Privacy Policy

Last updated: February 2026

Who We Are

This website is operated by Mat Wycislik, a data strategy consultant based in Poland. I help companies figure out what to do with their data.

What Data We Collect

Data Maturity Assessment. When you complete the assessment on this website, we collect:

• Your email address
• Your assessment answers and resulting score
• Timestamp of when you completed the assessment

Booking a call. When you book a call through Cal.com, we collect:

• Your email address
• Your name (and surname, if provided)

Paid consultation. When you book a paid consultation, your payment is processed by Stripe. We do not store your payment card details. Stripe collects:

• Payment card information
• Billing name and email
• Transaction details

We do not use cookies for tracking or analytics. Technical cookies may be set by our hosting provider (Cloudflare) for security purposes. We do not collect any data beyond what you explicitly provide.

Why We Collect This Data

We use your data for the following purposes:

• To send you your assessment results
• To schedule and conduct booked calls
• To process payments for paid consultations
• To send occasional insights about data strategy (only with your consent)
• To improve the assessment based on aggregate, anonymized patterns

Legal Basis

We process your data based on:

• Consent (Article 6(1)(a) GDPR) — for the assessment form and marketing communications. You can withdraw your consent at any time by contacting us.
• Performance of a contract (Article 6(1)(b) GDPR) — for booking and conducting calls, and processing payments for paid consultations.

How Long We Keep Your Data

We retain your data for as long as necessary to fulfill the purposes described above, or until you request deletion. If you unsubscribe from communications, we will delete your data within 30 days unless we have another legal basis for keeping it.

Who Has Access to Your Data

Your data may be processed by:

• Mat Wycislik (data controller)
• Cloudflare (website hosting and CDN)
• Cal.com (appointment scheduling)
• Stripe (payment processing for paid consultations)

We do not sell, rent, or share your personal data with third parties for their marketing purposes.

Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing of your data
• Object to processing
• Data portability - receive your data in a structured format
• Withdraw consent at any time

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Where Your Data Is Stored

This website is hosted on Cloudflare, a global CDN provider. Your assessment data (email address and responses) is processed and stored on servers located in the EU.

Some of our processors (Cal.com, Stripe) are US-based companies. Where personal data is transferred outside the European Economic Area (EEA), these transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, the EU-US Data Privacy Framework.

Automated Decision-Making

We do not use automated decision-making or profiling based on your personal data.

Voluntary Nature of Data Provision

Providing your personal data is voluntary. However, it is necessary to receive your assessment results. If you choose not to provide your email address, we will not be able to send you the results.

Changes to This Policy

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this page.

Questions or Complaints

If you have questions about this privacy policy or how we handle your data, please contact us at [email protected].

You also have the right to lodge a complaint with the Polish data protection authority (UODO) or your local supervisory authority if you believe your data protection rights have been violated.