Your information

Privacy policy

Learn what information we process, why we use it and how you can manage your privacy.

Last updated: 2 November 2026

1. Who is responsible for your data?

The data controller is ZABORSKI PRO SP ZOO, ul. Kowalska 5/203, 20-115 Lublin, Poland, tax ID: PL9462758925. This policy covers chatgptaiads.co and enquiries about our services.

For privacy matters, email contact@chatgptaiads.co or write to the postal address above.

2. What information do we receive?

  • Contact form and correspondence: your name, email address, enquiry and, optionally, a website address or other information entered in that field. If we continue the conversation, this includes information you share in later messages.
  • Website operation and security: IP address, browser and device information, visit time, requested resource, server responses and information used to detect spam and abuse.
  • Analytics: browser identifiers, pages visited, website events, referral sources and basic device information.

Providing information is voluntary. Your name, email address and message are required to submit and handle a form enquiry. The website field is optional. Please do not send passwords, payment details, health information or other sensitive personal data.

3. Why do we use personal data?

  • Responding to enquiries and preparing to work together: Article 6(1)(b) GDPR applies where we take steps at your request before entering into a contract with you. For general questions or contact with a company representative, Article 6(1)(f) applies: our legitimate interest in handling correspondence and business relationships.
  • Operating and protecting the website: Article 6(1)(f) GDPR — maintaining availability, investigating errors, limiting spam and preventing abuse.
  • Website usage statistics: measuring visits, traffic sources and website usage with Google Analytics 4. We explain how these tools operate in the “Cookies and analytics” section.
  • Legal obligations and claims: Article 6(1)(c) GDPR where legislation requires retention, or Article 6(1)(f) where information is needed to establish, exercise or defend legal claims.

We use contact form and correspondence data solely to handle enquiries and our working relationship. We do not use it for newsletters or marketing unrelated to your enquiry. Further details about processing in a commissioned service may be provided separately when we enter into a contract.

4. Who may receive the information?

We use the following providers to operate the website and handle enquiries:

  • Cloudflare — application hosting, request and contact form processing, content delivery, connection encryption and security. The form is protected by Cloudflare Turnstile, which analyses the IP address and browser and device signals to detect automated abuse.
  • Resend — delivery of form messages to our inbox, including the name, email address and enquiry you enter.
  • Google / Gmail — receiving and storing contact form correspondence.
  • Google Sheets and Google Apps Script — storing form submissions in a private enquiry register, including the date, name, email address, enquiry and information entered in the website field.
  • Google Analytics 4 and Google Tag Manager — website measurement.
  • Google Fonts — delivery of typefaces; font requests send information such as the IP address and technical request details to Google.

Authorised people handling correspondence, advisers or public authorities may also receive information where necessary for the relevant purpose or required by law. We do not intentionally send the contents of contact form fields to Google Analytics. The conversation animation on the website is a demonstration, not a live ChatGPT conversation form.

5. Cookies and analytics

Cookies are small pieces of information stored by your browser. The website uses Cloudflare security services and Google analytics tools. Analytics measures website traffic and is not necessary to submit the contact form.

  • Security: Cloudflare may use cookies such as __cf_bm to distinguish ordinary traffic from automated abuse. Their use depends on how the provider handles a request.
  • Analytics: Google Analytics may set cookies such as _ga and _ga_* to distinguish visits and maintain session information. Google documents a default lifetime of up to 2 years; configuration and browser restrictions may shorten this.

In the current configuration, Google Tag Manager and Google Analytics load when you open the website. The website does not provide a panel to collect or change analytics consent. Merely using the website or submitting the form is not treated as giving that consent.

You can also delete or manage cookies in your browser. Read more about how Google uses information and Google Analytics cookies.

6. How long do we keep information?

Retention depends on the purpose and progress of the enquiry. Correspondence is needed to resolve the matter and, if we work together, to manage that relationship. Afterwards, retention is limited to information needed for legal obligations or potential claims until the applicable periods expire.

Technical information is needed to operate the website and investigate incidents. Its availability also depends on the settings and policies of hosting and security providers. The contact form uses a 10-minute window to limit submission frequency; this is not a deletion deadline for email messages or all logs.

Analytics retention depends on the Google Analytics retention settings and the purpose of comparing website statistics. Server-side retention is separate from cookie lifetime. Contact the controller for information about data relating to your enquiry.

7. Processing outside the EEA

Our providers use international infrastructure. Information may be processed outside the European Economic Area, including in the United States. The applicable protection mechanism depends on the service and recipient: it may be a valid adequacy decision or standard contractual clauses together with the required safeguards.

Provider information is available from Cloudflare, Resend and Google. Contact us for information about the basis of a specific transfer and a copy of the applicable safeguards.

8. Your rights

Subject to the GDPR, you may request access to and a copy of your personal data, correction, erasure or restriction of processing. Data portability applies in the relevant cases of automated processing based on consent or a contract.

You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it at any time.

Send requests to contact@chatgptaiads.co. If we have reasonable doubts about your identity, we may request information necessary to verify it. We normally respond within one month; if an extension is justified, we will explain the reasons within that period.

You may complain to Poland’s President of the Personal Data Protection Office at uodo.gov.pl, or to the competent supervisory authority in your place of habitual residence, work or the alleged infringement.

9. Other information and updates

We do not make decisions about visitors based solely on automated processing that produce legal or similarly significant effects. Automated form security may reject a submission identified as spam; you can contact us by email if that happens.

We update this policy when our tools, processing practices or legal requirements change. The update date appears at the beginning of this document.