Legal
Privacy Policy
Last updated: November 10, 2026
This policy explains what personal data is collected when you visit this website or get in touch with Peak Prospecting, why it is collected, and what rights you have. I process personal data in line with the EU General Data Protection Regulation (GDPR).
This policy covers this website and enquiries submitted through it. Your rights under applicable data protection law are described in section 7.
1. Who is responsible for your data
The controller of your personal data is Hanna Łakota, running a sole proprietorship registered in the Polish Central Register and Information on Economic Activity (CEIDG) under the name PEAK PROSPECTING LEAD GENERATION HANNA ŁAKOTA, based in Warsaw, Poland. Tax ID (NIP): 5252993807. The business operates as Peak Prospecting ("I", "me").
Correspondence address: Hanna Łakota, PO Box 3, Post Office, ul. Jerzego Zaruby 9, 02-796 Warsaw, Poland.
For any question about your data, write to [email protected].
2. What data I collect and why
Contact form and email
When you fill in the contact form or email me, I receive the service you are interested in, your name, email address, company website, company size, target markets, any countries you specify and your message. I use this to reply to you and, if you wish, to prepare and hold our first call.
Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering messages (Art. 6(1)(f) GDPR).
Analytics (only with your consent)
If you click "Accept" in the cookie banner, I use Google Analytics 4 to understand how visitors use this site, for example which pages are viewed, how long a visit lasts and how people arrive here. Google Tag Manager loads and manages the analytics tag. Details are in section 4 below. Legal basis: your consent (Art. 6(1)(a) GDPR, and for storing cookies on your device, the EU ePrivacy rules as implemented in national law). If you click "Reject" or simply ignore the banner, Google Analytics is not loaded at all and no analytics cookies are set.
Technical data
Like every website, the hosting server automatically records basic technical data (such as IP address, browser type and time of the visit) to keep the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
3. Cookies
Cookies are small files stored in your browser. This site uses:
| Type | What it does | How long |
|---|---|---|
| Necessary browser storage | Remembers your cookie choice in local storage as "pp-cookie-consent". This preference is not an analytics cookie. | Until you clear your browser data |
| Analytics: _ga | Google Analytics. Distinguishes one visitor from another with a random ID. Set only after you click "Accept". | Up to 2 years, subject to browser limits and Google settings |
| Analytics: _ga_<ID> | Google Analytics. Keeps track of the current visit (session). Set only after you click "Accept". | Up to 2 years, subject to browser limits and Google settings |
| Security (Cloudflare) | Cloudflare, which hosts the site, may set strictly necessary cookies to protect it from bots and attacks. They are not used for analytics or advertising. | Usually up to 30 minutes, as set by Cloudflare |
Saying no is as easy as saying yes. You can change your mind at any time with the "Cookie settings" link in the footer of every page. If you withdraw consent, analytics stops and the analytics cookies are removed. You can also delete cookies in your browser settings.
4. Google Analytics in detail
- Who provides it: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google LLC and other Google entities as described in Google's privacy and processing terms. Google Tag Manager is used to manage the Google Analytics tag; both load only after analytics consent.
- What is collected: a random visitor ID stored in a cookie, pages viewed, time on the site, the website you came from, approximate location (country and city, derived from your IP address), device type, browser and operating system. Google Analytics 4 does not store or log full IP addresses for visitors in the EU.
- What it is not used for: I don't use Google Analytics for advertising, remarketing or building advertising audiences. The site's consent settings deny advertising storage, ad user data and ad personalization. Contact form names, email addresses and messages are not sent to Google Analytics by the website code.
- Retention: user- and event-level data follow the retention setting in the Google Analytics property (2 or 14 months for standard GA4 properties). Aggregated reports are not covered by that same deletion period. Analytics cookies have the lifetimes described in section 3.
- More information: Google's Privacy Policy and how Google uses data from sites that use its services. You can also block Google Analytics on all websites with the Google Analytics opt-out browser add-on.
5. Who receives your data
This website is hosted by Cloudflare. Contact form submissions are processed by FormSubmit and forwarded to [email protected], which uses Google Workspace for email. The form sends the details you enter, including your name, email, company information and message.
I don't sell your data. It is shared only with service providers that help me run this website and my business, and only to the extent needed: Cloudflare for hosting and delivery, FormSubmit for forwarding contact enquiries, Google Workspace for email, and Google Analytics and Tag Manager after your consent. Each provider processes data under its applicable service and privacy terms.
Some of these providers may process data outside the European Economic Area, for example in the USA. Providers describe their processing locations and applicable transfer safeguards in their privacy and data-processing terms. You can contact me for information about safeguards relevant to your data.
6. How long I keep your data
- Messages and contact details: as long as needed to handle your enquiry, and no longer than 2 years after our last contact, unless we start working together.
- If we sign a contract: for the duration of the contract and afterwards for as long as required by tax and accounting law.
- Analytics: according to the Google Analytics retention settings and cookie lifetimes described above.
- Technical logs: for the period needed for security, troubleshooting and the hosting provider's service operation.
- Withdrawing analytics consent stops future analytics loading; it does not automatically erase data already processed. You may request erasure where the law provides that right.
7. Your rights
Subject to the conditions and exceptions in applicable law, you have the right to:
- access your data and get a copy of it,
- have it corrected or deleted,
- restrict how it is processed,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time, without affecting what was done before,
- lodge a complaint with a data protection authority. In Poland this is the President of the Personal Data Protection Office (Prezes UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw. Information about complaints is available at uodo.gov.pl.
To use any of these rights, write to [email protected].
Giving your data is voluntary, but without an email address I can't reply to your message. I don't use your data for automated decision-making or profiling.
8. Changes to this policy
I may update this policy when the website or the tools I use change. The current version is always available on this page, with the date of the last update at the top.