Privacy notice

Who is responsible?

One Cut Studio is the freelance brand of Piotr Kadłubowski, based in Poland, and is not a registered company. Piotr Kadłubowski is the controller of personal data processed for enquiries and this website’s optional analytics. Contact: piotr.kadlubowski123@gmail.com.

Enquiries and collaboration

If you contact us, we process your name, email address and information you choose to provide to answer your enquiry and discuss a project. Please do not send sensitive information or personal details of property buyers or tenants unless needed and agreed separately.

For steps towards a contract with you, the basis is Article 6(1)(b) GDPR. For business contacts acting for an agency and ordinary correspondence, the basis is our legitimate interest in responding and managing professional relationships, Article 6(1)(f).

Unsuccessful enquiries are retained for up to 12 months after the last meaningful contact, unless you request earlier deletion and no other ground requires retention. Project records are kept for the relevant contract, legal retention and limitation periods; the applicable periods depend on the records and settlement arrangement.

Website data and service providers

Serving a website involves processing connection information such as IP address, requested URL, browser information and request time. The purpose is delivering and securing the website, based on legitimate interests under Article 6(1)(f). This website does not contain an enquiry form, online checkout or embedded booking or messaging service.

Enquiries sent to our Gmail address are processed using Google’s email service. Necessary project and billing information is shared with Useme when you choose to settle a project through that platform. Useme handles its own contracts, invoicing and legal obligations under its own privacy notice. Only information necessary for the agreed purpose should be shared.

Cloudflare provides hosting, content delivery and network security. Connection data is processed to deliver and protect this site. We have disabled application-level Workers Logs and do not maintain a separate visitor request log. Cloudflare may process operational and security data under its own retention rules. See Cloudflare’s privacy policy at https://www.cloudflare.com/privacypolicy/ for provider processing and international transfer information.

Cookies, storage and optional analytics

With your consent, we use Microsoft Clarity, provided by Microsoft, to understand how visitors use this website through heatmaps and session recordings. Data includes page visits, clicks, scrolling, device and browser information, cookie identifiers and connection data such as IP address. This helps us improve the website. The Clarity script is not loaded before you accept analytics or after you refuse it. We do not enable advertising storage.

A saved choice uses the local-storage entry onecut-privacy-v1 for up to 180 days and is checked when the page loads. This preference is used only to remember your privacy choice. A session-storage refusal flag also keeps analytics disabled in the current tab after withdrawal.

Analytics relies on your prior consent under Article 6(1)(a) GDPR. Accepting and refusing are equally available, and refusal does not prevent use of the site. Withdrawing consent stops future analytics and does not affect processing lawfully carried out beforehand.

Clarity uses _clck to recognise a browser across visits and _clsk to associate page views with a session. These typically last up to one year and one day respectively. Playback data is normally retained for 30 days; heatmaps, click data and labelled or favourited recordings are retained for up to 9 months. See Microsoft’s retention information for saved or favourited recordings and current retention details.

Microsoft may process data outside the EEA, including in the United States, under the applicable transfer arrangements described in the Microsoft Privacy Statement. That statement also explains Microsoft’s processing of information collected through Clarity. We do not send names, email addresses or custom user identifiers to Clarity.

International processing

Providers such as Google may process data outside the European Economic Area. Where relevant, transfers require a valid legal mechanism, such as an applicable adequacy decision or standard contractual clauses with appropriate safeguards. Contact us for information about the safeguards applicable to your data. See Google’s privacy notice and Useme’s privacy information.

Your rights

Subject to the conditions in GDPR, you may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You may withdraw consent at any time through Privacy settings or by contacting us. We normally respond within one month; extensions may apply to complex requests.

You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or your local supervisory authority. Providing enquiry details is voluntary, but without a contact method we cannot reply. We do not make automated decisions producing legal or similarly significant effects about you.

Changes

We update this notice when tools or processing purposes change. The date above identifies the current version.