---
title: "Privacy policy"
description: "How Airform collects, uses and protects personal data when you visit the site, book a call or email us."
url: https://airform.design/legal/privacy-policy
---

# Privacy policy

How Airform handles your personal data – in plain language.

Airform privacy policy

Last updated: 21 October 2026

* * *

## 1. Who we are

Airform is a founder-led product design and launch video studio, run by Michael Nowak as a sole trader based in Poland. Michael Nowak is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

For anything about your data, email [mike@airform.design](mailto:mike@airform.design).

## 2. What we collect

We only collect what we need to talk to you about your project:

-   **When you book a call** - your name, email address and the answers you give in the booking form (for example the services you’re interested in, your project and budget), plus the time you choose.
-   **When you email us** - your email address, name and whatever you write to us.
-   **When you visit the site** - technical data your browser sends with every request, such as your IP address, browser type and the pages you open. We use it to deliver and protect the site and to see, in aggregate, how it’s used. To see which sources lead to booked calls, we also make a one-way code from your IP address, your browser and a random value that changes every day. It can’t be turned back into your address, we never store the address itself, and we delete the code after two days. We don’t use cookies for this.

We don’t ask for sensitive data, and we never sell or rent your personal data.

## 3. Why we use it, and on what legal basis

-   **To reply to you and hold the call you booked** - because you asked us to, before any contract (GDPR Art. 6(1)(b)).
-   **To run, secure and improve the site** - our legitimate interest in a working, safe website and in understanding which pages are useful (Art. 6(1)(f)).
-   **To keep business and tax records** if you become a client – our legal obligations under Polish law (Art. 6(1)(c)).

## 4. Who helps us

We use a few trusted providers that process data on our behalf, only for the purposes above:

-   **Cal.com** - booking calls (the calendar on this site and at cal.com).
-   **Google Workspace** - email, calendar and Google Meet for the call itself.
-   **Cloudflare** - hosting, security and privacy-friendly, cookie-free website statistics.

Some of these providers are based in the United States. Where data leaves the European Economic Area, it’s protected by the EU-U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

## 5. How long we keep it

-   **Enquiries and calls that don’t lead to a project** - up to 2 years, so we have the context if you come back, or sooner if you ask us to delete them.
-   **Client records** - for as long as Polish tax and accounting law requires (generally 5 years after the end of the relevant tax year).
-   **Technical logs** - for the short periods our hosting provider keeps them.

## 6. Cookies

This site doesn’t set any cookies of its own, and we don’t use advertising or cross-site tracking. Our website statistics are collected without cookies.

The booking calendar (Cal.com) may set a strictly necessary security cookie from its provider (for example Cloudflare’s `__cf_bm`, which tells people apart from bots). Because it’s needed for the service you’re using and doesn’t track you, it doesn’t require consent. That’s why you won’t see a cookie banner here. If that ever changes, we’ll ask for your consent first.

## 7. Your rights

Under the GDPR you can ask us to:

-   access the personal data we hold about you, and get a copy of it;
-   correct it, or delete it;
-   restrict how we use it, or object to our use based on legitimate interests;
-   move it to another provider (data portability).

Email [mike@airform.design](mailto:mike@airform.design) and we’ll reply within one month. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO, [uodo.gov.pl](https://uodo.gov.pl)), or the authority in the EU country where you live.

## 8. Security

The site is served over HTTPS, and we keep access to your data limited to what’s needed to work with you. No method of transmission or storage is completely secure, but we take reasonable care to protect what you share with us.

## 9. Changes to this policy

If we change how we handle personal data, we’ll update this page and the date at the top. For bigger changes that affect you directly, we’ll let you know.

Questions? [mike@airform.design](mailto:mike@airform.design), or [book a call](https://airform.design/intro).