Privacy policy

Aarons Zatorski is a US digital studio based in California. We serve clients in the US and the EU — including Poland. Privacy contact: hello@aaronszatorski.com.

For visitors in the EU/EEA, GDPR applies via Article 3(2) (extraterritorial scope). For California residents, the CCPA/CPRA applies.

When you submit the free-preview form we collect your business name, email, and optionally your industry and a short message. This is the minimum we need to build you a preview website.

When you visit aaronszatorski.com our hosting provider (Hetzner, Germany) records IP, user-agent and URL for security and debugging. Logs are deleted after 14 days.

We do not use Google Analytics, Facebook Pixel, or Hotjar. We use our own anonymous page-view counter and do not correlate visits across sessions.

Form data is used for one purpose: building and sending you a free preview website, plus replying to your questions. We do not sell it, share it with partners, or use it for remarketing.

Server logs are used purely for infrastructure security and error diagnosis.

Form submissions: 24 months from last contact. After that we delete automatically — unless you are an active client, in which case we retain per US tax retention requirements (typically 7 years from the last transaction).

Server logs: 14 days.

Email in our inbox: per our provider's policy (Brevo), typically 12 months.

Regardless of where you live, on request we can: give you access to your data, correct it, erase it, restrict processing, port it, or stop processing it.

EU/EEA residents: you also have the right to lodge a complaint with your local supervisory authority (e.g. the Polish DPA — uodo.gov.pl — for residents of Poland).

California residents: full CCPA/CPRA rights apply, including "do not sell or share." We do not sell or share personal information with third parties for advertising purposes.

To exercise any right, email hello@aaronszatorski.com. We respond within seven business days. No fee.

We only use functional cookies — one for your language preference (NEXT_LOCALE) and an anonymous session token if you use the form. No marketing cookies, no tracking.

We do not show a cookie consent banner because there is nothing to consent to — no third-party cookies, no analytics that follow you around.

Website hosting: Hetzner (Germany / Finland) — inside the EU. Email: Brevo (France) — inside the EU. Some of our tooling (bookkeeping, AI services) runs in the US — for transfers from the EU we rely on the EU Standard Contractual Clauses per Commission Implementing Decision 2021/914.

If we materially change this policy we notify you by email (if you are a client) and update the "effective" date at the top of the page.