Privacy
Last updated: 22 September 2026
The short version. Spot For Sale collects only the information needed to sell and fulfil a spot, communicate with buyers, operate the website, handle payments and comply with legal obligations. There is no user account. Card details are handled by Stripe and do not reach this website. The website does not use advertising cookies or cross-site advertising tracking.
Who is responsible for your data
The data controller is Jordan Cichoń, operating Spot For Sale as a private business activity in Poland.
Contact: j.cichon2@op.pl.
If you have a question about how your personal data is used, or you want to exercise one of your data protection rights, you can contact the controller at this address.
What data I collect
The information collected depends on how you use the website.
- When you buy a spot: your name, email address, business or public name where provided, billing address, tax identification details where provided, payment reference, purchased spot and information needed to fulfil the order.
- Artwork and promotional material: the logo, artwork, website link, brand name and other material you provide for the physical sticker and its related publication.
- Communication: information contained in emails or other messages exchanged with you concerning your purchase, artwork, approval, delivery or support.
- Website operation: technical information that may be processed by the hosting, analytics and infrastructure providers used to operate the website, such as IP address, browser information, device information and server logs.
Card numbers, security codes and other payment card details are entered through Stripe's payment infrastructure. Spot For Sale does not receive or store the full card details.
Why I use your data
- To process and fulfil your purchase, including identifying the purchased spot, communicating with you, receiving your artwork, preparing the sticker and publishing the agreed promotional material.
- To process payments and refunds through Stripe.
- To issue or maintain required financial and tax records where required by law.
- To communicate with you about your order, artwork, approval, publication, technical issues or other matters directly connected with your purchase.
- To operate and secure the website, including hosting, technical logs, abuse prevention and basic traffic measurement.
Legal bases for processing
Depending on the particular processing activity, personal data may be processed on the following legal bases under Article 6 of the GDPR:
- Performance of a contract when processing is necessary to process and fulfil your purchase.
- Compliance with a legal obligation when records must be retained for accounting, tax, payment or other legal purposes.
- Legitimate interests when necessary to operate, secure and administer the website, maintain business records, prevent abuse or establish, exercise or defend legal claims.
What becomes public
Buying a spot includes a public promotional element. Once a purchase has been approved and the material is ready for publication, the information intended for publication may include:
- the brand, business or public name supplied for the spot;
- the supplied logo or artwork;
- a website or social link supplied for publication;
- the purchased spot and its price;
- photographs or video showing the physical sticker and the phone;
- material from the package or sticker supplied by the buyer, where applicable.
This material may be published on Spot For Sale's website and social media channels, including Instagram, TikTok or YouTube, as described in the Terms.
Your private contact details, payment details and billing information are not published as part of the sponsorship.
Payments
Payments are processed by Stripe. Stripe may process personal data necessary to provide payment, billing, fraud prevention and related financial services.
Payment card details are handled by Stripe's payment systems and are not stored by Spot For Sale.
Depending on the checkout information you provide, Stripe may also process your name, email address, billing address, business name, tax identification number and payment information.
Stripe may process data outside the European Economic Area in accordance with its applicable privacy and data-transfer arrangements.
Website hosting and analytics
The website is hosted using Vercel. As part of providing hosting and security, Vercel may process technical information such as IP addresses, request information, browser information and server logs.
The website may also use Vercel Analytics to measure website traffic. The purpose is to understand general website usage and improve the site, rather than to create advertising profiles.
Vercel may process information in accordance with its own privacy documentation and applicable data-processing arrangements.
Live counters
The website uses Supabase to operate certain live website features, including the online-now and page-view counters shown on the shop page.
These counters are intended to display aggregate website activity. They are not used by Spot For Sale to create customer profiles or advertising audiences.
Cookies and tracking
The Spot For Sale website does not intentionally use advertising cookies, third-party advertising pixels or cross-site behavioural advertising.
Third-party services used by the website may nevertheless use their own technical mechanisms when providing their services. For example, payment processing takes place through Stripe's infrastructure. Those services are responsible for their own processing within their respective systems.
Your browser may also store ordinary technical information required for websites and services to function.
Who receives your data
Personal data may be made available to service providers where this is necessary to operate Spot For Sale. Depending on the service involved, these providers include:
- Stripe, for payment processing, billing-related services and refunds.
- Vercel, for website hosting, infrastructure, security and analytics.
- Supabase, for selected website infrastructure and live counters.
- Email providers, for sending and receiving communications.
Personal data may also be disclosed where required by law, to tax authorities, courts, law-enforcement authorities or other competent public bodies, or where necessary to establish, exercise or defend legal claims.
International transfers
Some service providers used by Spot For Sale may process personal data outside the European Economic Area, including in the United States.
Where personal data is transferred to a country outside the EEA, the transfer is carried out using a mechanism permitted by applicable data-protection law, such as an adequacy decision or appropriate safeguards where required.
How long data is kept
Personal data is kept only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law or necessary to establish, exercise or defend legal claims.
Purchase and sponsorship records are retained for as long as reasonably necessary to administer the sponsorship and keep a record of the transaction, including the period in which the related sticker remains on the phone.
Accounting, tax and payment records are retained for the periods required by applicable Polish law.
Waiting-list data is retained while the waiting list is active, unless you ask for your data to be removed earlier.
Technical logs and analytics data are retained according to the retention periods applicable to the relevant hosting or analytics service.
Your rights
Subject to the conditions and limitations provided by applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- receive certain personal data in a portable format;
- object to certain processing based on legitimate interests;
- withdraw consent where processing is based on consent;
- lodge a complaint with a supervisory authority.
These rights are not absolute. For example, data may need to be retained where processing is required by law or is necessary for the establishment, exercise or defence of legal claims. UODO also confirms that the right to erasure is subject to legal exceptions.
To exercise your rights, contact the controller using the contact details below. Requests should normally be answered without undue delay and, in any event, within one month, subject to the extensions permitted by the GDPR.
Complaints
If you believe your personal data has been processed unlawfully, you can first contact the controller and ask for the matter to be resolved.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) or another competent supervisory authority where applicable. UODO confirms that individuals may lodge complaints concerning unlawful processing of their personal data.
Automated decision-making
Spot For Sale does not use your personal data to make decisions about you based solely on automated processing that produce legal effects or similarly significant effects.
Changes to this Privacy Policy
This Privacy Policy may be updated when the website, services, data processing or applicable legal requirements change.
The date at the top of this page shows when the current version was last updated.