Hit the Right Words
Privacy Policy
Last updated: 30 June 2026
This Privacy Policy explains how personal data is processed in connection with the website hittherightwords.com (the “Site”) and contact made through it, in particular through the enquiry form. It is written to comply with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR” / “RODO”) and Polish data-protection law.
This policy covers only data processed in connection with using the Site and sending enquiries through the form or by email. If you go on to book paid coaching, the processing of data related to delivering and settling the service will be covered by a separate notice provided to you at that stage.
1. Who is the controller
The controller of your personal data within the scope of this policy is Justyna Bergiel-Lipińska, who runs the Site and the “Hit the Right Words” English pronunciation coaching brand, based in Warsaw, Poland.
Contact: justi@hittherightwords.com
No Data Protection Officer has been appointed – there is no legal obligation to appoint one for processing at this scale.
2. What data is collected, and how
- Enquiry form – when you use the contact form you provide your name, email address, a selection of who you are and your timeline, and a free-text message describing what you’d like to work on. The message is delivered by email (via the email provider Resend) to the coach’s inbox.
- Direct correspondence – if you email directly, the content of that correspondence and your email address are processed.
- Technical and usage data – when you visit the Site, the hosting provider (Cloudflare) automatically processes technical data such as your IP address, browser and device type, the referring page and the time of access, in server logs, for security and reliability. From this same server-side data, Cloudflare also produces aggregate traffic statistics (such as page views and visitor countries) in its dashboard. This is done without any cookie or script in your browser; it does not build profiles of individual visitors and does not track you across other websites.
- Browser storage – the Site stores a single technical preference in your browser’s
localStorage: your chosen light or dark theme. It is not a cookie, is never sent to any server, and is not used to identify or track you.
The Site uses no advertising, marketing or tracking cookies, and shows no cookie-consent banner because it sets no non-essential cookies.
3. Purposes and legal bases
- Responding to your enquiry and taking steps at your request before entering a coaching arrangement – Art. 6(1)(b) GDPR (steps prior to a contract), and Art. 6(1)(f) (legitimate interest in handling correspondence) where your message is not aimed at a contract.
- Security and reliability of the Site and understanding aggregate traffic – Art. 6(1)(f) (legitimate interest in a secure, working website measured without intrusive tracking).
- Establishing, exercising or defending legal claims – Art. 6(1)(f).
4. Recipients and processors
Your data may be processed on our behalf by service providers (processors) acting under our instructions:
- Cloudflare, Inc. – website hosting, content delivery, the form-handling Worker, and aggregate server-side traffic statistics.
- Resend (Resend, Inc.) – delivery of the enquiry-form emails.
- Google (Google LLC / Google Ireland Limited) – hosting of the email inbox (Gmail / Google Workspace) that receives and stores enquiry messages.
We do not sell your personal data and do not share it for third-party marketing. Data may be disclosed to public authorities where required by law.
5. Transfers outside the EEA
Cloudflare, Resend and Google are US-based providers (or may transfer data to the United States), so your data may be transferred to or processed there. Such transfers are safeguarded by appropriate measures under Chapter V GDPR – Standard Contractual Clauses (Art. 46 GDPR) and/or the provider’s certification under the EU–US Data Privacy Framework, where applicable. A copy of the relevant safeguards can be obtained on request at justi@hittherightwords.com.
6. How long data is kept
- Enquiries that do not lead to a coaching relationship – kept only as long as needed to handle your enquiry and any follow-up, and in any case no longer than 12 months, then deleted.
- Server logs and aggregate traffic statistics – retained for a short period in line with the hosting provider’s defaults; the aggregate statistics are not tied to you.
7. Your rights
Under the GDPR you have the right to: access your data and obtain a copy (Art. 15); rectification (Art. 16); erasure / “right to be forgotten” (Art. 17); restriction of processing (Art. 18); object to processing based on legitimate interest (Art. 21); and data portability (Art. 20). Where processing is based on consent, you may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact justi@hittherightwords.com.
You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw – if you believe your data is processed unlawfully.
8. Is providing data required?
Providing your data through the enquiry form is voluntary, but your name, email address and message are necessary for us to respond to and handle your enquiry. Without them we cannot reply.
9. Automated decision-making and profiling
Your personal data is not subject to automated decision-making and is not used for profiling.
10. Changes to this policy
This policy may be updated, for example if the tools used by the Site change. The date of the latest version is shown at the top, and material changes will be reflected here.