Privacy Policy

Expert Hub Client Profitability Support
Effective Date: March 2025 | Version 1.0

1. Data Controller — Who We Are

This Privacy Policy explains how EXPERT HUB CLIENT PROFITABILITY SUPPORT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (hereinafter "Company", "we", "us", or "our") collects, uses, stores, and protects personal data in connection with your use of our website at client-profitability.support and our services.

We act as the Data Controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation — "GDPR").

Registered address: Hoża 29, 00-521 Warszawa, Poland
KRS: 0001055511 | NIP: 7011162359 | REGON: 526243698
Data Protection contact email: mary.t@client-profitability.support

2. What Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal data:

2.1 Identification and Contact Data

Full name
Email address
Telephone number
Company name and position (for B2B clients)

2.2 Billing and Financial Data

Payment card details (processed and stored exclusively by Stripe — we do not store card numbers)
Invoice and billing address
Transaction history

2.3 Usage and Technical Data

IP address and browser type
Pages visited, duration of visit, referring URL
Cookie identifiers and analytics identifiers (via Google Analytics)

2.4 Communication Data

Email correspondence and contact form submissions
Zoom session participation records (for subscription club and marathon sessions)

3. How and Why We Use Your Data

We process your personal data for the following purposes and on the following legal bases:

Purpose: Performance of a contract (Art. 6(1)(b) GDPR)

Providing Fractional CFO, Financial Controller, and Financial Analyst services
Delivering AI Marathon sessions and Subscription Club content
Issuing invoices and processing payments
Granting access to Google Classroom or equivalent portals

Purpose: Legitimate interests (Art. 6(1)(f) GDPR)

Improving and securing our website and services
Internal analytics and service performance monitoring
Fraud prevention and security

Purpose: Consent (Art. 6(1)(a) GDPR)

Placing non-essential cookies (marketing, analytics) on your device
Sending newsletters or promotional communications (where opted-in)

Purpose: Legal obligation (Art. 6(1)(c) GDPR)

Compliance with Polish and EU tax and accounting regulations
Responding to lawful requests from public authorities

4. Cookies and Analytics

Our website uses cookies — small text files stored on your device. We use the following types:

4.1 Strictly Necessary Cookies
These are required for the website to function and cannot be disabled.

4.2 Analytics Cookies (Google Analytics)
We use Google Analytics (provided by Google LLC) to understand how visitors use our website. Google Analytics may collect information such as your IP address, browser type, and pages visited. This data is aggregated and anonymised wherever possible.
Google may transfer data to the United States. Such transfers are governed by Standard Contractual Clauses approved by the European Commission. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at tools.google.com/dlpage/gaoptout.

4.3 Managing Cookies
You can control or delete cookies at any time through your browser settings. Disabling certain cookies may impact the functionality of the website.

5. Third-Party Service Providers and Data Processors

We share personal data with trusted third-party processors who assist in delivering our services. All processors are contractually bound to process data only on our instructions and in compliance with GDPR:

Stripe, Inc. — Payment processing. Data transferred to the USA under Standard Contractual Clauses. Privacy policy: stripe.com/privacy.
Google LLC — Analytics (Google Analytics), email communication (Gmail), and educational content delivery (Google Classroom). Data may be transferred outside the EEA under Standard Contractual Clauses.
iFaktura — Invoicing and billing data processing, operating under Polish law.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law:

Contract and billing data: 5 years from the end of the fiscal year in which the transaction occurred, in accordance with Polish accounting and tax law.
Marketing and newsletter data: until you withdraw consent.
Website analytics data: up to 26 months, as configured in Google Analytics.
Communication records: up to 3 years from the date of last contact, unless a longer retention period is required by law.

7. Your Rights Under GDPR

As a data subject, you have the following rights in relation to your personal data:

Right of access — to obtain a copy of the personal data we hold about you.
Right to rectification — to have inaccurate data corrected.
Right to erasure — to request deletion of your data in certain circumstances.
Right to restrict processing — to limit how we use your data.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object — to processing based on legitimate interests.
Right to withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, please contact us at mary.t@client-profitability.support. We will respond within 30 days. If you are dissatisfied with our response, you have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl.

8. International Data Transfers

Some of our third-party processors are located outside the European Economic Area (EEA), in particular in the United States. Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission under Article 46 GDPR.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These include encrypted communications (HTTPS), access controls, and regular security assessments.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Children's Data

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on our website with a revised effective date. We encourage you to review this Policy periodically.

12. Contact Us

For any privacy-related queries, requests, or complaints, please contact our data protection representative:

Company: EXPERT HUB CLIENT PROFITABILITY SUPPORT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Address: Hoża 29, 00-521 Warszawa, Poland
Email: mary.t@client-profitability.support
Website: client-profitability.support