Privacy, in plain English

Last updated: 17 August 2026

Who I am

This website, marcinlukowicz.com, is run by Marcin Lukowicz, trading as Łukowicz & Co., based in London, United Kingdom. For anything in this notice, contact me through the contact form.

What I collect

The contact form. If you write to me, I receive the details you submit: your first and last name, your business email address, and your message. Providing them is voluntary.

Hosting logs. Like every website, this one is delivered by a hosting provider — Cloudflare — which processes limited technical data (such as your IP address and the request itself) to serve the pages and defend against attacks. I do not use that data and I build no profile from it. My lawful basis is legitimate interests: keeping the site secure and available.

That is the complete list. There are no cookies, no analytics, no advertising, no tracking pixels and no third-party scripts; the fonts are served from this site rather than from a font network. There are no accounts, no payments and no newsletter.

What I use it for

I use what you send for two purposes, and for nothing else:

• Advertising, marketing and public relations in respect of my own business, activity, goods or services — reading your enquiry, replying to it, and the ordinary conversation about what I do and whether I can help.
• Deciding whether to accept you as a customer — working out whether the engagement is a fit, both ways, before anything begins.

My lawful basis for both is legitimate interests: responding to someone who chose to contact me about working together, and deciding whether to take the work on. You can object to processing on that basis at any time — see Your rights below.

I do not use your details for anything else. There is no marketing list, no newsletter, no profiling and no automated decision-making, and I never sell or share your information for marketing. If we go on to work together, that engagement is covered by its own agreement rather than by this notice.

Who processes it

• Web3Forms (operated by Web3Creative) relays your submission to my inbox and stores a copy for one year. It operates from India and uses sub-processors in the EU and the United States, so your details may be processed outside the UK; those transfers are covered by a data-processing agreement incorporating the EU Standard Contractual Clauses and the UK International Data Transfer Addendum — see its data-processing agreement and privacy policy.
• Cloudflare hosts and delivers the site on its global network. International transfers are covered by the UK Extension to the EU-US Data Privacy Framework and standard contractual clauses — see Cloudflare's privacy policy.
• My email provider stores the enquiries that reach my inbox.

How long I keep it

Enquiry emails are kept for as long as needed to handle the conversation, and for a reasonable period afterwards in case it resumes. When an enquiry is no longer needed, I delete it. Web3Forms holds its own copy of your submission for one year, then deletes it automatically. Hosting logs are kept and deleted by Cloudflare on its own cycle, not mine.

Your rights

Under UK and EU data-protection law you can ask me for access to, correction of, or erasure of your personal information; ask me to restrict it or port it; and object to processing based on legitimate interests. Use the contact form and I will act on any request in line with the law.

If you're unhappy with how I've handled your information, tell me first. You have the right to complain to me directly, and I would far rather hear about it and put it right. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) — or, if you are in the EEA, to your local supervisory authority.

Changes

If this site ever starts collecting more than described here, or using it for a purpose beyond the two above (a newsletter being the likely candidate), this notice will be updated first, with a new date above.