Effective date: 1 March 2025 · Controller: Next Move · Contact: [email protected]
This Privacy Policy explains how Next Move ("we", "us", "our") collects, uses, and protects personal data when you visit https://next-move.pro or contact us through the website. We are committed to handling your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Polish and EU data protection law.
We collect only the data necessary to provide our services and respond to your enquiries. The table below summarises each category of data, the legal basis, and the retention period.
| Category | Data collected | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact form | Name, email address, optional company name, message text | Responding to enquiries and booking requests | Legitimate interest (Art. 6(1)(f) GDPR) | 12 months from last contact |
| Booking (Calendly) | Name, email, selected time slot | Scheduling discovery calls and coaching sessions | Contract performance (Art. 6(1)(b) GDPR) | Duration of engagement + 12 months |
| Analytics (Umami) | Anonymous page-view data, referrer, browser type — no personal identifiers | Understanding site usage and improving content | Consent (Art. 6(1)(a) GDPR) | 90 days (aggregated only) |
| Preferences (localStorage) | Theme (dark/light), language (EN/PL), cookie consent choice | Remembering your display preferences across visits | Legitimate interest (Art. 6(1)(f) GDPR) | Until cleared by user |
We use browser localStorage (not traditional HTTP cookies) to store your theme preference, language selection, and cookie consent choice. These are strictly necessary for the site to function as you expect and do not require consent under GDPR.
If you accept analytics cookies, we load Umami Analytics — a privacy-first, open-source analytics tool that collects only anonymous, aggregated data. Umami does not use cookies, does not track individuals across sites, and does not share data with third parties. You may withdraw your analytics consent at any time via the Cookie Preferences link in the footer.
Booking functionality is provided by Calendly. When you use the booking calendar you are subject to Calendly's own privacy policy. We recommend reviewing it at calendly.com/privacy.
We do not sell, rent, or trade your personal data. We share data only with the following processors, each bound by a Data Processing Agreement and GDPR-compliant safeguards:
| Processor | Purpose | Location |
|---|---|---|
| Calendly LLC | Appointment scheduling | USA (Standard Contractual Clauses) |
| Umami Software | Anonymous analytics (consent-gated) | EU / USA (SCCs) |
| Manus (hosting) | Website hosting and infrastructure | USA (SCCs) |
We may also disclose data where required by law, court order, or to protect the rights and safety of our clients or the public.
As a data subject in the EU/EEA or UK, you have the following rights. To exercise any of them, email us at [email protected] and we will respond within 30 days.
| Right | What it means |
|---|---|
| Access (Art. 15) | Request a copy of the personal data we hold about you. |
| Rectification (Art. 16) | Ask us to correct inaccurate or incomplete data. |
| Erasure (Art. 17) | Request deletion of your data where there is no overriding legal basis to retain it. |
| Restriction (Art. 18) | Ask us to pause processing while a dispute is resolved. |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format. |
| Objection (Art. 21) | Object to processing based on legitimate interest. |
| Withdraw consent | Withdraw analytics consent at any time via Cookie Preferences in the footer. |
You also have the right to lodge a complaint with the Polish data protection authority, the Urząd Ochrony Danych Osobowych (UODO), at uodo.gov.pl.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data in transit is encrypted via TLS. Access to contact form submissions is restricted to authorised personnel only.
Our services are directed at professionals and organisations. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted data through our site, please contact us immediately at [email protected].
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The effective date at the top of this page will always reflect the most recent version. Material changes will be communicated via a notice on the website.
For any privacy-related questions, requests, or complaints, please contact us at:
We use cookies to remember your preferences and measure anonymous site analytics. Privacy Policy