Privacy Policy
Last updated: 15 October 2026
1. Data controller
2 STYLE Michał Piotrowski, operating the Goya Finance brand, Świętokrzyska 60, 80-180 Gdańsk, Poland, NIP 5851359488. Contact for any privacy request: contact@goyafinance.com.
2. What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, phone number entered in our forms | Send the information you requested, give you access to MIDAS, contact you about our coaching offers | Your consent (Art. 6(1)(a)) and steps before a contract (Art. 6(1)(b)) |
| Order and payment details | Process coaching purchases, invoicing, accounting obligations | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Telegram username and messages, if you join our group or contact us there | Community support, coaching sessions and answering your questions | Legitimate interest (Art. 6(1)(f)) |
| Advertising click identifiers (e.g. Google Click ID), device and browsing data collected by tags | Measure the results of our Google Ads campaigns | Your consent via the cookie banner (Art. 6(1)(a)) |
| Hashed (encrypted) email or phone number, linked to an ad click | Report conversions to Google Ads (offline conversion import, enhanced conversions) | Your consent (Art. 6(1)(a)) |
We do not sell your personal data.
3. Who receives your data
- Google Ireland Ltd. (Google Ads) – advertising measurement. Email and phone are sent in hashed form only.
- Telegram – if you choose to join our group or message us there. Telegram's own privacy policy applies.
- Hostinger International Ltd. – website hosting.
- Brevo (Brevo SAS, France) – storing contact requests and sending emails.
- Stripe (Stripe Payments Europe Ltd.) – payment processing.
- Our marketing service providers, acting on our instructions under a data processing agreement.
Some of these providers may process data outside the European Economic Area (for example in the United States). In that case, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework) or on the European Commission's standard contractual clauses.
4. How long we keep data
- Leads who did not buy: up to 24 months after our last contact, or until you withdraw consent.
- Customers: for the duration of the relationship, then as long as required by Polish tax and accounting law (generally 5 years).
- Advertising data: according to Google's retention settings, at most 540 days.
5. Cookies and tags
We use the Google Ads conversion tag and similar technologies only after you accept them in our cookie banner. You can change your choice at any time through the "Cookie settings" link at the bottom of the page.
6. Your rights
You can ask for access to your data, its correction or deletion, restriction of processing, data portability, and you can object to processing or withdraw your consent at any time. Write to contact@goyafinance.com; we reply within one month.
You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. If you live in the United Kingdom, you can contact the Information Commissioner's Office (ico.org.uk); if you live in another EU country, your local authority.
7. Age
Our services are for adults only. We do not knowingly collect data from people under 18.
8. Changes
We may update this policy. The date at the top shows the latest version.