Written to be accurate about what the audit actually does, so a lawyer is reviewing facts rather than inventing them. Every highlighted field needs filling, and the whole thing needs a Polish lawyer's sign-off before the first live lead. Delete this box when it has one.
Privacy policy
LAST UPDATED [date]
This policy explains what happens to your personal data when you use the Online Dating Audit at coachkarmos.com, buy a playbook, or book a call. It is written to meet the EU General Data Protection Regulation (GDPR) and Polish law.
01WHO IS RESPONSIBLE
The controller of your personal data is [registered business name], [street address, postal code, Wrocław, Poland], NIP [NIP], REGON [REGON], trading as Coach Karmos.
For anything in this policy, including any of the rights in section 08, write to hello@coachkarmos.com.
02WHAT WE COLLECT
When you take the audit
- Your first name and email address, which you type in before the questions start.
- Your answers to 21 yes/no questions about your dating profile, your texting and your dates.
- Your answer to one multiple-choice question about how you would prefer to solve the problem, including the budget range attached to each option.
- The scores and the bottleneck calculated from those answers, and the date and time you finished.
- Whether you ticked the optional marketing box, the exact wording you were shown, and when.
When you book a call or buy something
[To be completed once the booking page and checkout exist — expect a calendar booking with name, email and possibly phone number, and payment handled by a payment provider who receives your card details directly. We do not see or store card numbers.]
Automatically
Our hosting provider records standard server log data, including IP address, browser type and the pages requested, in order to serve the site and protect it from abuse.
03WHY WE USE IT, AND ON WHAT LEGAL BASIS
| What for | Legal basis |
|---|---|
| Calculating and showing your audit result, and emailing you a copy | Performance of a contract, or steps taken at your request before entering one — GDPR Art. 6(1)(b). You asked for the result; this is how it is delivered. |
| Sending you marketing emails about coaching, playbooks and offers | Your consent — GDPR Art. 6(1)(a), and art. 398 of the Polish Prawo komunikacji elektronicznej. Given by ticking an optional box that is unticked by default, separately from your request for your results. You can withdraw it at any time, and every email carries an unsubscribe link. |
| Sorting leads by score, bottleneck and stated budget so follow-up is relevant | Our legitimate interest in running the business efficiently — GDPR Art. 6(1)(f). You can object; see section 08. |
| Reading your audit before a call you have booked, so the call is useful | Performance of a contract, or steps at your request — Art. 6(1)(b). |
| Keeping invoices and accounting records | Legal obligation under Polish tax law — Art. 6(1)(c). |
| Establishing or defending legal claims | Legitimate interest — Art. 6(1)(f). |
Profiling
Your answers are used to place you in a segment and to decide which offer you are shown and which emails you receive. This is profiling in the sense of GDPR Art. 4(4). It produces no legal or similarly significant effect on you: nothing is refused, no price changes, and a human makes every decision that matters. You can object to it under Art. 21.
04WHO ELSE SEES IT
We use the following processors. Each one only receives what it needs, and each is bound by a data processing agreement.
| Provider | What it does |
|---|---|
| Netlify | Hosts the website. Sees server log data including your IP address. United States. |
| Make.com | Passes your audit submission from the website to our spreadsheet and sends your results email. [Confirm which region your Make organisation is in — EU or US.] |
| Google (Google Workspace) | Stores your audit submission in a spreadsheet (first name, email, answers, scores and the time you finished) and provides our business email. [Confirm Workspace data region.] |
| Umami | Counts page visits and steps through the audit, without cookies and without storing your IP address or anything that identifies you. [Confirm Umami Cloud's hosting region.] |
| Stripe | Processes payments for the playbooks and call deposits. Receives your payment details directly; we never see your full card number. Sends payment and refund receipts. |
| Cal.com | Schedules your call and sends booking confirmations and reminders by email and, if you give your number and agree to it, by SMS. Receives your name, email, chosen time and, optionally, your phone number. |
| systeme.io | Sends our follow-up emails: the reminder if you leave the audit early, the short breakdowns and offers (only if you ticked the box), and the onboarding emails after a purchase. Receives your first name, email, scores and which emails you should get. Handles unsubscribes. |
| Zoom | Hosts the video call itself. Receives your name and email as shown in the meeting. |
The fonts on this site are hosted on our own server, so no font provider receives your data.
We do not sell your data, and we do not share it with anyone for their own marketing.
05TRANSFERS OUTSIDE THE EEA
Some providers above are in the United States. Where that is the case, the transfer relies on the European Commission's Standard Contractual Clauses, on the provider's certification under the EU–US Data Privacy Framework, or both. You can ask us for details of the safeguards that apply to any specific provider.
06HOW LONG WE KEEP IT
- Audit answers and results: [e.g. 24 months] from completion, then deleted.
- Contact record and marketing consent: until you unsubscribe or ask us to delete it, plus a record of the withdrawal itself so we know not to contact you again.
- Customer and booking records: for as long as needed to provide the service, then for the period required to defend legal claims.
- Invoices and accounting records: 5 years from the end of the tax year, as Polish tax law requires.
- Server logs: as long as our hosting provider retains them.
07COOKIES AND BROWSER STORAGE
The site sets no cookies of any kind. Visits are counted with Umami, which works without cookies and without identifying you.
When you start the audit from the landing page, your first name and email are held briefly in your browser's session storage so the quiz can carry them to the next page. It is deleted the moment the quiz reads it, and in any case when you close the tab. It never leaves your device except as part of the submission you complete. Storage that is strictly necessary to deliver something you asked for does not require consent.
When you finish the audit, your three scores and your bottleneck (not your name or email) are saved in your browser's local storage, so the playbook page can show your results if you come back to it later. They stay on your device until you clear your browser data or take the audit again, and they are never sent to us from there.
If we ever add tools that use cookies or advertising, we will ask for your consent first and update this policy.
08YOUR RIGHTS
Under the GDPR you can ask us to:
- Give you a copy of the personal data we hold about you (Art. 15).
- Correct anything inaccurate (Art. 16).
- Delete it (Art. 17).
- Restrict what we do with it while a dispute is resolved (Art. 18).
- Send it to you or another provider in a portable format (Art. 20).
- Stop processing based on legitimate interest, including the segmentation described in section 03 (Art. 21). If you object to direct marketing, we stop, with no balancing test.
You can withdraw consent to marketing emails at any time, either through the unsubscribe link in any email or by writing to us. Withdrawing it does not make anything we did beforehand unlawful.
Write to hello@coachkarmos.com and we will respond within one month.
If you think we have handled your data badly, you can complain to the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
09IS IT REQUIRED
Giving us your name and email is voluntary, but without them we cannot send you your result. Agreeing to marketing emails is entirely optional, sits behind a separate box that is unticked by default, and you get your result whether you tick it or not.
10AGE
This service is for adults. It is not directed at anyone under 18 and we do not knowingly collect data from anyone under 18.
11CHANGES
If we change this policy we will update the date at the top. Material changes affecting how we use data you have already given us will be emailed to you.