runs only after you consent to marketing cookies.

More information: https://privacy.microsoft.com/privacystatement

8. Who we share your data with

Your data may be shared with the following organisations, which process it on our behalf or as independent controllers:

• Marcin Ćwiertnia JC HOST.PL, ul. Wspólna 11, 32-085 Modlniczka, Poland — hosting of the Site and our mailboxes.
• Google Ireland Limited — in connection with Google Analytics 4.
• Meta Platforms Ireland Limited — in connection with Meta Pixel.
• Microsoft Ireland Operations Limited — in connection with Microsoft Clarity.

We do not sell your personal data, and we do not share it with third parties for their own marketing without your consent.

9. Sending data outside the UK

We are based in Poland, so personal data you give us is transferred out of the United Kingdom to Poland, where it is stored and handled.

Poland is part of the European Economic Area, which the UK government has recognised as providing an adequate level of protection for personal data. Transfers on that basis are permitted under Article 45 UK GDPR and require no further safeguards.

The providers named in section 8 may also process data outside the UK and the EEA. Where they do, they rely on their own transfer mechanisms — the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision. Details are in their privacy notices, linked in section 7.

You can ask us for more information about any of these transfers, and about the safeguards that apply, by writing to iod@sova-agency.pl.

10. How long we keep your data

• Contact form and correspondence — until the exchange is concluded. We may keep it for longer where the exchange justifies it, for example so we can show what was agreed.
• Analytics cookies — for the lifetime of the individual cookies (typically up to 2 years), or until you delete them.
• Marketing cookies — until you withdraw consent or delete the cookies.

Where we rely on your consent, we stop processing when you withdraw it. Where we rely on legitimate interests, we stop when you object successfully.

11. Your rights

Under the UK GDPR you have the following rights over your personal data. They are free to exercise, and we will respond within one month.

• The right to be informed — to know how we use your data, which is what this policy is for.
• The right of access — to get a copy of the personal data we hold about you.
• The right to rectification — to have inaccurate or incomplete data corrected.
• The right to erasure — to ask us to delete your data where there is no good reason for us to keep it.
• The right to restrict processing — to ask us to store your data but stop using it.
• The right to object — to object to processing based on our legitimate interests. You should tell us about your particular situation. We will stop unless we can show compelling grounds that override your rights, or we need the data for legal claims.
• The right to data portability — to receive the data you gave us in a structured, commonly used, machine-readable format.
• The right to withdraw consent — at any time, without affecting anything we did lawfully beforehand.

To exercise any of these rights, write to iod@sova-agency.pl. We may need to confirm your identity first.

If you are unhappy with how we have handled your personal data, you can complain to the Information Commissioner’s Office (ICO), the UK supervisory authority: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, helpline 0303 123 1113, https://ico.org.uk. We would ask you to raise it with us first, so we have a chance to put things right.

12. Do you have to give us your data?

Giving us your details in the contact form is voluntary, but we need them to answer your enquiry. Without them we cannot reply.

Information collected automatically (cookies, technical data) depends on your cookie choices and your browser settings, and you can change both at any time.

13. Keeping your data secure

The Site is served over an encrypted connection (HTTPS), and data sent through the contact form is transmitted over that connection. We limit access to enquiries to the people who need it to reply to you, and we require our providers to keep the data secure on our behalf.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the date shown at the end of the document. Where a change materially affects how we use your data, we will take reasonable steps to bring it to your attention.

Contact us about your personal data:
Euforia s.c., ul. Sienkiewicza 25, 44-240 Żory, Poland
E-mail: iod@sova-agency.pl | Tel.: +48 790 770 991

Last updated: 28 July 2026