Privacy

Who is responsible

A sole proprietorship. There is no data protection officer; the owner answers in person.

What the site collects

Nothing, until you write to us. Cloudflare, which serves the pages, holds the ordinary request logs any web host keeps: IP address, time, page requested, browser. They are kept for a short period, for security, and we do not read them.

The enquiry form

When you send the form we receive what you typed: your name, email address and message. We use it to answer you and, if it comes to an order, to prepare a quotation and the paperwork that follows. The legal basis is Article 6(1)(b) of the GDPR: steps taken at your request before a contract. Nothing is used for advertising, and nothing is sold.

Your browser also keeps a copy of what you typed, in its session storage, so that the form can give it back if sending fails. The copy stays in your browser and is deleted when you close the tab.

If we wrote to you first

We write to firms whose trade is close to ours, to introduce ourselves and offer our goods. We find firms, and the details we keep about them, on the internet. We write only to an address the firm publishes on its own website. Our first letter says on which page, or, if you have written to us before, it names that exchange.

We keep your name, role and business contact details, what your firm sells, and our correspondence. The legal basis is Article 6(1)(f) of the GDPR: our legitimate interest in offering our goods to businesses that trade in goods like them.

We keep this until two years after our last check of your firm's website or the last message between us, whichever is later, and then remove your firm from our list.

You can object at any time. Reply to our letter and say so; one word is enough. We will not write to you again, and we keep only your address and your request, so that it stays that way.

Who processes it for us

• Cloudflare, Inc. serves the site, runs the function that forwards your enquiry, and checks with Turnstile that the form was sent by a person and not by a script. Turnstile sets no cookie.
• Resend (Plus Five Five, Inc.) delivers the enquiry to our mailbox as an email.
• Providers of email, data storage and business software hold our correspondence and records.
• Anthropic provides a software tool we use in our office work.

Some of them are based in the United States, and transfers there rely on the EU–US Data Privacy Framework or on standard contractual clauses. Ask us and we will name each provider.

How long we keep it

An enquiry that does not lead to an order is deleted two years after the last message. Records of an order are kept for as long as tax and accounting law require.

Your rights

You can ask what we hold about you, have it corrected or deleted, restrict or object to its use, and receive a copy of it. Write to contact@heracl.com. You can also complain to a supervisory authority; ours is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

Changes

This page changes when the site or the tools behind it do. Last changed: 27 September 2026.