Privacy policy

1. Controller and data protection contact

NanoBuzz sp. z o.o., ul. Kościelna 45B/14, 60-537 Poznań, Poland, KRS 0001131220, NIP 7812077628, REGON 529868223, is the controller for this website.

Our data protection contact is Jarosław Szymczak: gdpr@nanobuzz.agency. You can also write to the registered address above. Magda Adamala supports the handling of privacy requests.

2. Enquiries and meetings

We process the name, business email, company, market, budget, objective, timing and message you choose to provide. We record the page you contacted us from and a request identifier. With your optional consent, we also retain campaign source and landing-page information. We use these details to answer your enquiry, prepare a proposal and manage the business relationship.

The legal bases are steps requested before a contract (Article 6(1)(b) GDPR, where applicable) and our legitimate interest in handling business enquiries and protecting the service (Article 6(1)(f)). Providing required form details is necessary for a useful response. An enquiry does not subscribe you to a marketing mailing list.

Enquiries are stored in our private Supabase database and routed to Bartosz Wdowiak and the CRM team at crm@stratega.pl for NanoBuzz administration, quote tracking and follow-up. Authorised staff record them in NanoBuzz's quote tracker and Pipedrive. Stratega's CRM team provides shared administrative support.

Calendly is loaded only if you choose to open or display the booking calendar. Calendly processes the details needed to arrange your appointment under its own service terms. A booking is confirmed only when Calendly confirms it.

3. Optional measurement and advertising

Optional analytics and marketing use your consent (Article 6(1)(a) GDPR). Reject optional cookies, accept all, or choose the two categories separately in the banner. Access to the website and the enquiry form does not depend on consent.

Analytics consent enables Google Tag Manager and Google Analytics 4 to measure public page visits and actions. Agency and Club share an Analytics property, with reports separated by site and audience. Where enabled and consented, cross-domain measurement helps distinguish a creator moving to Club from a prospective customer. We do not send form names, email addresses, messages or raw URL query strings to Analytics.

Marketing consent enables the configured Google Ads, LinkedIn Insight and Microsoft Clarity tags on Agency for campaign attribution, advertising measurement and website experience analysis. These providers may associate consented activity with their identifiers or signed-in services. Rejecting marketing keeps these tags disabled.

We do not load Google tags before optional consent. Changing consent in Cookie settings is as easy as giving it; withdrawing consent stops future collection. Withdrawal does not invalidate earlier lawful processing.

4. Storage and retention

Necessary local storage nb_consent_v1 records your choices and timestamp for up to 180 days. After analytics consent, session storage nb_attribution_v1 can retain the landing page and campaign source until the browser session ends. Paid click identifiers are retained only after marketing consent. Optional providers may set cookies such as _ga, _gcl_au, _clck and _clsk according to the categories you allow.

We keep enquiry data while handling the conversation and for a justified follow-up or claims period. Records no longer needed are deleted or anonymised. Contract and accounting records are retained where required by law. Google Analytics event retention follows the property settings; contact us for the current period. Withdrawing consent removes accessible optional cookies from this site; browser settings can also remove cookies set by external providers.

5. Providers and international transfers

Our infrastructure and processing providers include Vercel (hosting), Supabase (data storage in the EU), Microsoft 365 (correspondence), Pipedrive (CRM), Calendly (booking), Google (Analytics and Ads), LinkedIn and Microsoft Clarity where consented. An additional transactional email provider may deliver a requested form notification. Access is limited to what each service needs.

Some providers process data outside the European Economic Area. Applicable safeguards may include a European Commission adequacy decision or standard contractual clauses and supplementary measures. You may ask our data protection contact about the recipients and safeguards for your data.

6. Your rights

You may request access, correction, deletion, restriction, portability where applicable, object to processing based on legitimate interests, and withdraw consent at any time. We may need information to verify your identity before fulfilling a request.

You may complain to the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland, or another competent supervisory authority. Current contact details: https://uodo.gov.pl/p/kontakt.

7. Creators and automated decisions

Creator registration and applications belong on nanobuzz.club and have separate notices. This Agency website is for brands and agencies. We do not sell personal data or make decisions with legal or similarly significant effects solely through automated processing.

8. Updates

We update this policy when website tools or processing change. The date above identifies the current notice.