1. Who is responsible for your information?
Anna Closset, operating Filling my bucket as a sole trader (jednoosobowa działalność gospodarcza) in Poland, is the controller of personal information processed for this website and its contact enquiries. For privacy questions or to exercise your rights, use the contact form and select “Privacy request”.
Business registration and postal contact details will be added before sales open. This preview does not accept purchases.
2. Information we use and why
- Contact enquiries: your name, email address, selected topic, message, and any order reference you choose to provide. We use these to answer your enquiry, provide requested support, and manage correspondence. The legal basis is taking steps at your request before a contract or performing a contract (GDPR Article 6(1)(b)), where relevant; otherwise our legitimate interest in responding to enquiries (Article 6(1)(f)).
- Website delivery and security: technical information such as IP address, browser information, request time, and security signals may be processed by our hosting and anti-abuse providers. The legal basis is our legitimate interest in running a reliable, secure website (Article 6(1)(f)).
- Legal obligations: records that must be kept for accounting, consumer protection, or other legal duties are processed on that legal basis (Article 6(1)(c)).
The form is not a newsletter signup. We do not add you to a marketing list when you contact us.
3. Who receives information?
Cloudflare provides hosting and Turnstile security verification. Contact messages are sent through Cloudflare’s email infrastructure to our business correspondence inbox, hosted by Google. These services process the information needed to deliver, secure, and handle your message. Your form submission is not published on this website.
When purchases become available, a link will take you to Creem’s separately hosted checkout. Its own privacy notice and checkout terms will explain its processing. This website does not collect payment card details.
Read Cloudflare’s privacy policy, the Cloudflare data processing addendum, and Google’s privacy policy.
4. Turnstile and cookies
The contact page uses Cloudflare Turnstile to distinguish legitimate submissions from automated abuse. The widget can process technical browser and device signals and an IP address. The resulting verification token is checked by the server before a message is sent. Learn more in Cloudflare’s Turnstile privacy information and our Cookie Policy.
5. How long is information kept?
We aim to delete ordinary enquiries within 12 months after the last correspondence, unless an ongoing support matter, contract, legal obligation, or legal claim requires longer retention. Order and accounting records, when applicable, are retained for the periods required by Polish law. Hosting and security data follow the relevant provider’s service settings and retention terms. The website does not maintain its own database of contact submissions.
6. International processing
Our providers may process information outside the European Economic Area. Where required, transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. You can contact us for information about the safeguards relevant to your data.
7. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent without affecting earlier lawful processing. We may need proportionate information to confirm your identity before responding.
You may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or the supervisory authority where you live or work in the EEA.
8. Changes to this notice
We will update this page if our services or data practices change. The date at the top identifies the latest revision.