Privacy policy

1. Controller and contact

Your data controller is Konrad Ciurkiewicz, trading as Konrad Ciurkiewicz - Web Solutions, registered in the Polish Central Register and Information on Economic Activity (CEIDG), tax identification number (NIP) 7952583478, statistical registration number (REGON) 529617426, operating the Outwards project. Business address: ul. Przemyska 13A, 37-750 Dubiecko, Poland. Correspondence address: ul. Małopolska 1/192, 35-620 Rzeszów, Poland.

For privacy questions or requests, email: mail@getoutwards.com

2. Data we collect

When you sign up, we collect your email address, the page language, signup date and consent notice version. If you complete the optional survey, we collect your answers about your role, needs, current exposure checks, reasons to take action, expected price and any comment. Do not include passwords, API keys or confidential information in your comment. Our hosting provider processes technical data, including your IP address and request information. If you accept analytics, Google receives information about visits and interactions, language, landing page, referrer and UTM campaigns. We do not send email addresses or survey answers to Analytics. When you join the waitlist, we also save the visit source, UTM campaign tags, landing page and referrer to understand where signups come from. These details are attached to your MailerLite contact and R2 copy when you submit the form, independently of your Google Analytics choice. We remove URL query strings and fragments and do not use additional cookies or persistent browser storage for this.

3. Purposes and legal bases

We use your email to manage the waitlist and contact you about the Outwards launch and early access. This is based on your consent when you sign up (Article 6(1)(a) GDPR). The survey is optional; submitting answers gives us your consent to use them to understand customer needs and develop the product, on the same legal basis. Analytics requires consent in the cookie banner. Website security, abuse prevention and responding to correspondence are based on our legitimate interests (Article 6(1)(f) GDPR). We do not sell your data or make solely automated decisions with legal effects.

4. Service providers

MailerLite stores contacts and survey answers and sends emails. Cloudflare hosts and protects the website, stores signup copies in private R2 storage and forwards incoming mail. Google provides analytics with your consent and the inbox receiving forwarded correspondence. Authorized providers may process data as needed to deliver their services. Their processing terms and policies are linked below.

• MailerLite
• Cloudflare
• Google

5. International transfers

Global providers, including Google and Cloudflare, may process data outside the European Economic Area, particularly in the United States. These transfers are covered by mechanisms provided for in the GDPR, including adequacy decisions or standard contractual clauses, as set out in the relevant provider’s terms. Contact us for information about the safeguards used.

6. How long we keep data

We keep emails, signup details and survey answers until you withdraw consent, for no more than 12 months after signup. This applies to MailerLite and our R2 copies. Once you unsubscribe, we stop contacting you; MailerLite may keep a limited unsubscribe record to prevent further emails. We keep correspondence for as long as needed to handle your request. Event and user data in standard GA4 are subject to retention settings of up to 14 months; aggregate reports may be kept longer. Analytics cookies may remain in your browser for up to two years unless deleted earlier.

7. Cookies and analytics

The outwards_locale cookie remembers your language. The outwards-analytics-consent-v1 cookie remembers your analytics choice for 180 days. These cookies support your settings. Google Analytics and the _ga and _ga_1CTST20ZSQ cookies are enabled only after you accept. We then also store the visit source in your browser’s session storage. We measure page views, clicks and stages of signup and survey completion. You can decline or change your choice below or in the footer. Withdrawing consent stops measurement and removes GA cookies set by this website; it does not automatically erase data already sent to Google.

8. Your rights

You may request access to, correction or deletion of your data, restriction of processing and, where the GDPR provides for it, data portability. You may object to processing based on legitimate interests and withdraw consent at any time. Withdrawal does not affect the lawfulness of earlier processing. Email the contact address above to exercise your rights.

You may also complain to your local data protection authority or, in Poland, to the President of the Personal Data Protection Office (UODO).

9. Your choices and unsubscribing

Providing an email is voluntary, but it is needed to join the waitlist. The survey and analytics are optional. You can use the website without them, and closing the survey does not cancel your signup. Unsubscribe using the link in an email or by contacting us. You can ask us to delete your survey answers while remaining on the waitlist.

10. Policy updates

We publish the current policy here with its update date. If we materially change how we process data, we will inform the people affected and obtain fresh consent where required.