Privacy Policy

The data controller is Liubov Vynohradova, operating under Polish law as a sole proprietorship (jednoosobowa działalność gospodarcza), NIP 5214080157.

Address: ul. Henryka Sienkiewicza 85/87/1, 90-057 Łódź, Poland.

Nibilux is a brand operated by Liubov Vynohradova. It is not a separate company such as a spółka z o.o. or LLC.

Contact for privacy matters: hello@nibilux.com.

When you use the contact / project inquiry form, we may process:

• name;
• email address;
• company name (if provided);
• selected project type (if provided);
• selected budget range (if provided);
• the content of your message;
• the language version of the page you used;
• the time of submission.

For security and abuse prevention when you submit the form, we may process your IP address in a short-lived, server-side rate-limiting process. This value is used only to limit repeated submissions and is not written into the inquiry email.

If you contact us directly by email, we process the data you include in that correspondence.

We do not intentionally collect special categories of personal data through the website. Please do not include sensitive information in the form unless it is strictly necessary for your inquiry.

The website provides a project inquiry form. Submitting it sends your message to our studio inbox so we can reply.

Current data flow: your browser submits the form to our server; the submission is validated and checked for spam and abuse (including honeypot, timing and rate limiting); the inquiry is delivered through Resend as an email notification to the Nibilux business mailbox.

The application does not store inquiries in a separate database or CRM operated by this website. Your email address may be used as a reply-to address so we can respond to you.

Submitting a project inquiry does not subscribe you to a newsletter or other marketing communications.

We process personal data to:

• receive and respond to your inquiry;
• discuss a potential project or business relationship;
• take steps at your request before potentially entering into a contract;
• communicate about the matter you raised;
• protect the form against spam and abuse.

Depending on the context, we rely on:

• Article 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering into a contract, where your inquiry concerns a potential engagement;
• Article 6(1)(f) GDPR — our legitimate interest in responding to business inquiries, communicating with prospective clients, and securing the website against spam and automated abuse;
• Article 6(1)(c) GDPR — where processing is necessary to comply with a legal obligation applicable to us (for example, accounting or complaint-handling duties, if they arise);
• Article 6(1)(a) GDPR — consent, only where we separately ask for it (for example, for optional direct marketing described below).

We do not treat consent as the default legal basis merely for replying to an ordinary business inquiry submitted through the contact form.

Personal data from inquiries is accessible to the data controller and may be processed by trusted service providers strictly as needed to operate the website and deliver messages, in particular:

• Resend — email delivery of contact-form notifications;
• providers that host and operate this website and related infrastructure (server logs and technical operation of the site).

We do not sell personal data. We do not share inquiry data with advertising networks or analytics vendors, because this website does not currently integrate such tools.

Inquiry content is transmitted through Resend for email delivery. Depending on that provider’s infrastructure, data may be processed outside the European Economic Area.

Where a transfer outside the EEA occurs, we rely on appropriate safeguards required by the GDPR, such as the provider’s standard contractual clauses or another lawful transfer mechanism made available by the provider.

If you have questions about transfers related to a specific inquiry, contact us at the address above.

Inquiry emails are retained in our business mailbox for as long as needed to handle the conversation and any related business follow-up, and thereafter according to our ordinary email and business-record practices, unless a longer period is required by law.

IP addresses used for rate limiting are kept only transiently in server memory for the duration of the protection window and are not stored as a durable inquiry record.

If a project or contract follows from an inquiry, related correspondence may be kept for the duration of the relationship and for the periods required by applicable law.

If you later give separate marketing consent, related contact details will be kept until you withdraw consent or the marketing purpose no longer applies, subject to any longer retention required by law.

This website’s application code does not set analytics, advertising, or marketing cookies, and does not use a cookie consent banner for non-essential tracking.

We do not currently operate a separate cookie preference centre, because the site does not load non-essential tracking technologies that would require prior consent under ePrivacy rules as commonly applied in the EU.

Your browser may still store technical data that is inherent to visiting any website (for example, standard network requests). Those mechanisms are not used by us for profiling or advertising.

We do not currently use Google Analytics, Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, Hotjar, Microsoft Clarity, or similar analytics or advertising tracking tools on this website.

If that changes in the future, this Privacy Policy will be updated, and any consent required for non-essential cookies or similar technologies will be obtained before those tools load.

We may in the future offer optional direct marketing, such as a newsletter, Nibilux insights or content, offers, lead magnets, or other marketing email campaigns.

Any such marketing will require a separate, optional consent. That consent will never be required to submit a project inquiry through the contact form, and submitting the contact form does not enrol you in marketing communications.

Where marketing consent is collected, the legal basis for processing personal data will be Article 6(1)(a) GDPR (consent). Where required for the use of electronic communications for commercial information or direct marketing, we will also obtain the prior consent required under applicable electronic communications law, including the Polish Electronic Communications Law (Prawo komunikacji elektronicznej, PKE). You may withdraw marketing consent at any time, for example via an unsubscribe link or by emailing us. Withdrawal does not affect the lawfulness of processing before withdrawal.

We do not currently operate a marketing subscription flow on this website. If we introduce one, this Privacy Policy will be updated to describe the specific channel and the data collected for that purpose.

Subject to the conditions and limits in the GDPR, you have the right to:

• access your personal data;
• rectification;
• erasure;
• restriction of processing;
• data portability;
• objection to processing based on legitimate interests;
• object at any time to processing of your personal data for direct marketing purposes;
• withdraw consent where processing is based on consent (without affecting prior lawful processing).

To exercise these rights, email us at hello@nibilux.com. We may need to verify your request before responding.

You have the right to lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO). More information: https://uodo.gov.pl.

You may also contact a supervisory authority in another EU Member State of your habitual residence, place of work, or place of the alleged infringement, where applicable.

Providing personal data through the contact form is voluntary. Fields marked as required (name, email, and message) are needed for us to understand and reply to your inquiry.

If you do not provide the required information, we may be unable to receive or respond to your inquiry through the form. Optional fields (company, project type, budget) help us prepare a more relevant reply but are not mandatory.

Future marketing subscriptions, if offered, will also be voluntary and separate from the project inquiry form.

We do not use automated decision-making that produces legal or similarly significant effects concerning you, and we do not profile website visitors for marketing or advertising purposes.

We may update this Privacy Policy when our processing practices, legal requirements, or website functionality change. The updated version will be published on this page with a revised “last updated” date.

Data controller: Liubov Vynohradova, NIP 5214080157.

Address: ul. Henryka Sienkiewicza 85/87/1, 90-057 Łódź, Poland.

Email: hello@nibilux.com.

Nibilux is a brand operated by Liubov Vynohradova.