Privacy Policy

Last updated: 2026-09-24

Working draft. Fill in company details in `src/config/company.ts` (legal name, tax ID, address), then review before final publication.

This Privacy Policy explains how personal data is processed in connection with the use of https://forrestcarpentry.com (the “Website”), operated under the ForRest Carpentry brand.

1. Data controller

The controller of personal data is — do uzupełnienia — (the “Controller”), Tax ID (NIP): — do uzupełnienia —, REGON: — do uzupełnienia —, address: — do uzupełnienia —, — do uzupełnienia — Pułtusk, Poland.

Trade name: ForRest Carpentry.

2. Contact regarding personal data

For matters related to personal data protection, you may contact the Controller at:

  • email: kontakt@forrestcarpentry.com
  • phone: +48 535 578 711
  • postal address: — do uzupełnienia —, — do uzupełnienia — Pułtusk, Poland

3. What data we process

The scope depends on how you contact us. Most often we process:

  • data from the contact form: name, email address, phone number (optional), message content;
  • data from phone, email or WhatsApp contact: phone number, conversation / message content, and identifying details needed to reply;
  • technical data required for the Website to work (e.g. language preference stored locally in the browser).

4. Purposes and legal bases

We process data for the following purposes:

  • replying to enquiries and correspondence — Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) (legitimate interest: contacting someone interested in our services);
  • preparing an offer / delivering a commission — Art. 6(1)(b) GDPR;
  • establishing, exercising or defending legal claims — Art. 6(1)(f) GDPR;
  • ensuring basic Website operation (e.g. remembering language) — Art. 6(1)(f) GDPR.

5. Recipients of data

Data may be entrusted to processors supporting the Controller, only to the extent necessary:

  • hosting and email provider (currently Hostinger) — to run the Website and deliver contact-form messages;
  • communication providers (e.g. WhatsApp / Meta) if you choose that channel;
  • authorities entitled by law — only where required by applicable regulations.

6. Transfers outside the EEA

As a rule, data is processed within the European Economic Area. If you use external channels (e.g. WhatsApp), their providers may also process data outside the EEA — under their own privacy policies and applicable transfer mechanisms (e.g. standard contractual clauses).

7. Retention period

We keep data only as long as necessary for the purpose, in particular:

  • correspondence via form / email / phone / WhatsApp — usually until the matter is closed and for up to 3 years afterwards (or longer if a dispute is pending);
  • data related to a contract / commission — for periods required by law (including accounting and tax rules);
  • language preference in the browser — until the user clears local data.

8. Your rights

Under the GDPR you have rights including:

  • access to your data;
  • rectification;
  • erasure (“right to be forgotten”) — where applicable;
  • restriction of processing;
  • data portability — where applicable;
  • objection to processing based on legitimate interests;
  • lodging a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, https://uodo.gov.pl.

9. Voluntary provision of data

Providing data in the contact form is voluntary but necessary to receive a reply. Without it, we cannot respond.

10. Cookies and local storage

The Website uses a necessary consent cookie and — with your consent — localStorage to remember language. Analytics and marketing do not run without consent.

Details, the registry of mechanisms and how to opt out: Cookie Policy (/en/cookies/). You can change settings anytime via the footer link.

11. Changes to this policy

The Controller may update this Policy. The current version is always available on the Website with the date of the last change.