Privacy Policy

1. Who we are

Sendero is a trading name of InterFly Sp. z o.o., a limited liability company registered in Poland, which is the controller of the personal data described in this Policy. You can reach us about any privacy matter at info@sendero.mobi. Full company registration details are available on request.

2. What this Policy covers

This Policy explains what personal data we collect through sendero.mobi and in the course of providing our services, why we collect it, how long we keep it and what rights you have. It does not cover third-party websites we link to, which have their own policies.

3. Data we collect

• Enquiry data. When you submit the request form: your name, the contact detail you provide (email address or phone number), the service you selected, the message you write, and the page and language version you submitted from.
• Correspondence. Emails and messages you send us, and our replies.
• Client and project data. For clients: contact details of the people we work with, plus the billing and company information needed to invoice.
• Technical data. Our hosting infrastructure records standard server logs (IP address, request time, requested URL, user agent) for security and diagnostics.

We do not run advertising or analytics trackers on this website, and we do not ask for special-category data. Please do not include sensitive personal information in the request form.

4. Why we process it, and on what legal basis

• To answer your enquiry and prepare a proposal — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To deliver services and manage the relationship — performance of a contract (Art. 6(1)(b) GDPR).
• To keep the site secure and prevent abuse — our legitimate interest in protecting our infrastructure (Art. 6(1)(f) GDPR).
• To meet accounting and tax obligations — legal obligation (Art. 6(1)(c) GDPR).

5. Cookies

This website sets no cookies of its own and uses no advertising, analytics or profiling cookies. Web fonts are loaded from Google Fonts, which receives the request necessary to serve the font file; see Google's privacy notice for how it handles that request.

6. Who we share data with

We share personal data only where it is necessary, and only with:

• service providers that host our infrastructure and deliver our internal messaging;
• for messaging services, the mobile network operators and aggregators needed to deliver a message to its recipient;
• our accountants, auditors and legal advisers, under a duty of confidentiality;
• public authorities where we are legally required to disclose.

We do not sell personal data and we do not share it for third-party advertising. Where a provider is outside the European Economic Area, the transfer is covered by an adequacy decision or by Standard Contractual Clauses.

7. When we are a processor

When we build or operate systems for a client, we often process personal data that belongs to that client's own customers. In those cases the client is the controller and we act on its documented instructions as a processor, under a data processing agreement. Requests from those individuals are forwarded to the client, who answers them.

8. How long we keep it

• Enquiries that do not lead to an engagement: up to 12 months, then deleted.
• Client records: for the duration of the relationship and for as long afterwards as statutory limitation periods require.
• Invoices and accounting records: as required by Polish tax law (currently 5 years).
• Server logs: a short rolling window, typically no more than 90 days.

9. Security

The site is served over HTTPS. Access to enquiry and client data is limited to the people who need it, protected by authentication and reviewed periodically. No system is completely secure, but we take appropriate technical and organisational measures and we will notify you and the supervisory authority of a qualifying breach as the GDPR requires.

10. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on it — without affecting processing carried out beforehand.

To exercise any of these, write to info@sendero.mobi. We reply within one month. You also have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych) or with the authority in your country of residence.

11. Children

Our services are intended for businesses. We do not knowingly collect personal data from children, and we delete it if we learn we have.

12. Changes to this Policy

We may update this Policy. The current version and its last-updated date are always published on this page; material changes will be communicated to active clients directly. See also our Terms of Use.

13. Contact

Privacy questions and rights requests: info@sendero.mobi.