Polityka prywatności

Privacy Policy – Education Options Sp. z o.o.
Last updated: January 2026
1) Who we are
This website is operated by Education Options Sp. z o.o. (“Education Options”, “we”, “us”). We provide bespoke educational consultancy services to school leaders, boards of governors, and investors (B2B).
Data Controller: Education Options Sp. z o.o., Kraków, Poland
NIP: PL 5273167115
Email: admin@eduop.com
Phone: +48 789 282 677
2) What personal data we collect
We collect only personal data necessary to run the website, respond to enquiries, and deliver consultancy services.
A) Enquiry and contact data

• Name, email address, phone number (if provided)

• Organisation/institution and role (if provided)

• Message content and any information you choose to include when contacting us

B) Client and engagement data (offline, via email and written agreement)
If you become a client, we may process:

• Contract and engagement correspondence

• Details required for invoicing and accounting (e.g., billing details, invoice records)

C) Technical data and online identifiers
When you use the website, we (and our service providers) may process:

• IP address and approximate location derived from IP

• Device/browser information

• Website usage data

• Cookie preferences and consent records (see Section 5)

3) How we collect personal data
We collect data:

• directly from you (when you email us or submit an enquiry), and

• automatically through the website (technical logs and cookies).

4) Why we use your data and our legal bases (GDPR)
We process personal data for the following purposes:
A) Responding to enquiries and arranging meetings
Purpose: responding to business enquiries and arranging meetings.
Legal basis: legitimate interests (GDPR Art. 6(1)(f)) and/or steps taken at your request prior to entering a contract (GDPR Art. 6(1)(b)).
B) Delivering consultancy services (for clients)
Purpose: performing a consultancy agreement and delivering the agreed work.
Legal basis: contract (GDPR Art. 6(1)(b)).
C) Invoicing and legal/accounting compliance
Purpose: invoicing and compliance with legal/accounting obligations.
Legal basis: legal obligation (GDPR Art. 6(1)(c)).
D) Website operation and security
Purpose: keeping the website secure, stable, and functioning properly.
Legal basis: legitimate interests (GDPR Art. 6(1)(f)).
E) Analytics (Google Analytics / GA4)
Purpose: understanding website usage and improving the website.
Legal basis: consent where required (GDPR Art. 6(1)(a)).
5) Cookies, Consentik, and Google Analytics
A) Cookie banner and consent management (Consentik)
We use Consentik to display the cookie banner, record your cookie preferences, and apply your choices. Consent records typically include your preference choices and the date/time of your choice, and may include technical identifiers used to evidence consent.
You can change your cookie preferences at any time via the cookie settings on the website (where available).
B) Google Analytics (GA4 / Google tag)
We use Google Analytics (GA4) to measure website traffic and understand how visitors use the website. Where consent is required, analytics cookies/tags are used based on your cookie preferences.
6) Who we share data with
We do not sell or rent personal data.
We may share personal data with service providers who help us operate the website and tools, including:

• Wix (website hosting and infrastructure)

• Consentik (cookie consent banner and consent management)

• Google (Google Analytics GA4, where enabled via consent)

• professional advisers (accountants, legal advisers) where necessary

• authorities/regulators where required by law

7) International data transfers
Because we use international service providers and serve clients globally, personal data may be processed outside the European Economic Area (EEA). Where required, we rely on appropriate safeguards for international transfers (such as contractual protections).
8) How long we keep data (retention)
We keep personal data only as long as needed for the purposes above:

• Enquiries / business contacts: typically up to 12 months, unless you become a client or a longer period is needed to manage a dispute.

• Client contracts and invoicing records: typically 7 years (to meet legal/accounting requirements).

• Cookie consent records: kept as long as necessary to manage and evidence your cookie choices.

• Analytics data: retained in accordance with our Google Analytics settings.

9) Your rights
If GDPR applies to your personal data, you have rights including:

• access, rectification, erasure

• restriction and objection

• data portability (where applicable)

• withdrawal of consent (where processing is based on consent)

To exercise your rights, email admin@eduop.com.
You also have the right to lodge a complaint with the Polish supervisory authority (UODO – Urząd Ochrony Danych Osobowych).
10) Security
We take appropriate technical and organisational measures to protect personal data and limit access to it.
11) Children
This website and our services are intended for business users and are not directed to children.
12) Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on the website with a new “Last updated” date.