Shelpuk & Company
    Legal

    Privacy Policy

    Last updated: September 2026

    1. Who We Are

    Shelpuk AI Technology Consulting ("Shelpuk AI", "we", "us") is an AI consulting and engineering firm based in Warsaw, Poland. We are the controller for the personal data described on this page.

    You can reach us about anything on this page at [email protected].

    2. What This Policy Covers

    This policy covers shelpuk.com and every language version of it. It explains what is collected when you read the site, what you give us when you get in touch, and which other companies receive that data.

    It does not cover the third-party sites we link to, or the terms of a client engagement. Engagement terms are set out in a Statement of Work and in our Terms of Service.

    3. What We Collect When You Browse

    Serving a web page requires your browser to send your IP address and user agent to the server. Our hosting provider processes both to deliver the page and to protect the site from abuse.

    Our hosting provider derives your approximate country from that connection — and, in Belgium and Switzerland, the region, because the language follows it there. We use it only to choose which language to show you on your first visit. It is not stored on our servers; the result is cached in your own browser for seven days so the lookup does not have to be repeated.

    We measure page views with Umami, a privacy-focused analytics service. Umami sets no cookies and collects no personally identifying information. It tells us which pages are read; it does not build a profile of you.

    We do not run Google Analytics, Google Tag Manager, advertising pixels or any cross-site tracking. Google Analytics was removed from this site in September 2026.

    4. What You Give Us When You Get In Touch

    The contact form asks for your name, your email address and your message. The report form asks for your name, your email address and, optionally, your company name. We also record which language the site was in and which report you asked for. With either form we also record which page you were on, which button you used, and which language the site was in.

    We use that information to reply to you, to send you the report you asked for, and to follow up about working together. We do not sell it and we do not use it for advertising.

    If you book a call, the booking is made on Calendly, and the details you enter there are held by Calendly as well as by us.

    5. Who Receives Your Data

    We use a small number of service providers and name all of them here. Each receives only what it needs for its own job.

    Cloudflare hosts this website and serves every page. It processes your IP address and user agent to deliver the site, and supplies the approximate country — and Belgian or Swiss region — used for language selection.

    Umami receives page view data for our analytics. It sets no cookies and receives no name, email address or other identifying detail.

    HubSpot is our customer relationship management system. It receives what you type into the contact form or the report form, at the moment you submit it, and only then. With your submission we also send the page of ours you entered the site on and, if its link carried them, the campaign parameters attached to that link.

    Calendly receives the details you enter when you book a call, at the moment you book it, and only then.

    We share your data with nobody else. No advertising network receives anything from this site.

    6. Where Your Data Is Processed

    Cloudflare serves this site from a global network, so a page may be delivered from a server near you.

    Umami, HubSpot and Calendly are United States companies and may process your data outside the European Economic Area. Transfers of that kind rely on the safeguards the GDPR requires, including the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

    This is separate from how we deliver client projects. For client work we can and regularly do deploy entirely on EU-sovereign infrastructure or on your own hardware, as described on our sovereign AI page.

    7. Cookies and Local Storage

    This site sets no advertising cookies and no tracking cookies.

    Your language choice is kept in your browser's local storage, together with the cached result of the language lookup described in section 3. Both stay on your device, are not sent to us as such, and exist so the site opens in the language you expect.

    Umami reads one value from your browser's local storage, the flag that records whether you have opted out of measurement. It writes nothing and sets no cookie.

    Our position is that this read does not require your consent: it sets no cookie, stores nothing that identifies you, and only serves to honour an opt-out you chose yourself. If Umami's script ever changes what it stores on your device, we will revisit this decision.

    If a HubSpot cookie was already set in your browser by a site you visited earlier, that identifier travels with your form submission. We do not set that cookie ourselves.

    We also keep a one-off marker in your browser that lets a page recover itself if you had the site open while we published an update. It is cleared as soon as it has done its job.

    8. How Long We Keep It

    We keep enquiry and report-request details for as long as we need them to answer you and to maintain our ordinary business and accounting records, and no longer than the law requires.

    Analytics data is aggregated and is not linked to you.

    If you ask us to delete your details, we do so unless we are required to keep them.

    9. Your Rights

    Under the GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our using it, and ask us to send it to you or to someone else in a portable form.

    Write to [email protected] and we will answer within one month.

    If our answer does not satisfy you, you may complain to a data protection supervisory authority. Ours is the Polish Personal Data Protection Office (Urząd Ochrony Danych Osobowych, uodo.gov.pl); you may also complain to the authority where you live or work.

    10. Changes to This Policy

    When we change how this site handles data, we change this page and update the date at the top of it.

    The date above is the date of the most recent change.

    Frequently Asked Questions

    Answers to common questions about this topic.

    What personal data does this website collect?

    Serving a page processes an IP address and a user agent; getting in touch adds the name, email address and message a visitor chooses to send. Shelpuk AI Technology Consulting is the data controller for the personal data the published privacy policy describes.

    Which companies receive data from this website?

    Cloudflare serves the pages, Umami counts page views without cookies, HubSpot receives what a visitor submits together with the page they entered on and any campaign parameters its link carried, and Calendly receives what they book. Shelpuk AI Technology Consulting names every processor that receives visitor data rather than describing them in general terms.

    Does this website use tracking cookies or advertising tools?

    No advertising or tracking cookies are set, and no analytics tag manager runs before a page is requested. Shelpuk AI Technology Consulting removed Google Analytics and self-hosted its remaining page assets so visitor data reaches fewer systems.

    How can a visitor exercise their data protection rights?

    Access, correction, deletion, restriction, objection and portability requests are answered within one month from the published contact address. Shelpuk AI Technology Consulting answers data protection requests from the contact address published on this website.