Legal
Last updated: August 2026
FitOut Insider is operated by Dariusz Kubies Services, a sole trader (JDG) registered in Poland with the Central Register and Information on Economic Activity (CEIDG).
Business name: Dariusz Kubies Services Registered address: al. Solidarności 68 lok. 121, 00-240 Warszawa, Poland NIP (tax ID): 7532202127 REGON: 544086256 Country of registration: Poland CEIDG-registered since: 24 February 2026
Data controller: Dariusz Kubies Services Contact: hello@fitoutinsider.com
We operate this website and provide PM consulting services, practitioner guides, and related digital resources primarily for the UK fit-out and construction industry.
Contact form: When you submit the contact form on this site, we collect your name, email address, and message. We use this information solely to respond to your enquiry. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR / UK GDPR - responding to your direct enquiry).
Newsletter or guide updates: When you sign up to receive updates, we collect your first name and email address to notify you when new guides are published. You can unsubscribe at any time. Lawful basis: consent (Art. 6(1)(a) GDPR / UK GDPR - you opted in via the sign-up form).
Digital product purchases: When you purchase a practitioner guide, your payment is processed by Stripe. We receive your name and email address to fulfil the order. Payment card details are handled entirely by Stripe and are not stored by us. Lawful basis: performance of a contract (Art. 6(1)(b) GDPR / UK GDPR - fulfilling your purchase).
Published reviews: If you submit a review of a guide, you choose how you appear publicly at the point of submission. Options are: anonymised (first name and last initial only), full name and role, or full name with role and professional credentials. Your email address is used only to verify your purchase and is never displayed publicly. Lawful basis: consent (Art. 6(1)(a) GDPR / UK GDPR - granted via the consent checkbox in the review form). You may request removal of your published review at any time by emailing hello@fitoutinsider.com.
Still Standing charity guide: The Still Standing guide is offered free in return for a donation made directly to the charity Mates in Mind via JustGiving. The donation itself is handled entirely by JustGiving and never passes through this site. To claim your copy, we collect your email address, an uploaded proof-of-donation file (for example a JustGiving confirmation), and your IP address. The email and IP address are used to send you the guide and to detect duplicate or abusive claims; the proof-of-donation file is sent to us by email and is not stored in our database. If you tick the optional marketing box, we also add your email to our updates list. Lawful basis: legitimate interests (Art. 6(1)(f) GDPR / UK GDPR - delivering the guide and preventing abuse) and, for the optional marketing list only, consent (Art. 6(1)(a) GDPR / UK GDPR).
Consulting enquiries: If you book a call via Cal.com, Cal.com's privacy policy applies to that booking.
Analytics: We use Vercel Web Analytics, a cookieless and privacy-friendly analytics tool. It does not use cookies, does not collect personal data, and does not track visitors across sites. No consent is required under GDPR or PECR. See the Cookies and analytics section below for full details.
Website hosting is provided by Vercel, Inc., with servers located in the EU (Ireland). Server logs (including IP addresses) are processed by Vercel for the purpose of operating the website and protecting against abuse.
Anonymous, cookieless page view data is collected by Vercel Analytics. No personal data is stored.
Email delivery is handled via Resend. Your data is processed in accordance with Resend's data processing terms.
Purchase records are stored in a Supabase database (hosted in the EU) to facilitate order fulfilment and support. Still Standing claim records (email address, IP address, and marketing-consent flag) are stored in the same Supabase database; uploaded proof-of-donation files are not stored in the database, they are sent to us by email and retained only in that mailbox.
We use Upstash (Redis) to rate-limit form submissions and protect against abuse. This briefly processes your IP address.
Error monitoring is provided by Sentry, which may process limited technical data about application errors (such as the page and technical context) to help us diagnose faults. We configure Sentry to strip request contents and identifying fields from error reports before they are sent.
We do not sell or share your personal data with any third party for marketing purposes. Data is shared only with the processors listed above (Resend, Stripe, Supabase, Cal.com, Vercel, Upstash, Sentry) to the extent required to provide the service you have requested.
Contact form submissions are retained for up to 12 months, then deleted.
Newsletter subscribers are retained until you unsubscribe.
Purchase records are retained for 7 years in accordance with applicable tax and accounting obligations.
Still Standing claim records and their IP logs are retained for up to 12 months for fraud-prevention purposes, then deleted. Proof-of-donation files held in email are deleted on the same schedule.
You have the right to: access the personal data we hold about you, correct inaccurate data, request erasure of your data (where no legal obligation requires us to retain it), restrict or object to processing, and request data portability.
To exercise any of these rights, contact hello@fitoutinsider.com. We will respond within one month.
You also have the right to lodge a complaint with the Urząd Ochrony Danych Osobowych (UODO) if you believe your data has been mishandled.
We do not engage in automated decision-making or profiling.
As a Polish-registered business, our primary supervisory authority is the Urząd Ochrony Danych Osobowych (UODO) - the Polish data protection authority.
UODO website: uodo.gov.pl
If you are based in the United Kingdom, you also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, in respect of processing that affects you as a UK resident.
As a non-UK-established controller processing personal data of UK residents, we have assessed whether Article 27 of UK GDPR requires us to appoint a UK representative.
We are exempt from this requirement under Article 27(2)(a) of UK GDPR: our processing of UK residents' personal data is occasional, does not include large-scale processing of special category data or data relating to criminal convictions, and is unlikely to result in a risk to the rights and freedoms of natural persons.
If this assessment changes, we will appoint a UK representative and update this policy accordingly.
This site does not use tracking cookies. No cookie consent banner is shown because none is required.
We use Vercel Web Analytics, a cookieless analytics tool provided by Vercel, Inc., to understand how visitors use this site. It collects no personal data, sets no cookies, does not track visitors across websites or devices, and does not store IP addresses. The data collected is limited to aggregate, anonymous statistics: page URL, referrer, device type, and country. It is fully compliant with GDPR, UK GDPR, and PECR without requiring consent. Data is processed by Vercel, Inc. in accordance with their privacy policy (vercel.com/legal/privacy-policy).
We also use Vercel Speed Insights, provided by Vercel, Inc., to measure real-user performance (Core Web Vitals such as load and responsiveness). It is cookieless, collects only aggregate, anonymous performance metrics, and sets no tracking cookies.
Neither tool sets tracking cookies or requires your consent under GDPR or PECR.
| Cookie | Purpose | Type | Lifespan |
|---|---|---|---|
| None | Vercel Web Analytics - cookieless aggregate page views | First-party (Vercel) | No cookie set |
| None | Vercel Speed Insights - cookieless real-user performance (Core Web Vitals) | First-party (Vercel) | No cookie set |
We are based in Poland (EU) and process most data within the EU. Some of our service providers process data in the United States.
Stripe, Inc. is based in the United States. Stripe processes payment data under Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.
Resend, Inc. is based in the United States. Resend processes email delivery data under Standard Contractual Clauses.
Vercel, Inc. provides website hosting with servers in the EU (Ireland). Vercel processes hosting and server log data within the EEA; no international transfer outside the EEA applies.
Functional Software, Inc. (Sentry) is based in the United States. Error-monitoring data is sent to Sentry's EU (Germany) data region and processed under Standard Contractual Clauses where applicable.
Upstash, Inc. is based in the United States. Rate-limiting data (IP addresses) is processed under Standard Contractual Clauses.
All transfers are safeguarded by appropriate mechanisms as required under GDPR Article 46 and UK GDPR Article 46.
We may update this policy from time to time. The date at the top of this page shows when it was last updated.