1. Who we are
baaark.com is operated by MRJ (trading as baaark.com), registered in Poland (REGON 385160952, NIP PL7532455176). Address: ul. Fabryczna 14d, 53-609 Wrocław, Poland. Email: hello@baaark.com. For the purposes of GDPR and UK data protection law we are the data controller for the personal data described here.
2. Information we collect
2.1 Information you give us
- Name, business name, town, email address and phone number when you use the contact form or email us
- Anything you type into the enquiry form, and any file or sketch you attach (including a doodle drawn on the site)
- Billing details when you buy a pack or a subscription — payment card data goes straight to Stripe and never touches our servers
2.2 Technical data
- IP address, browser and device type, operating system, time zone, referring page
- A short-lived hash of your IP address and browser, used only to count visits (see the cookie policy). It cannot be turned back into your IP and expires within days.
2.3 Usage data
- Pages visited, time on page, access times, the country the visit came from
3. How we use it
- To answer enquiries and quote for work
- To provide and maintain the services you buy — design, hosting, support
- To take payment and manage your subscription
- To send administrative messages about your project or account
- To keep the site secure and understand how it is used
- To meet legal and accounting obligations
4. Legal basis
Under GDPR we process your data on the basis of: performance of a contract (or steps taken at your request before one), our legitimate interests in running and protecting the business, compliance with legal obligations, and — where we ask for it — your consent, which you can withdraw at any time.
5. Where your data lives and who processes it
We use a small number of service providers, each bound by data-processing terms:
- Vercel — hosts this website and the BAAARK! Sites platform (EU and US infrastructure)
- Supabase — the database behind the platform: enquiries, client sites, uploaded files (stored in a private bucket)
- Resend — sends the enquiry notifications and transactional email
- Cloudflare Turnstile — protects the forms from bots
- Stripe and SureCart (on our billing site, wp.baaark.com) — payments, invoices and subscriptions
- Google Workspace — email correspondence
Where a provider processes data outside the UK or EEA, transfers are covered by the EU Standard Contractual Clauses or the UK International Data Transfer Addendum.
6. Security
Everything is served over TLS. The platform uses row-level security in the database, two-factor authentication on our own accounts, private storage for uploaded files (each download is a time-limited signed link), automated backups and regular dependency updates.
7. Cookies
This site sets very few cookies and uses no advertising trackers. What it does set, and why, is in the cookie policy. You can change your choice at any time through the "Cookie settings" link in the footer.
8. Your rights
Under GDPR and UK data protection law you can: access the data we hold about you; have it corrected; have it erased; restrict or object to processing; take it with you in a portable format; and withdraw consent where processing relies on it. Email hello@baaark.com and we will act within 30 days.
9. How long we keep it
- Enquiries that do not become work: 12 months
- Client accounts: the duration of the service plus 12 months
- Financial records: 7 years, as the law requires
- Visit counts: aggregated; the underlying hashes expire within days
10. Children
Our services are for businesses and are not directed at anyone under 16. We do not knowingly collect data from children.
11. Changes
We update this policy when the way we work changes. The date at the top tells you when. Material changes will be flagged on the site or by email to clients.
Contact
For privacy questions or to exercise any of the rights above: hello@baaark.com
MRJ (trading as baaark.com), ul. Fabryczna 14d, 53-609 Wrocław, Poland.
13. Complaints
You can complain to a supervisory authority at any time: in the UK, the Information Commissioner's Office (ICO); in Poland, the Urząd Ochrony Danych Osobowych (UODO).
