Privacy Policy

This Privacy Policy describes how personal data of users of the website available at https://baalpha.com (the "Website") is processed.

1. Data controller

The data controller is bāAlpha sp. z o.o., entered in the National Court Register (KRS) under number 0000906930, Tax ID (NIP) 8883150735, statistical number (REGON) 389226197, registered address: ul. Długa 61, 87-800 Włocławek, Poland, registered with the District Court in Toruń, 7th Commercial Division of the National Court Register, share capital 5,000.00 PLN.

Contact the controller at: info@baalpha.com.

2. Purposes and legal bases for processing

• ensuring the operation, security and diagnostics of the Website — Art. 6(1)(f) GDPR;
• handling inquiries sent by e-mail or through a form, if one is implemented — Art. 6(1)(b) or (f) GDPR, depending on the purpose of contact;
• performing contracts and pre-contractual actions — Art. 6(1)(b) GDPR;
• fulfilling legal and accounting obligations — Art. 6(1)(c) GDPR;
• establishing, pursuing or defending legal claims — Art. 6(1)(f) GDPR;
• analytics or marketing cookies — only on the basis of consent, if such tools are implemented.

3. Scope of data collected

Depending on how you use the Website, we may process your name, e-mail address, company details, the content of your message, technical device data, and data contained in server logs.

Please do not send particularly sensitive data via a standard form or e-mail unless it is necessary for a specific service.

4. Server logs

Using the Website involves saving technical data in server logs, such as your public IP address, the date and time of the connection, and information about your browser and operating system. Logs are used to maintain, diagnose and secure the Website.

5. Forms and correspondence

If you contact bāAlpha by e-mail or through a form, we process the data you provide and the content of the correspondence in order to handle your inquiry.

6. Cookies

The Website may use technically necessary cookies. If analytics or marketing cookies are implemented in the future, they will be used in accordance with applicable law and, where required, only after obtaining your consent.

7. Recipients of data

We do not sell or rent your data. Data may be shared with entities that provide services necessary for the Website's operation on behalf of bāAlpha, in particular hosting, e-mail, IT service providers, form tools, or other tools used on the Website — to the extent necessary for their function and consistent with the legal basis for processing.

As of the date of this update, we use in particular: Bluehost (Website hosting), Purelymail (e-mail), Gumroad, Inc. (sales and payment processing for digital products, including the bāIMN template), Notion Labs, Inc. (delivery of product content), and Google Fonts (displaying typefaces). Purchasing through Gumroad means that transactional and billing data is also processed by Gumroad as an independent controller for its own tax and payment obligations.

8. Transfers of data outside the EEA

Where we use providers established outside the European Economic Area, data transfers are carried out on the basis of appropriate mechanisms provided for by the GDPR, in particular standard contractual clauses or another legally permissible mechanism.

This applies in particular to providers established in the United States: Gumroad, Inc., Notion Labs, Inc., and Google (Google Fonts).

9. Data retention period

We retain data for as long as necessary to fulfil the purpose for which it was collected, and afterwards for the period required by law or until the limitation period for potential claims expires. Data processed on the basis of consent is retained until the consent is withdrawn, unless another legal basis for further processing applies.

10. Your rights

You have the right to access your data, rectify it, erase it, restrict its processing, transfer it, object to processing based on our legitimate interest, and withdraw your consent at any time — where processing is based on it.

For matters concerning your personal data, please contact the controller: info@baalpha.com.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), Poland's supervisory authority, or with the supervisory authority in your own EU member state.

11. Automated decision-making

Data of Website users is not used for automated decision-making that produces legal effects concerning them or similarly significantly affects them.

12. Changes to this Privacy Policy

This Policy may be updated, in particular in connection with changes in the law, the Website's functionality, or the providers used. The current version is published on this page.

Last updated: August 10, 2026.