Privacy Policy

1. Data Controller

Cat's Dream Designs Sp. z o.o., Adolfa Pawińskiego 22, 02-106 Warszawa, Mokotów, Poland. Email: meow@catsdreamdesigns.com. Tel: +48 518 603 469. KRS: 0000XXXXXX (Sąd Rejonowy dla m.st. Warszawy, XIII Wydział Gospodarczy KRS). NIP: XXXXXXXXXX. REGON: XXXXXXXXX.

2. Applicable Law

Regulation (EU) 2016/679 (GDPR); Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych (Dz.U. 2018 poz. 1000); Ustawa z dnia 18 lipca 2002 r. o świadczeniu usług drogą elektroniczną (Dz.U. 2002 nr 144 poz. 1204); Ustawa z dnia 16 lipca 2004 r. — Prawo telekomunikacyjne (Dz.U. 2004 nr 171 poz. 1800).

3. Legal Basis for Processing

Art. 6(1)(b) GDPR — Performance of a contract (design services). Art. 6(1)(a) — Consent (newsletter, marketing). Art. 6(1)(f) — Legitimate interest (website security, analytics optimisation). Art. 6(1)(c) — Legal obligation (tax records per Ustawa o rachunkowości, Art. 74 — 5 years).

4. Data Categories

Contact data: Name, email, phone, company name. Collected via: contact form, email, phone, chat widget. Project data: Brand assets, design briefs, feedback (under mutual NDA). Payment data: Processed exclusively by Stripe, Inc. (PCI DSS Level 1 compliant). No card numbers stored on our servers. Analytics: Plausible Analytics (EU servers, Estonia). No cookies placed. No personal data collected. No cross-site tracking. IP addresses never stored.

5. Recipients and International Transfers

Stripe, Inc. (USA) — Payment processing. Legal basis: Standard Contractual Clauses (Art. 46(2)(c) GDPR) and EU-US Data Privacy Framework. Plausible Insights OÜ (Estonia, EU) — Analytics. No personal data transferred. Figma, Inc. (USA) — Design collaboration. Legal basis: SCCs. Google LLC — Only if client explicitly provides access to Google Analytics/Search Console. Personal data is never sold, rented, or shared with third parties for marketing.

6. Retention Periods

Contact enquiries: 2 years from last contact. Project files: Delivered to client; deleted from our systems within 60 days. Accounting/tax records: 5 years (Art. 74 Ustawa o rachunkowości). Email communications: 2 years. Analytics data: Not stored (Plausible is privacy-first).

7. Data Subject Rights (Art. 15-22 GDPR)

Right of access (Art. 15), rectification (Art. 16), erasure — "right to be forgotten" (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), withdrawal of consent at any time (Art. 7(3)). Exercise your rights: meow@catsdreamdesigns.com.

Supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa. Website: uodo.gov.pl. Tel: +48 22 531 03 00. You may also seek judicial remedy per Art. 79 GDPR before the Sąd Okręgowy w Warszawie.

8. Technical and Organisational Measures

TLS 1.3 encryption for all connections. AES-256 encryption for stored project files. Two-factor authentication on all accounts. NDA agreements with all team members. Daily encrypted backups on EU-based servers. Documented incident response procedures. Regular security reviews.

9. Automated Decision-Making

We do not engage in automated decision-making or profiling as defined in Art. 22 GDPR.

Last updated: March 2026.