Privacy Policy

01 Data Controller

Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and Czech Act No. 110/2019 Coll. on Personal Data Processing.

02 Information We Collect

2.1 Data You Provide Directly

• Name and surname
• Email address and phone number
• Company name and role (where applicable)
• Billing and payment details
• Information shared during working sessions, clarity calls, or consultations
• Business details, content, and materials provided for a Workflow Automation, AI Strategy & Advisory, or AI-Ready Launch engagement (e.g. website copy, FAQs, and workflow documentation used to build your site or AI assistant)
• Messages and communications sent via contact forms, email, or social media
• Testimonials, feedback, and survey responses (with your consent)

2.2 Data Collected Automatically

• IP address and browser type when visiting the website
• Cookie and session data
• Website usage information (pages visited, time on site, referral source)
• Analytics data processed via our website analytics provider

2.3 Data from Third Parties

• Social media profile information when you interact with our pages on Instagram, Facebook, or LinkedIn

03 How We Use Your Data

We use your data to:

• Respond to inquiries and deliver our Workflow Automation, AI Strategy & Advisory, and AI-Ready Launch services.
• Design, build, and hand off automations, websites, and AI assistants tailored to your business.
• Send newsletters or marketing updates (only with your explicit consent).
• Analyze website performance to improve user experience.

04 How Long We Keep Your Data

05 Who We Share Your Data With

We do not sell your data. We may share data with the following service providers, all of whom are bound by data processing agreements:

• Our website hosting and content management provider
• Automation, workflow, and AI assistant platforms used to build and run the systems we deliver for you
• Accounting and bookkeeping service providers
• Email service providers
• Professional advisors (legal, compliance) where necessary
• Government or regulatory authorities, only when legally required

Data may be stored on servers outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses.

06 Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest, including direct marketing
• Withdraw consent — at any time, where processing is based on consent, without affecting prior processing

To exercise any of these rights, email tamara@sapovalovasolutions.com. We will respond within 30 days.

07 Cookie Policy

7.1 Essential Cookies

Required for the website to function. Cannot be disabled. Legal basis: legitimate interest.

7.2 Analytics Cookies

Used to understand how visitors use the website. Legal basis: your consent. You can disable these through the cookie consent banner or your browser settings.

7.3 Marketing Cookies

May be set by embedded social media content or third-party tools. Legal basis: your consent. Manageable via cookie preferences on the site.

08 Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS)
• Secure password management
• Access controls limiting data to authorised individuals
• Regular review of security practices
• Secure backups

09 Complaints

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with:

10 Updates to This Policy

This Privacy Policy may be updated to reflect changes in our services, legal requirements, or data practices. Where changes are significant, we will notify you by email or via a notice on the website. Continued use of our services after notification constitutes acceptance of the updated policy.