Privacy notice.

01 · What we collect

When you submit the contact form, we receive your name, email, firm (if you give one), how you were introduced, the reason for writing, and your message. When you email mk@secondgp.com directly, we receive whatever you send. We do not run analytics that profile you. We do not set advertising cookies. We do not buy or rent data.

02 · Why we collect it

To read your enquiry and reply to it. Legal basis under GDPR: Article 6(1)(b) — taking steps at your request prior to a possible engagement — and Article 6(1)(f) — our legitimate interest in running a professional practice and corresponding with the people who write to it.

03 · Who sees it

Michal Kapusta, personally. The contact form is processed by Formspree (Formspree, Inc., United States), which forwards the submission to the practice inbox and does not retain it beyond the transit window. Email correspondence is held in the practice inbox, hosted on Google Workspace (Google Ireland Limited, acting as data processor on the practice's behalf under Google's standard contractual terms). No other party sees your message.

04 · How long we keep it

Active correspondence: for the life of the conversation, plus 24 months. Engaged mandates: for the duration of the engagement, plus the period our professional obligations require — typically seven years. We delete on request, except where retention is legally required.

05 · Your rights

You may ask what we hold about you, ask us to correct or delete it, ask us to stop processing it, or ask for a portable copy. We reply within thirty days. To exercise any of these, write to mk@secondgp.com with the subject line ‘Data request.’

06 · Cookies & analytics

This site sets no tracking cookies. Site visit counts are recorded by Vercel Web Analytics, which is cookieless and does not store any data that identifies a visitor — only aggregate page-view counts and referrer information. No banner is shown because no consent is required under GDPR for cookieless aggregate analytics.

07 · Changes

If this notice changes materially, the new version is posted here with a revision date. Continuing to write to the practice after a change means you have read the change.