Privacy policy

Effective from: 14.10.2026

1. Who is the data controller

The controller of your personal data is Little bee studio Viktoriia Medynska, NIP 679-326-72-89, REGON 525314516, ul. Mieczykowa 20/11, 30-389 Kraków. Studio: ul. Szwedzka 23/U2, 30-324 Kraków.

Contact regarding data: littlebeestudio.plkr@gmail.com, tel. +48 579 306 408.

2. What data I collect and why

• Enquiry / booking form (name, e-mail, phone number, date, message) — to answer the enquiry, agree the date and carry out the session. Basis: taking steps prior to entering into a contract and performance of a contract (Art. 6(1)(b) GDPR).

• Settlements (data for payment of the deposit and the session) — tax and accounting obligations (Art. 6(1)(c) GDPR).

• Photos from the session — performance of the service. Publication of photos in the portfolio and on social media only with your consent (Art. 6(1)(a) GDPR), in line with the session terms.

• Cookies and website statistics — see section 5.

3. How long I keep data

• enquiries without a booking — up to 12 months from the last contact;

• data related to the session and settlements — for the period required by tax regulations (5 years from the end of the tax year);

• photos — for the time needed to perform the service, and those published with consent — until it is withdrawn.

4. Who I share data with

Only service providers I use to run the studio: website hosting and forms (Wix.com), e-mail and file transfer (Google — Gmail, Google Drive), courier companies when sending prints. Data may be processed outside the EEA (e.g. in the USA) on the basis of standard contractual clauses or a European Commission decision.

5. Cookies and analytics tools

The website uses cookies and browser storage (localStorage, sessionStorage). Files necessary for the website to work are stored without consent; all others only with your consent (cookie banner). With your consent I use the tools: Google Analytics 4 and Google Tag Manager (tag management), Google Ads (measuring ad effectiveness), Meta Pixel (measuring ad effectiveness on Facebook and Instagram), Microsoft Clarity (anonymous recordings of website use, click maps). You can change your consent at any time with the "Cookie settings" button on the website or in your browser.

Necessary (no consent needed)

server-session-bind, XSRF-TOKEN, hs, ssr-caching, svSession, bSession, __cf_bm (Wix / Cloudflare) — website operation, security, session, bot protection; from a few dozen minutes to about 13 months (svSession — 400 days). consent-policy (Wix) — remembering your choice, about 1 year. fedops.logger.sessionId, mpaSessionId (Wix, localStorage / sessionStorage) — technical.

Analytics (with consent)

_clck (Microsoft Clarity) — user identifier, about 1 year. _clsk (Microsoft Clarity) — session, about 1 day. MUID, MR, SM, SRM_B, ANONCHK (Microsoft: Clarity / Bing) — user identifier and synchronisation, from 10 minutes to about 13 months. _cltk (Clarity, sessionStorage) — session.

Marketing (with consent)

_gcl_au (Google Ads) — conversion attribution, 90 days. _gcl_ls (Google Ads, localStorage) — conversion attribution. test_cookie (Google DoubleClick) — cookie support check, 15 minutes. _fbp (Meta Pixel) — browser identifier for ads, 90 days.

6. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object, and withdraw consent at any time (without affecting prior processing). Write to littlebeestudio.plkr@gmail.com.

You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

7. Do I have to provide data

Providing data in the form is voluntary, but without a name and contact I will not be able to answer the enquiry or book a session. I do not make decisions in an automated way.

8. Changes

The current version of the policy is always on this page.