Privacy Policy

The controller of your personal data is Empowered House P.S.A., a simple joint-stock company (prosta spolka akcyjna) organized under the laws of Poland, operating the EmpoweredHouse brand.

• Registered office: Droga Debinska 3A/3, 61-555 Poznan, Poland
• KRS: 0001253770
• VAT ID (NIP): PL 7831958235
• REGON: 545235669
• Contact for privacy matters: contact@empowered.house

We have appointed a Data Protection Officer, Karol Wojtaszek, whom you can reach at contact@empowered.house.

This policy covers the EmpoweredHouse marketing website, including the Empowered Intelligence product pages under empowered.house/intelligence, and direct correspondence with us. The Empowered Intelligence contact form and the Empowered Intelligence application are covered by the Empowered Intelligence privacy policy at empowered.house/intelligence/privacy.

Data you give us through the fit-call booking form or by email:

• Identity and contact data: your name, work email address, company name, and role.
• Qualification data you choose to share: the processes you would encode first, what you have tried so far, and an estimated annual revenue range.
• The content of any message you send us.

Data collected automatically when you visit the Site:

• Technical data: IP address, browser type and version, device and operating system, and approximate location derived from the IP address.
• Usage data: pages visited, referring URLs, timestamps, and interactions, collected through cookies and similar technologies.
• Business-visitor identification data: Snitcher uses your IP address to identify the company or organization associated with your visit. It identifies the business, not you as an individual.

We do not intentionally collect special categories of data, for example health, political, or biometric data. Please do not include such data in free-text fields.

Purpose	Legal basis
Respond to your enquiry, schedule and run a fit call, and send a written recap	Steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)); our legitimate interest in responding to business enquiries (Art. 6(1)(f))
Assess whether an engagement is a fit and prepare a proposal	Pre-contract steps (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f))
Operate, secure, and improve the Site	Legitimate interest in running a safe, functional website (Art. 6(1)(f))
Non-essential analytics and any marketing communication	Your consent (Art. 6(1)(a)), where required
Comply with legal obligations, for example accounting and tax	Legal obligation (Art. 6(1)(c))

We do not run an automated nurture or marketing sequence, and we do not subscribe you to anything without your consent.

The Site uses cookies and similar technologies. Strictly necessary cookies keep the Site working and do not require consent.

If you consent through the cookie banner, we use PostHog to collect product and usage analytics, such as pages visited and interactions. We use this data to understand how people use the Site and to improve it. You can grant, decline, or withdraw consent at any time through the cookie banner and your browser settings. Withdrawing consent does not affect processing carried out before the withdrawal.

We also use Snitcher, a business-visitor identification service. It uses your IP address to identify the company or organization behind a visit, not you as an individual, and sets one cookie (SNID) to distinguish visitors. Snitcher processes data within the EU (AWS, Frankfurt). We process this data based on our legitimate interest in understanding which organizations engage with us (Art. 6(1)(f)). You can object at any time by contacting us.

The trackers in use include PostHog's analytics cookies, Google Analytics cookies, and Snitcher's SNID cookie.

We use Google Analytics to measure visits and usage of the Site. You can opt out using the analytics banner. Google Analytics also respects your browser's Do Not Track setting.

We also use Ahrefs Web Analytics to count visits and page views. It sets no cookies and, according to its provider, collects no personal data.

The newsletter signup is protected by Google reCAPTCHA v3, which keeps automated spam out. When you focus the email field, reCAPTCHA loads; when you subscribe, it collects your IP address, browser and device data, and how you interacted with the page, and sends them to Google, which may set its own cookies. We use the result only to decide whether a signup came from a person, based on our legitimate interest in keeping the list free of spam (Art. 6(1)(f)). Google's processing is covered by the Google Privacy Policy and Terms of Service.

We share personal data only with:

• Service providers (processors) that act on our instructions. These are PostHog and Google Analytics (product and usage analytics), Ahrefs Web Analytics (cookieless traffic measurement), Snitcher (business-visitor identification), Google reCAPTCHA (spam protection on the newsletter signup), and our hosting, email, and calendar/scheduling providers.
• Professional advisers, for example legal and accounting, where necessary.
• Authorities, where required by law.

We do not sell your personal data.

Some of our providers may process data outside the European Economic Area. This may include PostHog, depending on the configured hosting region, and Google, for reCAPTCHA, in the United States. Snitcher processes data within the EU (AWS, Frankfurt). For transfers outside the European Economic Area, we rely on an adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can request information about these safeguards by contacting us.

• Enquiry and fit-call data: kept for the duration of the conversation and for up to 24 months afterwards to follow up or to evidence the basis of contact, unless you ask us to delete it sooner.
• Data tied to a signed engagement: kept for the life of the engagement and for the period required by accounting and limitation-period rules.
• Technical, analytics, and visitor-identification data: kept for up to 14 months.

Under the GDPR you have the right to: access your data; rectify it; erase it; restrict or object to processing; data portability; and, where processing is based on consent, to withdraw consent at any time without affecting prior processing.

To exercise any right, contact contact@empowered.house. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, or with the authority in your country of residence.

We apply technical and organizational measures appropriate to the risk, including access controls, encryption in transit, and limiting who can see enquiry data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Site is intended for businesses and is not directed at children. We do not knowingly collect data from children under 16.

We may update this policy. The current version and its effective date are posted on this page. Material changes will be made clear on the Site.

Questions about this policy or your data: contact@empowered.house.