Privacy Policy

Effective date: 10 October 2026.

Who is responsible

Enyuka Studio Mateusz Kozak, operating the Matt Kozak website at mkozak.pl, is responsible for the personal data described in this notice.

NIP: 6472465040. Address for correspondence and service: Czerniowiecka 9/3, 02-705 Warszawa, Poland.

Contact: [email protected], +48 533 650 926.

Visiting the website

The website runs on Ghost, which we operate on OVHcloud infrastructure. Requests to the site necessarily include technical information such as IP address, requested URL, browser information and time of access. Server and security logs may record this information to operate, troubleshoot and protect the website.

We use Plausible for aggregate traffic statistics. Plausible describes its service as using no cookies or persistent visitor identifiers and not storing raw IP addresses. See Plausible's visitor data policy for its data handling.

Contact and product support

If you email, telephone or write to us, we process your contact details, message and information needed to answer the enquiry, provide support or handle a complaint. Email is handled through Google Workspace. Please do not send payment card details, credentials or unnecessary sensitive information.

Purchases through Stripe and Link

Checkout is not yet available. The planned checkout uses Stripe Managed Payments, with purchases sold through Link. Stripe and Link collect the checkout, payment and billing information needed to process transactions and handle tax, fraud prevention and payment support under their own privacy notice.

We may access the order reference, customer contact details, purchased product, payment status and related order information made available by Stripe, to provide the product, verify entitlement and resolve support requests. Payment card entry is handled by Stripe and its payment providers; we do not receive complete payment card details.

Buying the kit does not subscribe you to a newsletter. Public membership registration and newsletter sending on this website are currently disabled.

Purposes and legal bases

• Enquiries, security and website operation: legitimate interests in communicating and maintaining the service.
• Delivery and support: performing the relevant contract, or legitimate interests where you represent a purchasing organisation.
• Required accounting and legal records: compliance with legal obligations.
• Claims and disputes: legitimate interests in establishing, exercising or defending rights.

Service providers and external sites

OVHcloud provides hosting infrastructure; Google Workspace provides email; Plausible provides aggregate analytics; Stripe and Link process payment data for their own transaction purposes, including under the planned merchant of record arrangement. Data needed for their services is handled under the applicable provider arrangements.

The public website uses Cloudflare's email-address protection. It also loads fonts from Bunny Fonts and a Ghost search script from jsDelivr; your browser contacts these providers to obtain those resources. Provider notices: Cloudflare, Bunny Fonts, jsDelivr.

Following links to Calendly, social networks or other websites takes you to services with their own privacy notices. Embedded third-party media on individual articles may also send technical information to the relevant provider when loaded or used.

Google Workspace and Stripe may process data internationally. Their published terms describe transfer safeguards, including standard contractual clauses where applicable. Contact us for information about arrangements relevant to your data: Google Workspace data processing terms, Stripe privacy notice.

How long data is kept

We retain enquiries and support correspondence while needed to handle the matter and relevant claims. Transaction and accounting records are kept for applicable statutory periods. Technical logs are retained only as needed for operation, security and incident investigation. These criteria determine retention; data is not kept indefinitely merely because it was collected.

Your rights

Where applicable, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw any consent without affecting earlier lawful processing. Contact [email protected] to exercise your rights. You may complain to the Polish supervisory authority, UODO, or your local authority.

Contact and order information may be necessary to answer an enquiry or provide a purchase. We do not use it for solely automated decisions with legal or similarly significant effects.

Changes

Updates to this notice will be published here with a revised effective date.