Legal information

Privacy Policy

Last updated: 27 August 2026

This page explains what personal data pilarskaglobal.com collects, why it is collected, who processes it on my behalf, how long it is kept, and what rights you have. I keep the site deliberately simple: there is no user account, no login, no advertising network and no data broker involved. The only personal data I receive is data you choose to send me through one of the two forms on this site, plus anonymous, aggregated traffic statistics.

Who is responsible for your data

The controller of your personal data is Lidia Pilarska-Krzemińska, operating under the Pilarska Global personal brand and running an independent online business in Poland as a Farmasi partner. I run this business remotely and work with clients and partners in Poland, the United States and other Farmasi markets.

You can reach me at any time about your data by email at lidiapilarska7@gmail.com or by phone at +48 727 977 477. I answer data-related questions myself — there is no separate support desk.

What data I collect

This site has two forms, and neither of them asks for more than it needs.

  • Contact form: your full name, email address, an optional phone number, and the content of your message.
  • Collaboration qualification form: your full name, email address, phone number, plus the answers you choose from the questionnaire — your target additional monthly income, your current occupation, how much time per day you can dedicate, your experience with online business, your motivation in your own words, and your preferred hours for a call.
  • Analytics: anonymous, aggregated usage data such as page views, approximate country, referring site, device type and browser. This data is not linked to your name or email and I cannot use it to identify you.
  • Technical request data handled by the hosting provider, such as IP address and user agent, processed for security and to deliver the site.

I never ask for payment card details, government identifiers or health data on this site, and you should never send them to me through these forms.

Why I use it and on what legal basis

Under the GDPR (Regulation (EU) 2016/679) I rely on two grounds.

  • Your consent — Article 6(1)(a) — for contacting you by phone and email about business collaboration after you tick the consent box on the qualification form. You can withdraw this consent at any time, and withdrawing it does not affect anything done before you withdrew it.
  • My legitimate interest — Article 6(1)(f) — in answering a message you sent me, in keeping the site secure and available, and in understanding at an aggregate level which pages are useful.

I do not use your data for automated decision-making or profiling, and I do not sell, rent or trade it. I do not add you to a marketing mailing list unless you ask me to.

Who processes it on my behalf

I use a small number of established service providers. They act as processors: they may only handle the data to deliver the service to me, and never for their own purposes.

  • Resend (resend.com) — delivers form submissions to my mailbox as email.
  • Vercel (vercel.com) — hosts the site and provides its traffic and performance analytics.
  • Google Analytics (Google Ireland Limited) — provides aggregated audience statistics with IP anonymisation enabled.
  • Google Workspace / Gmail — the mailbox where I read and reply to your message.

Some of these providers operate infrastructure outside the European Economic Area, primarily in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

How long I keep it

  • Messages from the contact form: up to 24 months from our last exchange, so I can pick up a conversation where we left it.
  • Qualification form applications: up to 24 months from submission, or until you withdraw your consent — whichever comes first.
  • Analytics data: retained under the provider's standard retention settings, in aggregated form only.
  • Anything I no longer have a reason to keep is deleted.

Your rights

You can ask me to give you a copy of your data, correct it, delete it, restrict how I use it, or transfer it to another controller. You can object to processing based on legitimate interest, and you can withdraw a consent you gave earlier. A single email to lidiapilarska7@gmail.com is enough — you do not need a particular form of words, and I will respond within one month.

If you believe I have handled your data badly, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, or with the supervisory authority in your own country. I would appreciate the chance to fix the problem first.

Cookies and analytics

The site does not use advertising or cross-site tracking cookies. It sets one functional cookie, NEXT_LOCALE, which remembers the language you chose so you are not sent back to the wrong version on your next visit. Analytics tools may set their own identifiers to count returning visits in aggregate.

You can block or delete cookies in your browser settings at any time. Blocking them does not stop you from reading anything on this site — the language you picked simply will not be remembered.

Providing your data is voluntary

Nothing on this site requires you to identify yourself. You can read every page, including my story and the description of the business model, without giving me any data at all. Filling in a form is always your choice — but without the name, email and (for the qualification form) phone number, I cannot get back to you.

Changes to this policy

If the way I handle data changes — a new provider, a different retention period — I will update this page and change the date at the top. Significant changes will be described in plain language rather than buried in a paragraph.