Privacy Notice

1. Controller identity and contact

Zalewski Advisory is operated by Wojciech Zalewski, trading as TheLocalApp. For data-protection queries relating to this website, the client portal, or pre-portal enquiry workflow, contact private@zalewskiadvisory.com.

2. Who this notice covers

• website visitors;
• people who submit a private enquiry or reply in a secure enquiry thread;
• client, partner, contractor, and admin portal users;
• organisation contacts added to projects, billing records, or portal invitations; and
• people who contact Zalewski Advisory by email or through the website.

3. Personal information we may collect

• identity and contact details such as name, work email, organisation, phone number, and business location;
• enquiry details, message content, project scope notes, preferred correspondence language, and service needs;
• portal account and profile data, including sign-in records, invitations, role assignments, and organisation membership information;
• project collaboration data, including portal messages, booking requests, uploaded files, invoice records, and billing contact details;
• technical and usage data such as IP address, timestamps, browser/device metadata, error logs, and security events;
• browser-side preference and continuity data, including language preference and device-local enquiry continuity records.

4. How and why personal information is used

• to respond to enquiries and assess whether a proposed assignment is suitable;
• to create and maintain secure pre-portal enquiry threads;
• to create portal accounts, invitations, role-based access, and project workspaces;
• to deliver translation, interpreting, project coordination, booking, billing, and communication workflows;
• to maintain site security, detect abuse, and troubleshoot service problems;
• to manage records, invoicing, payment follow-up, and legal/accounting compliance; and
• to improve site and portal performance through privacy-friendly first-party measurement.

5. Lawful bases relied on

• Contract: where processing is necessary to take steps at your request, onboard a portal account, deliver a project, arrange billing, or manage ongoing service communications.
• Legitimate interests: where processing is reasonably necessary to run the website, secure the portal, organise enquiries, maintain records, and defend or manage the business responsibly.
• Legal obligation: where records must be kept or disclosed for tax, accounting, fraud-prevention, or other legal compliance reasons.

6. Confidential client materials and third-party personal data

Clients may send documents that contain personal data relating to colleagues, customers, counterparties, or other third parties. Where Zalewski Advisory handles those materials solely to perform a requested assignment, the precise controller/processor allocation may depend on the nature of the engagement and any project-specific written terms.

If your organisation requires a processor-style data-processing arrangement for a particular project, that should be raised before materials are uploaded or shared.

7. Sharing and service providers

• hosting, analytics, and infrastructure providers used to operate the site and portal;
• authentication, database, email, mailbox, and security service providers used to run enquiries and portal access;
• payment or invoicing providers where used for project billing;
• professional advisers where reasonably necessary; and
• courts, regulators, insurers, banks, or authorities where disclosure is legally required or reasonably necessary to protect rights and interests.

8. International transfers

Where service providers or project workflows involve transfers outside the United Kingdom, Zalewski Advisory expects those transfers to rely on an appropriate legal mechanism, such as adequacy decisions or contractual safeguards, where required.

9. Retention

• enquiry and portal records are kept only for as long as reasonably necessary for service continuity, follow-up, business administration, and legal/accounting obligations;
• technical/security logs are retained for operational integrity, abuse prevention, and diagnostics for a limited period appropriate to those purposes; and
• invoice and payment records are retained as required by applicable accounting and tax obligations.

10. Your rights

• You may ask for access to personal information held about you.
• You may ask for inaccurate information to be corrected.
• You may ask for deletion where there is no longer a lawful reason to keep the data.
• You may object to certain processing based on legitimate interests.
• You may ask for restriction of processing in some cases.
• You may complain to the UK Information Commissioner's Office if you believe personal information has been handled unlawfully.

11. Security

Reasonable technical and organisational measures are used to protect information handled through the website and portal. No online system can promise absolute security, so particularly sensitive materials should only be shared once the appropriate secure workflow and engagement terms are confirmed.

12. Updates

This notice may be updated when the site, portal, legal basis, or service-provider stack changes.