Legal

Privacy Policy

Last updated: November 3, 2026

This policy explains what personal data is collected when you visit this website or get in touch with Peak Prospecting, why it is collected, and what rights you have. I process personal data in line with the EU General Data Protection Regulation (GDPR).

The same rules apply to every visitor, wherever you are. If you visit from the European Union, the European Economic Area or the UK, you have all the rights described in section 7.

1. Who is responsible for your data

The controller of your personal data is Hanna Lakota, running a sole proprietorship registered in Poland under the name PEAK PROSPECTING LEAD GENERATION HANNA ŁAKOTA, Tax ID (NIP): 5252993807, REGON: 52788187000000, operating as Peak Prospecting ("I", "me").

For any question about your data, write to hanna@peak-prospecting.co.

2. What data I collect and why

Contact form and email

When you fill in the contact form or email me, I receive your name, email address, company website and anything you choose to write. I use this only to reply to you and, if you wish, to prepare and hold our first call.

Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering messages (Art. 6(1)(f) GDPR).

Booking a call

If you book a call through the online calendar, the booking tool collects the details you enter (such as your name, email and the time you choose) so that the meeting can be scheduled. Legal basis: Art. 6(1)(b) GDPR.

Analytics (only with your consent)

If you click "Accept" in the cookie banner, I use Google Analytics 4 to understand how visitors use this site, for example which pages are viewed, how long a visit lasts and how people arrive here. Details are in section 4 below. Legal basis: your consent (Art. 6(1)(a) GDPR, and for storing cookies on your device, the EU ePrivacy rules as implemented in national law). If you click "Reject" or simply ignore the banner, Google Analytics is not loaded at all and no analytics cookies are set.

Technical data

Like every website, the hosting server automatically records basic technical data (such as IP address, browser type and time of the visit) to keep the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Cookies

Cookies are small files stored in your browser. This site uses:

Saying no is as easy as saying yes. You can change your mind at any time with the "Cookie settings" link in the footer of every page. If you withdraw consent, analytics stops and the analytics cookies are removed. You can also delete cookies in your browser settings.

4. Google Analytics in detail

• Who provides it: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as my data processor. Google may transfer data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, and Google also uses the European Commission's Standard Contractual Clauses.
• What is collected: a random visitor ID stored in a cookie, pages viewed, time on the site, the website you came from, approximate location (country and city, derived from your IP address), device type, browser and operating system. Google Analytics 4 does not store or log full IP addresses for visitors in the EU.
• What it is not used for: I don't use Google Analytics for advertising, remarketing or building profiles of individual people. Advertising features and Google signals are turned off, and I can't identify you by name from this data.
• How long it is kept: 14 months, after which Google deletes it automatically.
• More information: Google's Privacy Policy and how Google uses data from sites that use its services. You can also block Google Analytics on all websites with the Google Analytics opt-out browser add-on.

5. Who receives your data

I don't sell your data. It is shared only with service providers that help me run this website and my business, and only to the extent needed: website hosting, the contact form provider, the calendar booking tool, my email provider and, if you consent, Google (see section 4). These providers act on my behalf and are bound by data processing agreements.

Some of these providers may process data outside the European Economic Area, for example in the USA. In that case the transfer is protected by an adequacy decision (such as the EU-US Data Privacy Framework) or by Standard Contractual Clauses approved by the European Commission.

6. How long I keep your data

• Messages and contact details: as long as needed to handle your enquiry, and no longer than 2 years after our last contact, unless we start working together.
• If we sign a contract: for the duration of the contract and afterwards for as long as required by tax and accounting law.
• Analytics data: up to 14 months.
• Data processed on the basis of consent: until you withdraw it.

7. Your rights

You have the right to:

• access your data and get a copy of it,
• have it corrected or deleted,
• restrict how it is processed,
• data portability,
• object to processing based on legitimate interest,
• withdraw your consent at any time, without affecting what was done before,
• lodge a complaint with a data protection authority. In Poland this is the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw.

To use any of these rights, write to hanna@peak-prospecting.co.

Giving your data is voluntary, but without an email address I can't reply to your message. I don't use your data for automated decision-making or profiling.

8. Changes to this policy

I may update this policy when the website or the tools I use change. The current version is always available on this page, with the date of the last update at the top.