Privacy Policy

Last updated: 16 April 2026

1. Data Controller

The controller of your personal data is HearMe SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office in Lublin, Poland, at ul. Związkowa 26, 20-148 Lublin, entered in the register of entrepreneurs of the National Court Register maintained by the District Court Lublin-Wschód in Lublin with its seat in Świdnik, 6th Commercial Division of the National Court Register, under KRS 0000851210, NIP 7123404661.

If you have any questions about this Privacy Policy or the processing of your personal data, you can contact us at: hello@utter.one.

2. What data we process

Depending on how you use our websites, we may process:

• your email address, if you subscribe to our newsletter,
• information about your consent choices, including newsletter consent and cookie preferences,
• analytics and technical data collected through cookies or similar technologies, including data collected through Google Analytics 4,
• information about how our websites are used, such as page views and other website interaction data, to the extent enabled in our analytics configuration and only where the required consent has been given,
• technical request data connected with the operation, security, and delivery of our websites, such as IP address, browser and device information, request metadata, and server log data,
• technical data resulting from the loading of third-party resources used to display or deliver website content, such as fonts, scripts, and content delivery infrastructure.

3. Purposes and legal bases of processing

We process personal data for the following purposes:

a) Newsletter

If you subscribe to our newsletter, we process your email address in order to send you information about our products, services, updates, content, and news related to our business activities.

The legal basis for this processing is your consent under Article 6(1)(a) GDPR.

b) Website analytics

If you consent to analytics cookies, we use Google Analytics 4 to measure website traffic, understand how visitors use our websites, and improve the websites and their content.

The legal basis for this processing is your consent under Article 6(1)(a) GDPR.

c) Operating, securing, and delivering the websites

We process certain technical data to host, secure, maintain, and deliver our websites and their content, including through hosting and content delivery infrastructure.

The legal basis for this processing is our legitimate interest under Article 6(1)(f) GDPR in ensuring the secure and reliable operation of our websites and IT systems.

d) Keeping records of consent

We may also process information about when and how consent was given, changed, or withdrawn, in order to demonstrate compliance with applicable data protection requirements and to respect your choices.

The legal basis for this processing is our legitimate interest in demonstrating compliance with applicable law and managing consent records.

4. Newsletter

Providing your email address for the newsletter is voluntary, but without it we cannot send you the newsletter.

If you subscribe through any of our websites, your email address may be added to one shared newsletter list operated by the Controller.

You may withdraw your consent at any time and unsubscribe from the newsletter by clicking the unsubscribe link included in each newsletter email or by contacting us at hello@utter.one.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies and Google Analytics

Our websites use cookies and similar technologies. Some cookies may be technically necessary for the websites to function properly, while analytics cookies are used to measure traffic and understand website usage.

We use Google Analytics 4 only to measure website traffic and improve our websites. We do not use Google Analytics advertising features, remarketing, or Google Ads personalization based on your data.

Analytics cookies are used only after you give consent through our cookie banner or consent management tool.

We take steps to avoid sending data to Google that could directly identify a person, including data such as email addresses.

You can change your cookie preferences at any time using the cookie settings available on the website.

6. Technical services and third-party providers

In connection with the operation of our websites and newsletter, we use selected third-party service providers.

These may include in particular:

• MailerLite, which we use to manage and send the newsletter,
• Google, in connection with Google Analytics 4 and, where applicable, Google Fonts,
• Amazon Web Services (AWS), including AWS CloudFront, which may be used to deliver website content and improve availability and performance,
• Hetzner, which may be used as a hosting or infrastructure provider for our servers and website environment,
• hosting, IT, security, and website support providers, where necessary.

Depending on the nature of the service, these entities may process personal data on our behalf as processors or receive data as separate controllers, where required by the applicable legal and contractual framework.

7. Transfers outside the EEA

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we rely on lawful transfer mechanisms required by applicable law, such as an adequacy decision or appropriate safeguards, including Standard Contractual Clauses, where applicable.

8. Data retention

We keep newsletter data until you unsubscribe or withdraw your consent, and afterwards for the period necessary to demonstrate compliance with legal obligations or to defend against possible claims.

We keep records of consent for as long as necessary to document and respect your choices.

For Google Analytics, our current retention settings are:

• user data: 14 months,
• event data: 2 months.

Analytics data is retained in accordance with these settings and applicable cookie lifetimes.

Technical and server-related data is retained for the period necessary to operate, secure, and maintain the websites, and for no longer than necessary under our operational, security, and legal requirements.

9. Your rights

Subject to the conditions set out in the GDPR, you have the right to:

• access your personal data,
• rectify your personal data,
• erase your personal data,
• restrict processing,
• object to processing where applicable,
• data portability,
• withdraw consent at any time where processing is based on consent,
• lodge a complaint with a supervisory authority.

In Poland, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

10. Is providing data mandatory?

Providing your email address for the newsletter is voluntary, but necessary if you want to receive the newsletter.

Giving consent to analytics cookies is voluntary. Refusing analytics cookies does not prevent you from using the websites, but it may limit our ability to understand how the websites are used and improve them.

Providing technical request data necessary for the operation of the websites is generally required in order to access and use the websites.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example if our processing activities, service providers, or legal requirements change. The current version will always be available on the relevant website.