Last updated: 10 September 2026

This Privacy Policy explains how Krzysztof Kowalski, operating as a sole proprietorship in Poland (“we”, “us”, “our”), collects, uses, stores and protects personal data when you use esperoart.com (the “Website”).

We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Who is responsible for your personal data?

The data controller responsible for the processing of your personal data is:

Email: chris@esperoart.com

If you have any questions about how your personal data is processed, you can contact us using the email address above.

2. What personal data do we collect?

Depending on how you use the Website, we may collect the following information:

• name and surname;
• email address;
• username and account information;
• password information in its securely stored form;
• billing and contact information;
• information relating to your membership or purchases;
• payment-related information necessary to process transactions;
• information you provide when contacting us;
• information you provide when subscribing to our newsletter;
• comments and other information you voluntarily post on the Website;
• technical information such as IP address, browser type, device type and information about your interaction with the Website.

We only collect information that is necessary for the relevant purpose.

3. How do we collect your information?

We may collect personal data when you:

• create an account on the Website;
• purchase a membership or other service;
• use the members’ area;
• make or attempt to make a payment;
• contact us;
• leave a comment or participate in community features;
• subscribe to our newsletter;
• interact with the Website.

Some technical information may also be collected automatically when you visit the Website, depending on your cookie and privacy settings. More information about cookies and similar technologies can be found in our Cookie Policy.

4. How do we use your personal data?

We may use your personal data for the following purposes:

Providing and managing your account

We use your information to:

• create and maintain your account;
• provide access to purchased memberships and content;
• manage your membership;
• authenticate you when you log in;
• communicate with you about your account;
• provide customer support.

Processing payments and purchases

We use information necessary to process membership payments and other purchases made through the Website.

Payments may be processed through third-party payment providers, including PayPal and Stripe. Payment card information is processed by the relevant payment provider and is not stored by us as a complete payment card number.

Communicating with you

We may use your contact information to respond to enquiries, provide customer service and send necessary administrative messages relating to your account, membership or purchases.

Newsletter and email marketing

If you voluntarily subscribe to our newsletter, we use your email address to send you newsletters, updates and other communications that you have requested.

Our newsletter is managed using MailerLite. MailerLite processes subscriber information on our behalf as a service provider. You can unsubscribe from our newsletter at any time by using the unsubscribe link included in our emails.

Subscribing to our newsletter is separate from accepting non-essential cookies on our Website.

Website statistics

With your consent, we use Google Analytics to understand how visitors use our Website and to improve its content and functionality.

Google Analytics is configured through our cookie-consent system using Google Consent Mode. Before statistics consent is given, the relevant consent signals are set to denied and Google Analytics does not use analytics cookies for statistical measurement. Statistical measurement begins after the visitor gives the required consent.

You can withdraw or change your statistics consent at any time through the Manage Consent option on the Website.

5. Comments and community features

If you leave a comment or participate in community features on the Website, information associated with your account and your contribution may be stored and displayed as necessary to provide these features.

This may include your username, the content of your contribution and technical information such as your IP address where necessary for security and spam prevention.

Information submitted through public comments or community features may be visible to other users of the Website.

6. Third-party services

We use certain third-party services to operate the Website and provide its features.

PayPal

We use PayPal to process some payments. When you make a payment through PayPal, information necessary to process the transaction may be shared with PayPal.

PayPal processes personal data in accordance with its own privacy practices and applicable data protection requirements.

Stripe

We use Stripe to process some payments. Information necessary to process your payment may be transferred to Stripe.

Payment card information entered through Stripe’s payment interface is processed by Stripe. We do not store complete payment card numbers on our Website.

MailerLite

We use MailerLite to manage our newsletter subscriber list and send email communications.

When you subscribe to our newsletter, information such as your email address and any other information provided through the subscription form may be processed by MailerLite on our behalf.

MailerLite’s current privacy documentation is available on its website.

Google Analytics

We use Google Analytics to collect statistical information about the use of our Website, such as pages visited, approximate location, device and browser information, and interactions with the Website.

Google Analytics is configured through our cookie-consent system using Google Consent Mode. Before the visitor gives consent for statistics, the relevant consent signals are set to denied and analytics cookies are not used for statistical measurement.

Google’s privacy policy explains how Google processes information collected through its services.

Cloudflare Turnstile

We use Cloudflare Turnstile to help protect our membership checkout against automated abuse, spam and malicious activity.

Turnstile processes certain technical signals from the visitor’s browser and device, such as IP address, user-agent information and other signals used to distinguish human visitors from automated traffic. Cloudflare processes this information to provide the security service and to improve Turnstile’s bot-detection capabilities.

Cloudflare’s processing of information through Turnstile is described in its Turnstile Privacy Addendum.

YouTube

We embed videos from YouTube on some pages of our Website.

YouTube is operated by Google. When YouTube content is enabled, YouTube and Google may collect information about your interaction with the embedded content in accordance with their privacy policies.

YouTube content on our Website is blocked until the visitor gives the required consent through our cookie-consent system.

Google’s privacy policy applies to YouTube and explains how Google processes information through its services.

Vimeo

We may embed videos hosted by Vimeo on our Website.

When Vimeo content is enabled, Vimeo may process information about your interaction with the embedded video in accordance with Vimeo’s privacy practices.

Vimeo content is blocked until the visitor gives the required consent through our cookie-consent system.

Adobe Fonts

We use Adobe Fonts to display fonts on our Website.

When the Adobe Fonts service is enabled, the visitor’s browser may connect to Adobe’s servers to retrieve the required fonts. Adobe explains that its web-font service may process information such as the fonts served, the Web Project ID, the hostname of the page requesting the font and the IP address needed to deliver the font. Adobe states that it does not store the IP address for this purpose.

Adobe Fonts is managed through our cookie-consent system.

7. Cookies and similar technologies

Our Website uses cookies and similar technologies for purposes including:

• essential website functionality;
• remembering consent and preferences;
• user authentication and membership functionality;
• statistical analysis;
• enabling certain third-party content and services.

Non-essential cookies and services are controlled through our cookie-consent system.

You can read more about the cookies and similar technologies used on the Website, and manage your preferences, in our Cookie Policy.

You can also change your choices at any time using the Manage Consent option available on the Website.

8. Legal bases for processing

Depending on the circumstances, we process personal data on the following legal bases:

• Contract: where processing is necessary to provide a service you have requested, manage your account, membership or purchase, or perform a contract with you.
• Legal obligation: where processing is necessary to comply with applicable legal or accounting requirements.
• Legitimate interests: where processing is necessary for purposes such as website security, preventing abuse, responding to enquiries or maintaining and improving our services, provided that our interests do not override your rights and freedoms.
• Consent: where we ask for your consent, including for certain cookies, statistics and third-party content, or where you voluntarily subscribe to our newsletter.

Where processing is based on consent, you can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

9. How long do we keep your information?

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, maintain accounts, comply with legal obligations, resolve disputes and enforce agreements.

The exact retention period depends on the type of information and the purpose for which it is processed.

For example, information relating to financial transactions may need to be retained for the period required by applicable accounting and tax laws.

When personal data is no longer required, we will delete it or otherwise securely dispose of it, subject to any legal obligation to retain it.

10. Your rights

Depending on the circumstances and applicable law, you have rights including:

• the right to access your personal data;
• the right to correct inaccurate or incomplete personal data;
• the right to request deletion of your personal data;
• the right to restrict processing;
• the right to object to certain processing;
• the right to data portability;
• the right to withdraw consent where processing is based on consent;
• the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact us at:

chris@esperoart.com

You also have the right to lodge a complaint with the relevant data protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

11. Data security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

12. Third-party websites and links

Our Website may contain links to websites or services operated by third parties.

These third-party websites have their own privacy policies and practices. We are not responsible for the privacy practices or content of third-party websites that we do not operate.

When you follow a link to another website, we recommend reviewing that website’s privacy policy.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Website, services, technology or legal requirements.

When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy.

We recommend checking this page periodically for the latest information.

14. Contact

If you have any questions about this Privacy Policy or how we process personal data, please contact:

Email: chris@esperoart.com