Last updated: Jan 2, 2026

This Privacy Policy explains how personal data is collected, used, and protected when you visit or use the website https://www.magdakay.com (the “Site”) and related services.

1. Data Controller

The data controller is:

Magda Kwiatkowska – Coaching
operating under the brand Magda Kay
Poland
Email: [email protected]

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Identification and contact details (e.g. name, email address)
• Billing and transaction data (processed via third-party payment providers)
• Account and access data (for courses or memberships)
• Communication data (emails or messages sent to us)
• Technical data (IP address, browser type, device data)
• Marketing preferences

We do not knowingly collect data from children under 16.

3. Purposes and Legal Bases for Processing

Personal data is processed in accordance with Article 6 of the GDPR for the following purposes:

• Performance of a contract – to provide coaching, courses, memberships, and customer support
• Legal obligation – accounting, tax, and regulatory compliance
• Legitimate interests – website security, service improvement, fraud prevention, internal administration
• Consent – email marketing and optional communications (where required)

4. Digital Services & Communication

Access to online courses, memberships, and digital content is provided electronically, typically via email and/or a user account.

Users are responsible for providing a correct email address, checking spam or junk folders, and contacting us within a reasonable time if access or communication is not received.

5. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, including:

• Contractual and service data – for the duration of the relationship and thereafter as required by law
• Accounting and tax records – in accordance with Polish legal requirements
• Marketing data – until consent is withdrawn

6. Data Sharing

Personal data may be shared with trusted third parties only where necessary, including:

• Payment processors
• Email and communication service providers
• Website hosting and IT service providers
• Accounting or legal advisors
• Authorities where legally required

We do not sell personal data.

7. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA).

Where applicable, data transfers are protected using appropriate safeguards, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

8. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact: [email protected]

You also have the right to lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office (UODO)
https://uodo.gov.pl

9. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

10. Cookies

Information about cookies and tracking technologies is provided via a separate cookie banner and/or cookie policy.

11. Third-Party Websites

This Site may contain links to third-party websites. We are not responsible for the privacy practices of those websites.

12. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version will always be available on the Site.