.png){kind=small}
PRIVACY POLICY
iCanSocial Marketing – Aleksandra Barańska
Version: 17 September 2026
Previous version: February 2026
1. DATA CONTROLLER
The data controller is:
iCanSocial Marketing – Aleksandra Barańska
4b/18 Rysia
87-800 Włocławek
Poland
NIP: PL8883179348
Email: info@icansocialmarketing.com
We have not appointed a Data Protection Officer, as we are not required
to do so under Article 37 GDPR.
2. SCOPE OF DATA COLLECTED
We may collect and process the following personal data:
• Name
• Business name
• Email address
• Phone number
• Billing details
• Information submitted via contact forms
• Communication history
• Account and subscription details (for content library subscribers)
When providing social media management services, we may also receive
access credentials or administrative access to client-managed platforms.
We do not intentionally collect or process special category (sensitive)
personal data.
Providing your data is voluntary, but it is necessary to enter into and
perform a contract with us. Without it we cannot deliver our services.
3. PURPOSE OF PROCESSING
Personal data is processed for the following purposes:
• Responding to enquiries
• Providing agreed services
• Managing subscriptions to our content library
• Managing business relationships
• Issuing invoices and fulfilling accounting obligations
• Ensuring proper delivery of digital services
Legal basis for processing:
• Article 6(1)(b) GDPR – performance of a contract
• Article 6(1)(f) GDPR – legitimate interest (business communication
and service delivery)
• Article 6(1)(c) GDPR – legal obligation (accounting and tax
requirements)
We do not carry out profiling or automated decision-making that produces
legal effects concerning you.
4. CONTENT LIBRARY SUBSCRIBERS
Where you subscribe to our content library, we process your account
details, subscription status and payment records in order to provide
access, issue invoices and handle refunds.
Payments are processed by Stripe Payments Europe Ltd. We do not store
your full card details at any time.
The terms you accept when subscribing form the contract between us. The
version in force on the date of your subscription applies.
5. PLATFORM ACCESS & CLIENT ACCOUNTS
When providing social media management services, we may be granted
access to client-managed accounts (e.g. Instagram, Facebook, TikTok,
website platforms).
In respect of personal data held within those accounts, the Client is
the data controller and we act as a data processor on the Client's
behalf, under Article 28 GDPR. A written data processing agreement is
concluded with each such Client.
Access is used solely for the purpose of delivering agreed services. We
do not independently collect personal data from those platforms. Access
is removed when the engagement ends.
The Client remains responsible for compliance with applicable data
protection laws regarding data contained within their own platforms.
6. COOKIES
Our website uses cookies and similar technologies.
• Essential cookies – required for the website to function. These
cannot be disabled.
• Analytics cookies – help us understand how visitors use the site.
• Functional cookies – remember your preferences.
Non-essential cookies are used only with your consent, which you give
through the cookie banner when you first visit the site. You can
withdraw or change your consent at any time through the cookie settings
on our website, or by clearing cookies in your browser.
Our website is hosted on Wix, which sets its own cookies. Details are
available in Wix's own cookie policy.
7. DATA RETENTION
Personal data is retained:
• Accounting and invoicing records – 5 years from the end of the
calendar year in which the tax became due, as required by Polish law
• Contact and enquiry data – for the duration of the business
relationship and 12 months thereafter
• Client account access – removed immediately when the engagement ends
• Other data – until potential legal claims expire
8. DATA SHARING
Personal data may be shared with:
• Accounting service providers
• IT and hosting providers
• Payment processors
• Subcontractors bound by confidentiality
Data is never sold to third parties.
9. INTERNATIONAL TRANSFERS
Some service providers may process data outside the European Economic
Area, including in the United Kingdom and the United States.
Where this occurs, transfers are made on the basis of an adequacy
decision of the European Commission, or under Standard Contractual
Clauses approved by the European Commission, together with any
additional safeguards required.
10. DATA SUBJECT RIGHTS
You have the right to:
• Access your personal data
• Request correction
• Request deletion
• Restrict processing
• Object to processing
• Receive your data in a portable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with the Polish Data Protection Authority
(Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2,
00-193 Warszawa, uodo.gov.pl)
To exercise any of these rights, contact us at the address below. We
respond within one month of receiving your request. Where a request is
complex, we may extend this by a further two months and will tell you
if we do.
11. CONTACT
For any data protection enquiries:
iCanSocial Marketing – Aleksandra Barańska
4b/18 Rysia, 87-800 Włocławek, Poland