Policies · Privacy

Privacy Policy

How I handle your personal data when you visit baaark.com or work with me. Short version: I collect what I need to answer you and do the work, I do not sell it, and you can ask for it or have it deleted at any time.

Last updated 28 September 2026 · MRJ (trading as baaark.com)

1. Who we are

baaark.com is operated by MRJ (trading as baaark.com), registered in Poland (REGON 385160952, NIP PL7532455176). Address: ul. Fabryczna 14d, 53-609 Wrocław, Poland. Email: hello@baaark.com. For the purposes of GDPR and UK data protection law we are the data controller for the personal data described here.

2. Information we collect

2.1 Information you give us

  • Name, business name, town, email address and phone number when you use the contact form or email us
  • Anything you type into the enquiry form, and any file or sketch you attach (including a doodle drawn on the site)
  • Billing details when you buy a pack or a subscription — payment card data goes straight to Stripe and never touches our servers

2.2 Technical data

  • IP address, browser and device type, operating system, time zone, referring page
  • A short-lived hash of your IP address and browser, used only to count visits (see the cookie policy). It cannot be turned back into your IP and expires within days.

2.3 Usage data

  • Pages visited, time on page, access times, the country the visit came from
  • Only if you allow Analytics cookies: Google Analytics data, including when you tap our phone number, email or WhatsApp link or send a form (see section 7)

3. How we use it

  • To answer enquiries and quote for work
  • To provide and maintain the services you buy — design, hosting, support
  • To take payment and manage your subscription
  • To send administrative messages about your project or account
  • To keep the site secure and understand how it is used
  • To meet legal and accounting obligations

4. Legal basis

Under GDPR we process your data on the basis of: performance of a contract (or steps taken at your request before one), our legitimate interests in running and protecting the business, compliance with legal obligations, and — where we ask for it — your consent, which you can withdraw at any time.

5. Where your data lives and who processes it

We use a small number of service providers, each bound by data-processing terms:

  • Vercel — hosts this website and the BAAARK! Sites platform (EU and US infrastructure)
  • Supabase — the database behind the platform: enquiries, client sites, uploaded files (stored in a private bucket)
  • Resend — sends the enquiry notifications and transactional email
  • Cloudflare Turnstile — protects the forms from bots
  • Stripe and SureCart (on our billing site, billing.baaark.com) — payments, invoices and subscriptions
  • Google Workspace — email correspondence
  • Google Analytics (Google Ireland Limited) — visit statistics, only if you allow Analytics cookies

Where a provider processes data outside the UK or EEA, transfers are covered by the EU Standard Contractual Clauses or the UK International Data Transfer Addendum.

6. Security

Everything is served over TLS. The platform uses row-level security in the database, two-factor authentication on our own accounts, private storage for uploaded files (each download is a time-limited signed link), automated backups and regular dependency updates.

7. Cookies

This site sets very few cookies and uses no advertising trackers. What it does set, and why, is in the cookie policy. You can change your choice at any time through the "Cookie settings" link in the footer.

7.1 Google Analytics (only if you allow it)

If you choose "Accept all" or switch on Analytics in the cookie banner, we also use Google Analytics 4 to see which pages people find useful, how they reach us and which pages lead to enquiries. Until you do, it is not loaded at all. It collects the pages you view, how long you stay, where you came from, your approximate location (town or region), your device and browser, and a random identifier in its cookies. We also record when someone taps our phone number, email or WhatsApp link or sends a form, and on which page. We never send Google your name, contact details or anything you write in a form, and Google Analytics 4 does not log or store IP addresses.

The legal basis is your consent, which you can withdraw at any time through "Cookie settings" in the footer; Google Analytics stops loading straight away. Google acts as our processor and may process the data in the United States, covered by the UK Extension to the EU–US Data Privacy Framework and Google's standard contractual clauses. We keep Google Analytics data for no longer than 14 months. See Google's privacy policy or use Google's opt-out browser add-on.

8. Your rights

Under GDPR and UK data protection law you can: access the data we hold about you; have it corrected; have it erased; restrict or object to processing; take it with you in a portable format; and withdraw consent where processing relies on it. Email hello@baaark.com and we will act within 30 days.

9. How long we keep it

  • Enquiries that do not become work: 12 months
  • Client accounts: the duration of the service plus 12 months
  • Financial records: 7 years, as the law requires
  • Visit counts: aggregated; the underlying hashes expire within days
  • Google Analytics data: no longer than 14 months

10. Children

Our services are for businesses and are not directed at anyone under 16. We do not knowingly collect data from children.

11. Changes

We update this policy when the way we work changes. The date at the top tells you when. Material changes will be flagged on the site or by email to clients.

Contact

For privacy questions or to exercise any of the rights above: hello@baaark.com
MRJ (trading as baaark.com), ul. Fabryczna 14d, 53-609 Wrocław, Poland.

13. Complaints

You can complain to a supervisory authority at any time: in the UK, the Information Commissioner's Office (ICO); in Poland, the Urząd Ochrony Danych Osobowych (UODO).