Privacy Policy

• When you send us a message. Your work email address, and, if you fill them in, your name, your message, the maturity level you selected and whether you asked us to sign an NDA first. The email address is the only field we need, because it is how we answer you. The message is delivered to our inbox.
• When you ask us to email your self-check result. Your work email address, your answers to all 8 questions, and whether you ticked the box asking us to email you about a next step. This sends two messages: your result to you, and a note to us saying that somebody asked for it, which carries your address, your level, your answers and your answer to that box, so that we can pick the conversation up if you want one.
• When you open the booking calendar. Booking runs on Calendly, which receives whatever you enter there, plus what this page already knows: your level, the situations you ticked, and your name and email address if you gave them to us elsewhere on the page. All of it is visible in the form Calendly shows you, and you can change or delete any of it before you book.
• When you contact us directly. If you write or call us rather than using a form, we receive your name, email address, phone number and any other details you provide.
• When you simply visit. We and our service provider (Cloudflare) process limited technical data to ensure proper operation and basic analytics: anonymized usage data such as page views, referrer URLs, device type and approximate location at country level, and basic request details such as browser type, operating system and time of access, processed automatically by Cloudflare for security and performance.
• When you start using a form. Our bot check receives your IP address and the same technical details about your browser. It does not read what you type into the form.

We use the information collected to:

• Answer the message you sent, at the address you sent it from.
• Send you the self-check result you asked for, and prepare for a call if you book one.
• Respond to your direct enquiries by email or phone.
• Maintain website security and performance, including keeping our forms from sending mail at our expense.
• Understand aggregated, anonymous traffic statistics.
• Comply with applicable legal or audit obligations.

We do not sell, rent or share your data with third parties for marketing purposes, and we do not build a profile of you from it.

If you sent us a message, we reply to it at the address you sent it from. Holding what you wrote for that reply is the reason we have it.

If you asked us to email your self-check result, we send the result, and we get a note that somebody asked for it. We use your address for the result, for that note, and for a reply if you write back.

Beside that form there is a box you can tick, unticked unless you tick it, asking us to email you about a next step for your level. Ticking it is what lets us write to you first, and leaving it alone changes nothing about the result you asked for. If you tick it and change your mind, reply to any email we send and we stop, or write to the address below.

You can ask us to delete your address at any time, at privacy@xelerit.com, and you do not have to say why.

We process personal data only when one of the following applies:

• Legitimate interest. Answering an enquiry you started, ensuring website functionality and security, and basic analytics.
• Consent. Where you ask us to email you something, such as your self-check result, where you tick the box asking us to email you about a next step for your level, or where you allow optional cookies, none of which is in use today.
• Legal obligation. When required by EU or Polish law.

• Technical data, including server logs, is securely stored by Cloudflare. Such logs are typically retained for up to 90 days.
• Emails or correspondence are stored only as long as necessary to handle your enquiry or as required by law.
• We maintain an Information Security Management System (ISMS) consistent with ISO 27001, including encryption, access controls and staff confidentiality.

This site uses only cookies that are strictly necessary for it to work and stay secure. They are set automatically by Cloudflare, our security and performance provider, to tell trusted visitors apart from malicious traffic, and they do not track you or store personal data. Our Cookie Policy covers them, along with your answer to the cookie banner and what the booking calendar stores if you open it.

We also use Cloudflare Web Analytics, which provides privacy-friendly, cookie-free and anonymized usage statistics.

Under the EU GDPR, you have the right to:

• Access to your personal data
• Request correction or deletion
• Restrict or object to processing
• Request data portability
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us at privacy@xelerit.com. We will respond within one month as required by law.

• Cloudflare Email Service delivers both messages our forms send, so it handles the address and the content of the message. That is what delivering mail means.
• Our email provider holds the message in our mailbox after it arrives, the same way it holds any email you send us directly.
• Cloudflare Turnstile works out whether a submission came from a person. It receives your IP address, some technical details about your browser and the name of the page you are on.
• Calendly runs the booking calendar under its own notice, and receives nothing until you ask for the calendar. If you never open it, Calendly never learns that you visited this site.
• Cloudflare also provides secure hosting, traffic optimization and privacy-friendly analytics, so every request passes through it. It processes limited technical information, such as anonymized IP data and request headers, in accordance with its own privacy policy.

This site contains links to external websites, including Xelerit's own and documents it publishes elsewhere. This Privacy Policy applies only to ai.xelerit.com. We encourage you to review the privacy policies of any other sites you visit.

We may update this Privacy Policy from time to time. The latest version will always be available here, with an updated date at the top.

If you have any questions about this Privacy Policy or the way we handle data, please contact us:

• Email: privacy@xelerit.com
• Phone: +48 515 708 840
• Address: Xelerit Sp. z o.o., Aleja Grunwaldzka 472B, 80-309 Gdańsk, Poland, KRS 0000742262, NIP 5833316020, REGON 380881635
• Data Controller: Xelerit Sp. z o.o.
• Supervisory Authority: Urząd Ochrony Danych Osobowych (UODO), Poland, uodo.gov.pl (opens in a new tab)