Privacy Policy
What we collect, why we collect it, who we share it with, and the choices you have — written in plain language wherever we could manage it.
Last updated: June 2026
On this page
1. Who we are
Glavia Agency ("we", "us", "our") is a marketing agency based at ul. Tadeusza Czackiego 15/17, 00-043 Warszawa, Poland. This policy explains how we handle personal data collected through glavia.agency (the "Site"), including when you fill out a contact or audit-request form, or simply browse the Site.
We are the data controller for the personal data described in this policy, for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR.
2. What data we collect
We collect data in two ways: information you give us directly, and information collected automatically when you browse the Site.
Information you give us
- Contact form / audit request: name, email and/or phone number, company name (optional), approximate ad budget (optional), and any message you write.
- Email correspondence: anything you send us directly, if you email us instead of using a form.
Information collected automatically (only with your consent)
- Analytics data: pages visited, time on site, approximate location (country/city level), device and browser type, via Google Analytics (GA4) — only if you accept the "Analytics" cookie category.
- Marketing/advertising data: page views and conversion events shared with Meta (Facebook) via the Meta Pixel, and with LinkedIn via the LinkedIn Insight Tag, for ad measurement and audience building — only if you accept the "Marketing" cookie category.
We do not collect analytics or marketing data unless you've actively given consent through the cookie banner. See Section 4 for details.
3. Why we collect it (legal basis)
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your audit request or enquiry | Performance of a contract / steps prior to entering one, and your consent given via the form checkbox |
| Analytics (understanding site usage) | Your consent (cookie banner) |
| Marketing measurement (Meta Pixel, LinkedIn Insight Tag) | Your consent (cookie banner) |
| Keeping records for legal/accounting purposes | Legal obligation |
4. Cookies & tracking tools
We use a cookie consent banner that blocks non-essential cookies until you make a choice. You can accept all, reject all non-essential cookies, or pick categories individually. You can change your mind at any time using the "Cookie settings" link in the footer of any page.
| Category | Can be disabled? | Tools used |
|---|---|---|
| Strictly necessary | No — required for the Site to function | Session/preference cookies, your cookie consent choice itself |
| Analytics | Yes | Google Analytics 4, via Google Tag Manager |
| Marketing | Yes | Meta (Facebook) Pixel and LinkedIn Insight Tag, via Google Tag Manager |
5. Who we share data with
We don't sell your personal data. We share it only with the service providers ("processors") that help us run the Site and respond to enquiries:
- Web3Forms — processes and forwards contact form submissions to our inbox. Web3Forms states it does not permanently store form submission content.
- Google (Analytics & Tag Manager) — processes anonymized/pseudonymized usage data, only if you've consented to Analytics cookies.
- Meta (Facebook Pixel) — processes browsing/conversion events for ad measurement, only if you've consented to Marketing cookies.
- LinkedIn (Insight Tag) — processes page views and conversion events for ad measurement and audience building, only if you've consented to Marketing cookies.
- Our email and hosting providers — store the Site files and any emails sent to us.
Some of these providers (Google, Meta, LinkedIn) are based in or transfer data to the United States. Where this applies, transfers are made under the providers' own GDPR-compliant safeguards (such as Standard Contractual Clauses), as published in their respective data processing terms.
6. How long we keep your data
Contact form submissions and email correspondence are kept for as long as reasonably needed to respond to your enquiry and for up to 24 months afterward, in case you follow up, unless you ask us to delete it sooner. Analytics data is retained according to Google Analytics' own retention settings (configurable, typically 14 months by default).
7. Your rights if you're in the EU, UK, or Canada
Under GDPR (EU/UK) and Canada's PIPEDA, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict certain processing
- Withdraw consent at any time (this won't affect processing done before withdrawal)
- Request a copy of your data in a portable format
- Lodge a complaint with your local data protection authority — in Poland, this is the Urząd Ochrony Danych Osobowych (UODO)
To exercise any of these rights, contact us using the details in Section 10.
8. Your rights if you're in the United States
Depending on your state of residence (for example California, under the CCPA/CPRA, or other states with similar laws), you may have the right to know what personal data we've collected, request deletion, correct inaccurate data, and opt out of the "sale" or "sharing" of personal data for targeted advertising. We do not sell personal data. If you'd like to opt out of analytics or marketing cookies, use the "Cookie settings" link in the footer, or contact us directly.
9. Security
We use industry-standard measures (HTTPS encryption in transit, access-restricted hosting) to protect the data we hold. No method of transmission or storage is 100% secure, but we aim to use commercially reasonable safeguards appropriate to the data involved.
10. Contact us
For any privacy questions, access/deletion requests, or to withdraw consent, email us at hello@glavia.agency or write to us at ul. Tadeusza Czackiego 15/17, 00-043 Warszawa, Poland.
This policy may be updated from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page reflects the most recent revision.