Privacy Policy

Last updated: 16 September 2026

This policy explains what personal data we collect through duck-agency.com, why we collect it, and what you can do about it. We are the data controller for that data under the GDPR (Regulation (EU) 2016/679).

What we collect

Only what you type into the contact form yourself:

• your name;
• your email address;
• the message you write.

We do not ask for anything else, and we do not buy or enrich your data from third-party sources.

No cookies, no analytics, no tracking

This website sets no cookies, runs no analytics, and embeds no advertising or social tracking pixels. Nothing follows you around after you leave. That is also why you are not being asked to dismiss a cookie banner.

Our host records standard server logs (IP address, time of request, browser user agent) for security and availability, as any web server does.

Why we use it, and on what legal basis

• To answer your enquiry — legal basis: your consent, Art. 6(1)(a) GDPR, given when you tick the consent box and submit the form. Where your message concerns a possible engagement, we also rely on Art. 6(1)(b) — steps taken at your request prior to entering into a contract.
• To keep the site secure and online — legal basis: our legitimate interest, Art. 6(1)(f).

We do not use your data for automated decision-making or profiling, and we never sell it.

Who else sees it

We keep the circle deliberately small. Your submission passes through:

• FormSubmit (formsubmit.co) — delivers the form contents to our inbox. The service is operated outside the EEA, so this involves a transfer to a third country.
• Our email provider — where the message then lives, like any email you send us.
• GitHub Pages (GitHub, Inc.) — hosts this website and keeps the server logs described above.

We do not share your data with anyone else unless the law requires it.

How long we keep it

Enquiries are kept for 24 months from your last contact with us, so we can pick up a conversation where it left off. After that they are deleted. If you ask us to delete them sooner, we will.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the data we hold about you (access);
• correct anything that is wrong (rectification);
• delete it (erasure);
• restrict how we use it, or object to that use;
• hand it over in a portable format (portability);
• withdraw your consent at any time — this does not affect processing already carried out.

Write to ruslan@duck-agency.com and we will respond within one month. No special form or wording is needed.

If you are not happy with how we handled it

You can lodge a complaint with the Czech supervisory authority:

Úřad pro ochranu osobních údajů
Pplk. Sochora 27, 170 00 Praha 7, Czech Republic
uoou.gov.cz

Changes to this policy

If we change how we handle data, we update this page and the date at the top. Material changes affecting data we already hold will be communicated to you directly.