Privacy policy

01 /Data controller

The controller of your personal data is Wolves House sp. z o.o., with its registered office at al. Kraśnicka 27, 20-718 Lublin, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0001029828 by Sąd Rejonowy Lublin-Wschód w Lublinie z siedzibą w Świdniku, VI Wydział Gospodarczy Krajowego Rejestru Sądowego, tax ID (NIP) 7123454239, REGON 525153800, share capital PLN 10,000 (hereinafter: the “Controller”, “we”).

For matters concerning personal data, you can contact us:

• by email: office@wolveshouse.com,
• in writing: al. Kraśnicka 27, 20-718 Lublin, Poland.

02 /What data we process

We only process data that you provide to us or that is generated when you use the site:

• contact form data — your full name, email address, company name and telephone number (optional), selected topic and message,
• correspondence data — when you email or call us: email address, phone number and the information you share in the conversation or message,
• technical data — IP address, browser type, date and time of the visit and similar information recorded automatically in server logs.

03 /Purposes and legal bases

We process your data for the following purposes:

• responding to your inquiry and staying in touch — based on our legitimate interest in conducting correspondence (Art. 6(1)(f) GDPR),
• taking steps prior to entering into a contract — where you request these steps as a prospective party to a contract (Article 6(1)(b) GDPR),
• complying with legal obligations — e.g. tax and accounting obligations, if we start working together (Art. 6(1)(c) GDPR),
• establishing, pursuing or defending claims — based on our legitimate interest (Art. 6(1)(f) GDPR),
• ensuring the security and proper functioning of the site — based on our legitimate interest (Art. 6(1)(f) GDPR).

If in the future we ask for your consent to other processing (e.g. analytics or marketing), it will be based on that consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

04 /How long we keep data

• enquiries that do not lead to a business relationship — in our correspondence for 12 months from the last contact; in the event of a dispute, data needed to establish, exercise or defend legal claims may be retained until the dispute is resolved and the applicable limitation period expires,
• data related to a concluded contract — for the term of the contract and for the period required by law (e.g. tax law),
• data processed on the basis of consent — until consent is withdrawn,
• technical data and logs — for the time needed to diagnose failures, detect abuse and handle incidents; the period depends on the event, configuration and the infrastructure provider’s retention rules. Our application logging code does not record form contents.

Web3Forms states that form data is retained for up to three years, unless deleted earlier or a shorter period applies under the service plan. This period concerns the provider’s infrastructure and is described in its privacy policy. You can contact us to request earlier deletion.

05 /Who we share data with

We do not sell your data. We may entrust it to organisations that provide technical and operational support, to the extent needed to deliver their services, including:

• hosting and security providers — the website is published through Sites and uses Cloudflare infrastructure,
• Google — business correspondence in Gmail,
• Web3Creative, the operator of Web3Forms — delivering form submissions to our inbox and protecting against spam; the Web3Forms privacy policy also describes its subprocessors,
• providers of accounting and legal services.

Data may also be disclosed to public authorities where required by law.

06 /Transfers outside the EEA

Using Web3Forms, Gmail and global hosting infrastructure may involve processing data outside the European Economic Area. Web3Creative operates from India; according to the published Web3Forms data processing agreement, transfer safeguards include standard contractual clauses. For information about the safeguards applicable to your enquiry and how to obtain a copy, email office@wolveshouse.com.

07 /Your rights

In the circumstances and subject to the conditions set out in the GDPR, you have the right to:

• access your data and receive a copy of it,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent at any time — without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, email office@wolveshouse.com. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.

08 /Do you have to provide data

Providing data is voluntary, but necessary for us to respond to your inquiry. Required form fields are marked with an asterisk.

We do not make decisions about you based solely on automated processing, including profiling.

09 /Cookies and similar technologies

The website uses necessary security mechanisms and browser storage. Cloudflare may set the __cf_bm cookie for bot protection (approximately 30 minutes), together with other protective mechanisms depending on the threats detected.

We currently use no analytics or marketing tracking scripts. We do not display a banner requesting consent for tools we do not use. The “Cookie settings” button in the footer opens information about the mechanisms currently in use.

sessionStorage stores the wh-ld marker to play the entrance animation once per tab session. Privacy preferences saved using the footer button are stored in localStorage (wh-consent-v2) and respected for up to 180 days; the record is deleted the next time it is read after that period. These records stay in your browser and do not contain enquiry contents. You can delete them in your browser settings.

Fonts and images are hosted locally. Social media links are not embedded plugins; visiting an external service is subject to that service’s privacy rules.

After you manually change the language, we store the wh-language cookie for 180 days so your choice is used on subsequent visits to the homepage. Without this preference, we choose the homepage language using your browser’s Accept-Language header. Direct page URLs retain their language. This cookie is not used for analytics or tracking.

You can change your cookie settings in your browser at any time.

10 /Changes to this privacy policy

This policy may be updated, e.g. due to changes in the law or in the site's features. The current version is always available on this page.

Effective from: 30 October 2026.

Last updated: 31 October 2026.