WoodItNow
← Back to the site

Privacy policy and cookies

Last updated: 7 October 2026

This page explains what personal data we collect through this website, why we collect it, and what rights you have. We keep it short and plain on purpose.

Who is responsible for your data

The controller of your personal data is PPHU LIMBA Grzegorz Czekalski, ul. Sienkiewicza 17, Ćmińsk, 26-085 Miedziana Góra, Poland, tax number (NIP) PL9590915000. You can reach us at gc@wooditnow.com.

What we collect, why, and on what basis

  • Project enquiries (contact form, email, phone): your name, company or studio, email, phone number if you give it, the description of your project and any drawings or files you send, plus the page you were on when you sent it and, if you accepted the optional cookie, the pages you viewed before. We use them to answer you, prepare a quote and plan the production. Legal basis: taking steps at your request before a contract (Article 6(1)(b) GDPR) and our legitimate interest in business correspondence (Article 6(1)(f) GDPR).
  • Orders and the project portal (once you are our client): name, company, email, and project data such as drawings, delivery dates, photos of the work, and the name and time you give when you confirm a step in the portal. We use them to carry out the contract and keep you informed about production. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and, for invoices and accounting, legal obligation (Article 6(1)(c) GDPR).
  • Accounts for architects and designers: name, studio, email, your password in a scrambled form (we cannot read it) and the time of your last login. We use them so that you can log in and see your projects and your clients' links. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and our legitimate interest in keeping accounts secure (Article 6(1)(f) GDPR).
  • Visitor statistics: when you open a page, our server records which page you viewed, the website you came from, your country (worked out from your IP address), your type of device and browser, and your language. From your IP address and browser details we also create an anonymous visitor code, using a secret value and the date, so that we can count visits. The code changes every day, so we cannot recognise you the next day, and we do not store your IP address. We also count taps on the Call and WhatsApp buttons. Legal basis: our legitimate interest in understanding how the website is used and improving it (Article 6(1)(f) GDPR). If your browser sends a "Do Not Track" signal, we do not set the optional cookie described below.
  • Technical data: our hosting provider processes your IP address, browser type and the time of the visit, to deliver the pages and keep the site secure. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

We do not sell your data and we do not use it for advertising or profiling. Giving us your data is voluntary, but without it we cannot answer your enquiry or deliver an order.

Cookies

The visitor statistics above work without cookies. We ask for your consent for one optional cookie, called vid. It contains a random code and lasts 12 months. It lets us recognise a return visit and see which pages someone viewed before sending an enquiry, so we can improve our offer. We do not use it for advertising and we do not share it. Your choice is saved in your browser, and you can change it at any time with "Cookie settings" at the bottom of every page.

The project portal recognises a project by the code in its address and does not need a cookie for that. If you are an architect or designer with a portal account, we set one strictly necessary cookie, called partner_session, when you log in. It keeps you logged in for up to 30 days and is removed when you log out. We use it for nothing else, so it does not need your consent. To save you typing, the portal also remembers the name you enter when you confirm a step in your browser's local storage on your own device; the name reaches us only when you press the confirm button.

If you tap the WhatsApp button, you leave this website and WhatsApp's own privacy policy applies. The fonts on this website are served from the website itself, not loaded from another company when you visit.

Who receives your data

We use two service providers who process data on our behalf: website hosting (Vercel Inc., USA) and our database, where enquiries and visitor statistics are stored (Supabase, with the database located in the EU, in Frankfurt, Germany). Features such as the project portal will use the same providers. We may also share data with our accountant or legal adviser, and with courts or authorities when the law requires it.

Both providers are companies based in the USA. Where data is transferred outside the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

How long we keep it

  • Enquiries that do not lead to an order: up to 24 months after our last contact.
  • Visitor statistics: up to 14 months. The optional cookie lasts 12 months.
  • Orders and portal data: for the duration of the contract, and afterwards as long as accounting and tax law requires (in Poland, generally five years after the end of the tax year) and as long as claims under the contract are possible.
  • Server logs: a short period set by our hosting provider.
  • Accounts: until you ask us to close the account, and in any case no longer than the cooperation lasts plus the periods above.

Your rights

You have the right to:

  • access your data and get a copy of it;
  • have incorrect data corrected;
  • have your data deleted, or its use restricted, in the cases set out in the GDPR;
  • object to processing based on our legitimate interest;
  • receive the data you gave us in a common machine-readable format.

To use any of these rights, write to gc@wooditnow.com. If you think we handle your data unlawfully, you can complain to the Polish data protection authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa (uodo.gov.pl), or to the authority in your own country.

Changes

If we change how we use your data, for example when we add new features to the website, we will update this page and the date at the top.