Legal
Last updated: 8 October 2026
FitOut Insider is operated by Dariusz Kubies Services, a sole trader (JDG) registered in Poland with the Central Register and Information on Economic Activity (CEIDG).
Business name: Dariusz Kubies Services Registered address: al. Solidarności 68 lok. 121, 00-240 Warszawa, Poland NIP (tax ID): 7532202127 REGON: 544086256 Country of registration: Poland CEIDG-registered since: 24 February 2026
Data controller: Dariusz Kubies Services Contact: hello@fitoutinsider.com
UK representative: FitOut Insider has appointed DataRep as its representative in the UK under Article 27 of the UK GDPR. If you are in the UK, you can contact DataRep about how we handle your personal data: email datarequest@datarep.com with "FitOut Insider" in the subject line, use the web form at www.datarep.com/data-request, or write to DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom (address letters to "DataRep", not to FitOut Insider). For anything else, contact hello@fitoutinsider.com.
We operate this website and provide PM consulting services, practitioner guides, and related digital resources primarily for the UK fit-out and construction industry.
Contact form: When you submit the contact form on this site, we collect your name, email address, and message. We use this information solely to respond to your enquiry. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR / UK GDPR - responding to your direct enquiry).
Newsletter or guide updates: When you sign up to receive updates, we collect your first name and email address. If you sign up, we send you occasional emails with news about FitOut Insider guides, services and the platform. You can unsubscribe at any time with one click. Lawful basis: consent (Art. 6(1)(a) GDPR / UK GDPR - you opted in via the sign-up form).
Business contacts: If we have worked with you on a UK project, or you gave us your work email address in a business context, we may send you occasional emails about FitOut Insider services, guides and the platform at that work address. We got your details from our own project correspondence or from you directly. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR / UK GDPR - telling business contacts about relevant services). You can object at any time: use the unsubscribe link in any email or write to hello@fitoutinsider.com, and we will stop straight away. We keep your name and work email address until you unsubscribe or object, and keep a record of the opt-out so that we do not contact you again.
Business contacts from public sources: If your company lists you or a team address on its website or in a public business directory, or you show your work email address in your LinkedIn contact details, we may send you an occasional email at that work address about FitOut Insider services relevant to your role. Our first email tells you where we found your details. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR / UK GDPR - telling businesses about relevant services). You can object at any time by replying or writing to hello@fitoutinsider.com, and we will not contact you again. We keep your name, work email and company until you object, or for 24 months if we have had no reply, and keep a record of any objection so that we do not contact you again.
Digital product purchases: When you purchase a practitioner guide, your payment is processed by Stripe. We receive your name and email address to fulfil the order. Payment card details are handled entirely by Stripe and are not stored by us. Lawful basis: performance of a contract (Art. 6(1)(b) GDPR / UK GDPR - fulfilling your purchase).
Published reviews: If you submit a review of a guide, you choose how you appear publicly at the point of submission. Options are: anonymised (first name and last initial only), full name and role, or full name with role and professional credentials. Your email address is used only to verify your purchase and is never displayed publicly. Lawful basis: consent (Art. 6(1)(a) GDPR / UK GDPR - granted via the consent checkbox in the review form). You may request removal of your published review at any time by emailing hello@fitoutinsider.com.
Still Standing charity guide: The Still Standing guide is offered free in return for a donation made directly to the charity Mates in Mind via JustGiving. The donation itself is handled entirely by JustGiving and never passes through this site. To claim your copy, we collect your email address, an uploaded proof-of-donation file (for example a JustGiving confirmation), and your IP address. The email and IP address are used to send you the guide and to detect duplicate or abusive claims; the proof-of-donation file is sent to us by email and is not stored in our database. If you tick the optional marketing box, we also add your email to our updates list. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR / UK GDPR - delivering the guide and preventing abuse) and, for the optional marketing list only, consent (Art. 6(1)(a) GDPR / UK GDPR).
Consulting enquiries: If you book a call via Cal.com, Cal.com's privacy policy applies to that booking.
Analytics: We use Vercel Web Analytics, a cookieless and privacy-friendly analytics tool. It does not use cookies, does not collect personal data, and does not track visitors across sites. No consent is required under GDPR or PECR. See the Cookies and analytics section below for full details.
Website hosting is provided by Vercel, Inc., with servers located in the EU (Ireland). Server logs (including IP addresses) are processed by Vercel for the purpose of operating the website and protecting against abuse.
Anonymous, cookieless page view data is collected by Vercel Analytics. No personal data is stored.
Email delivery is handled via Resend. Your data is processed in accordance with Resend's data processing terms.
Sender (sender.net) - sends our email newsletter. Sender is operated by UAB Sender.lt, Vilnius, Lithuania, within the EU, and processes newsletter subscriber data under its data processing terms.
Purchase records are stored in a Supabase database (hosted in the EU) to facilitate order fulfilment and support. Still Standing claim records (email address, IP address, and marketing-consent flag) are stored in the same Supabase database; uploaded proof-of-donation files are not stored in the database, they are sent to us by email and retained only in that mailbox.
We use Upstash (Redis) to rate-limit form submissions and protect against abuse. This briefly processes your IP address.
Error monitoring is provided by Sentry, which may process limited technical data about application errors (such as the page and technical context) to help us diagnose faults. We configure Sentry to strip request contents and identifying fields from error reports before they are sent.
We do not sell or share your personal data with any third party for marketing purposes. Data is shared only with the processors listed above (Resend, Sender, Stripe, Supabase, Cal.com, Vercel, Upstash, Sentry, DataRep) to the extent required to provide the service you have requested.
Contact form submissions are retained for up to 12 months, then deleted.
Newsletter subscribers are retained until you unsubscribe.
Purchase records are retained for 7 years in accordance with applicable tax and accounting obligations.
Still Standing claim records and their IP logs are retained for up to 12 months for fraud-prevention purposes, then deleted. Proof-of-donation files held in email are deleted on the same schedule.
You have the right to: access the personal data we hold about you, correct inaccurate data, request erasure of your data (where no legal obligation requires us to retain it), restrict or object to processing, and request data portability.
To exercise any of these rights, contact hello@fitoutinsider.com. We will respond within one month.
You also have the right to lodge a complaint with the Urząd Ochrony Danych Osobowych (UODO) if you believe your data has been mishandled.
We do not engage in automated decision-making or profiling.
As a Polish-registered business, our primary supervisory authority is the Urząd Ochrony Danych Osobowych (UODO) - the Polish data protection authority.
UODO website: uodo.gov.pl
If you are based in the United Kingdom, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, in respect of processing that affects you as a UK resident.
This site does not use tracking cookies. No cookie consent banner is shown because none is required.
We use Vercel Web Analytics, a cookieless analytics tool provided by Vercel, Inc., to understand how visitors use this site. It collects no personal data, sets no cookies, does not track visitors across websites or devices, and does not store IP addresses. The data collected is limited to aggregate, anonymous statistics: page URL, referrer, device type, and country. It is fully compliant with GDPR, UK GDPR, and PECR without requiring consent. Data is processed by Vercel, Inc. in accordance with their privacy policy (vercel.com/legal/privacy-policy).
We also use Vercel Speed Insights, provided by Vercel, Inc., to measure real-user performance (Core Web Vitals such as load and responsiveness). It is cookieless, collects only aggregate, anonymous performance metrics, and sets no tracking cookies.
Neither tool sets tracking cookies or requires your consent under GDPR or PECR.
| Cookie | Purpose | Type | Lifespan |
|---|---|---|---|
| None | Vercel Web Analytics - cookieless aggregate page views | First-party (Vercel) | No cookie set |
| None | Vercel Speed Insights - cookieless real-user performance (Core Web Vitals) | First-party (Vercel) | No cookie set |
We are based in Poland (EU) and process most data within the EU. Some of our service providers process data in the United States.
Stripe, Inc. is based in the United States. Stripe processes payment data under Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.
Resend, Inc. is based in the United States. Resend processes email delivery data under Standard Contractual Clauses.
Vercel, Inc. provides website hosting with servers in the EU (Ireland). Vercel processes hosting and server log data within the EEA; no international transfer outside the EEA applies.
Functional Software, Inc. (Sentry) is based in the United States. Error-monitoring data is sent to Sentry's EU (Germany) data region and processed under Standard Contractual Clauses where applicable.
Upstash, Inc. is based in the United States. Rate-limiting data (IP addresses) is processed under Standard Contractual Clauses.
Cal.com, Inc. is based in the United States. When you book a call, your booking details (name, email address, and anything you add to the booking) are processed by Cal.com and transferred to the United States under the safeguards in Cal.com's data processing terms.
All transfers are safeguarded by appropriate mechanisms as required under GDPR Article 46 and UK GDPR Article 46.
We may update this policy from time to time. The date at the top of this page shows when it was last updated.