Privacy Policy

Last updated: March 10, 2026 · Effective: March 10, 2026

1. Who We Are

WebQuest Sp. z o.o. ("WebQuest," "we," "us," or "our") operates the website webquestdigital.com (the "Website"). We are an investment and consulting firm specializing in brand intelligence, AI-powered tools, and strategic advisory for enterprise brands. This Privacy Policy describes how we collect, use, share, and protect your personal data when you visit our Website or interact with our services.

2. What Data We Collect

2.1 Information You Provide

When you use our "Schedule a Call" form or contact us directly, we may collect:

• First name and last name
• Company name
• Business email address
• Phone number (optional)
• Any message or inquiry content you provide

2.2 Information Collected Automatically

When you visit our Website, we may automatically collect:

• IP address (anonymized where possible)
• Browser type and version
• Operating system
• Referring URL
• Pages visited and time spent
• Device identifiers

3. How We Collect Data

We collect personal data through:

• Contact forms: When you submit the "Schedule a Call" form on our Website
• Email: When you send us an email directly
• Cookies and similar technologies: As described in Section 9 below
• Third-party services: Analytics providers that help us understand Website usage

4. Legal Bases for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): When you submit a contact form and explicitly consent to processing
• Legitimate interest (Art. 6(1)(f) GDPR): To improve our Website, ensure security, and communicate about our services
• Contract performance (Art. 6(1)(b) GDPR): When processing is necessary to fulfill a service agreement
• Legal obligation (Art. 6(1)(c) GDPR): When required by applicable law

5. How We Use Your Data

We use the personal data we collect to:

• Respond to your inquiries and schedule consultations
• Provide, maintain, and improve our services
• Send relevant communications about our services (only with your consent)
• Analyze Website usage to improve user experience
• Ensure the security and integrity of our Website
• Comply with legal obligations

6. Data Sharing and Transfers

We do not sell your personal data. We may share data with:

• Service providers: Email delivery services, hosting providers, and analytics tools that process data on our behalf under data processing agreements
• Professional advisors: Legal, accounting, or auditing professionals as necessary
• Legal authorities: When required by law, court order, or governmental request

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy:

• Contact form submissions: Up to 24 months after your last interaction, unless an ongoing business relationship exists
• Analytics data: Aggregated and anonymized data may be retained indefinitely
• Legal obligations: Data may be retained longer if required by applicable law (e.g., accounting records for 5 years)

After the retention period expires, personal data is securely deleted or anonymized.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate data
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to restrict processing (Art. 18): Request limitation of processing
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at privacy@webquestdigital.com. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In Poland, this is the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

9. Cookies and Tracking

Our Website uses minimal cookies:

• Essential cookies: Required for the Website to function (e.g., session management). These do not require consent.
• Analytics cookies: Help us understand how visitors use our Website. These are only set with your consent.

You can manage cookie preferences through your browser settings. Disabling cookies may affect Website functionality.

We currently do not use advertising cookies or third-party tracking pixels.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption for all Website traffic
• Access controls and authentication for internal systems
• Regular security reviews and updates
• Data minimization — we collect only what is necessary

While we take reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

11. Children's Privacy

Our Website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes will be communicated via the Website. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: