Privacy Policy

1. Who controls your data

The data controller is PMFOR Paweł Pasterak, a sole proprietorship based in Poland (“we”, “us”). For anything related to your personal data, contact contact@vuplate.com.

2. What we collect

vuplate.com only collects data you actively give us — through the contact form on the site:

• email address (required),
• phone number (required),
• message text (optional),
• consent to receive marketing emails (optional, separate checkbox).

We don't use analytics or advertising cookies, and we don't track visitors. The site loads one third-party library — model-viewer (Google, served from unpkg.com) — to render 3D dish models in the browser. Loading it shares your IP address with that CDN, the same as any externally hosted JavaScript file; the library itself doesn't collect or send us any data about you.

3. Why we process it, and on what basis

We use your email and phone number only to respond to your inquiry and present an offer — the legal basis is Art. 6(1)(b) GDPR (steps taken at your request, prior to a possible contract). If you check the marketing consent box, we also send you emails about VuPlate — the basis is then your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with one click in the footer of any email.

4. Where your data is stored

Form submissions are stored in a PostgreSQL database hosted on Railway, in the EU (Western Europe) region — your data never leaves the European Economic Area.

5. Who we share it with

If you leave a message, its content is additionally forwarded as a notification to a private Telegram channel of the site administrator, solely so we can respond quickly. We don't sell or share your data with any third parties for marketing purposes.

6. How long we keep it

We keep your data for as long as the business contact or subsequent cooperation lasts, and in any case no longer than necessary for the purpose it was collected for. You can request deletion at any time — see section 7.

7. Your rights

Under GDPR, you have the right to:

• access your data and get a copy of it,
• have inaccurate data corrected,
• request erasure (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing,
• withdraw marketing consent at any time, without affecting the lawfulness of processing before withdrawal,
• lodge a complaint with the Polish data protection authority (UODO) if you believe we're processing your data unlawfully.

To exercise any of these rights, write to contact@vuplate.com.

8. Security

The contact form is protected by rate limiting per IP address and anti-spam measures (including a hidden field that catches bots) — these mechanisms don't collect any extra data about you; they only distinguish real submissions from automated traffic.

9. Changes to this policy

If we make a material change to this policy, we'll update the date at the top of this page. The current version is always available at vuplate.com/en/privacy-policy.

10. Contact

For anything about this policy or your data, write to contact@vuplate.com.