Privacy notice

Last updated: 13 November 2026 (Europe/Warsaw). This notice is effective from the date this site is published at framestride.com.

Who we are

Your personal data is controlled by Wojciech Wybraniec, who works in Poland under the name FrameStride. FrameStride is not a separate company. He works as działalność nierejestrowana, a Polish form of small-scale business activity that is not a registered company and not a registered sole proprietorship. He does not have a Polish tax ID (NIP) yet and does not issue VAT invoices yet. Invoices are issued by Wojciech Wybraniec. Address: Zamość, Poland. Contact: hello@framestride.com.

Visitors to this website

The fonts on this site come from our own files, not from a third-party font service. We don't use analytics cookies.

Processors and transfers outside the EEA

The providers below may process personal data, including outside the EEA. The transfer bases are taken from each provider's public Data Processing Addendum. We do not rely on a basis we have not found in those documents. Calendly is in use now to schedule calls. Microsoft 365 and Cloudflare are in use for email and hosting. Web3Forms and Umami Cloud are listed so the transfer basis is ready; they apply when those services are enabled on this site.

• Cloudflare, Inc. (hosting and delivery of this website; United States). Cloudflare's Customer DPA (version 6.4, effective 3 April 2026) states that Cloudflare complies with the EU-U.S., UK-U.S., and Swiss-U.S. Data Privacy Framework, and that transfers made under that framework are not treated as restricted transfers. For restricted transfers, the same DPA incorporates the European Commission's 2021 Standard Contractual Clauses. Source: cloudflare.com/cloudflare-customer-dpa.
• Microsoft (Microsoft 365, our hello@framestride.com mailbox). Microsoft states that, for personal data transferred out of the EEA, Switzerland, and the United Kingdom, transfers are subject to appropriate safeguards under GDPR Article 46; that it makes Standard Contractual Clauses for processors available under its Products and Services Data Protection Addendum; and that it abides by the Data Privacy Framework. Sources: Microsoft guidance for data controllers using Office 365 and the Microsoft Products and Services DPA.
• Calendly, LLC (call scheduling; United States). Calendly acts as a processor when you book a call with us. Calendly's Data Processing Addendum states that Calendly complies with the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. Data Privacy Framework, and that the addendum incorporates the European Commission's 2021 Standard Contractual Clauses, with the UK Addendum, for applicable transfers. Source: calendly.com/legal/data-processing-addendum.
• Web3Forms, operated by Web3Creative (form submissions; India). This applies once the site forms are enabled. Web3Forms' DPA (version 1.0, last updated 13 July 2026) states that Web3Creative operates from India and incorporates the European Commission's 2021 Standard Contractual Clauses for transfers from the EEA, the United Kingdom, or Switzerland, with Web3Creative as data importer and the customer as data exporter. Source: web3forms.com/dpa.
• Umami Cloud, operated by Umami Software, Inc. (cookieless analytics; United States). This applies once Umami is enabled on this site. Umami's DPA incorporates the European Commission's 2021 Standard Contractual Clauses where customer personal data protected by the EU GDPR is transferred to Umami in a country that has not been recognized as providing an adequate level of protection. Source: umami.is/dpa.

Founders we contact by email

• What we process: your name, business email, job title, company name, company website, and public facts about your company.
• Source: publicly available professional sources, such as your company website, public professional profiles, and product directories. Our first email names the exact source.
• Purpose and legal basis: contacting you about a B2B service that may fit your company; our legitimate interest (GDPR Art. 6(1)(f)) in offering it to companies it fits.
• Recipients: our email provider, Microsoft, acting as a processor under its Data Protection Addendum. We have not named a separate outreach tool here because one is not in use yet.
• Transfers outside the EEA: see Microsoft 365 in "Processors and transfers outside the EEA" above.
• Retention: 12 months after first contact if we do not start working together. A do-not-contact entry (your email and company domain only) is kept for as long as needed to honor your objection.

Your right to object

You can object to direct marketing at any time, free of charge. Reply "no" to any of our emails or use the unsubscribe link, and we will stop immediately and never contact you again.

Your other rights

Access, rectification, erasure, restriction, and data portability where it applies. You can also complain to the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), uodo.gov.pl.

If you send us a brief or message

You can email us at hello@framestride.com. When the brief and contact forms are enabled, the form service Web3Forms will pass your submission to that mailbox. We use your email, your company or product name, and what you write only to reply and, if we work together, to plan the project. Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b)). Retention: up to 2 months, unless we start working together.

If you book a call

We use Calendly to schedule calls. We receive your name, email, and the time you pick, and use them only to hold the call and follow up on it. Legal basis: steps taken at your request before a contract (GDPR Art. 6(1)(b)).