Legal
Privacy Policy
Last updated: March 9, 2026
1. Who We Are
This Privacy Policy applies to Oligamy Software sp. z o.o. (operating as Oligamy Marketing), a company registered in Poland, with its registered address at Nowiec 38, 80-293 Gdansk, Poland, NIP: 5833433323, KRS: 0000911398.
We act as the data controller for personal data collected through our website at oligamy.marketing and in the course of providing our marketing services. You can reach us at: marketing@oligamy.com
Oligamy Marketing provides performance marketing services, including PPC management, technical SEO, AI powered outreach, and analytics, primarily for fintech, SaaS, and technology companies operating across Europe and the United States.
2. Data We Collect
We collect personal data in the following ways and categories:
Data you provide directly
When you submit an inquiry via our contact form, we collect your name, email address, company name, and the content of your message. We may also collect a phone number if you choose to provide one.
Data collected automatically
When you visit our website, we may collect technical data such as your IP address, browser type, operating system, pages visited, time spent on pages, and referring URL. This data is collected through cookies and similar technologies (see Section 9).
Data from third-party sources
In the course of providing outreach and lead generation services to our clients, we may process publicly available professional data, including LinkedIn profiles, company websites, and industry databases such as Clay or similar enrichment platforms. This data is used solely in the context of B2B marketing services and relates to individuals in their professional capacity.
3. How We Use Your Data
We use personal data for the following purposes:
- Responding to inquiries and providing information about our services
- Delivering and managing marketing services for our clients
- Improving website performance and user experience
- Sending relevant service updates or promotional communications (with your consent where required)
- Complying with legal obligations and enforcing our contractual rights
- Fraud prevention and security monitoring
- Analytics and reporting on campaign performance
4. Legal Basis for Processing (GDPR)
For individuals located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases under the General Data Protection Regulation (GDPR):
Legitimate interests (Article 6(1)(f))
We process data submitted via contact forms and website analytics data based on our legitimate interest in responding to business inquiries and improving our services. We also rely on this basis when processing publicly available B2B professional data in the context of client outreach campaigns.
Consent (Article 6(1)(a))
Where we send direct marketing communications or use non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.
Contract (Article 6(1)(b))
When you engage our services or enter into a service agreement with us, we process your data as necessary to fulfil our contractual obligations.
Legal obligation (Article 6(1)(c))
We process data where required to comply with applicable laws, including tax, accounting, and anti-money-laundering regulations applicable in Poland and the EU.
5. Data Sharing and Third Parties
We do not sell your personal data. We may share your data with the following categories of third parties, strictly to the extent necessary:
Service providers and processors
We use trusted third-party tools to operate our business, including email and CRM platforms, analytics tools (such as Google Analytics), advertising platforms (such as Google Ads and LinkedIn Ads), and automation tools (such as Clay). These processors act under data processing agreements and are bound to handle your data only on our instructions.
Professional advisors
We may share data with legal, accounting, or financial advisors where necessary to comply with legal obligations or exercise our legal rights.
Regulatory and law enforcement authorities
We will disclose personal data where required by law, court order, or a competent supervisory authority. We will, where possible, notify you of such disclosure unless prohibited by law.
Business transfers
In the event of a merger, acquisition, or sale of all or part of our business, personal data may be transferred to the relevant third party as part of that transaction, subject to equivalent protections.
6. International Data Transfers
Our company is based in Poland (EU). Some of our third-party service providers, including Google and LinkedIn, may process data in the United States or other countries outside the EEA.
When personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses approved by the European Commission, or reliance on adequacy decisions where applicable.
For users in the United States: by submitting your data through our website, you consent to the transfer and processing of your data in Poland and other countries where our processors operate.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required by law.
- Contact form submissions: retained for up to 3 years from the date of submission, or until you request deletion
- Client data under active contracts: retained for the duration of the engagement and for 5 years thereafter, in line with Polish accounting and tax law
- Website analytics data: retained in aggregated or anonymised form; raw data retained as per Google Analytics settings (typically 14 months)
- Marketing consent records: retained for as long as the consent is active plus 3 years for evidentiary purposes
8. Your Rights
Rights under GDPR (EEA and UK residents)
If you are located in the EEA or the United Kingdom, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Request erasure of your data (the right to be forgotten)
- Restrict or object to certain types of processing
- Receive your data in a portable, machine-readable format
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with your national data protection authority
For Polish residents, the supervisory authority is the Urzad Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.
Rights under CCPA (California residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to know: the categories and specific pieces of personal information we collect, use, disclose, or sell
- Right to delete: request deletion of personal information we have collected from you, subject to certain exceptions
- Right to correct: request correction of inaccurate personal information
- Right to opt out: we do not sell or share personal information for cross-context behavioral advertising
- Right to non-discrimination: we will not discriminate against you for exercising any of these rights
To exercise any of these rights, contact us at marketing@oligamy.com. We will respond within 45 days of receiving your verifiable request, as required by California law.
How to submit a request
To exercise any right, please email marketing@oligamy.com with the subject line "Data Rights Request". We will verify your identity and respond within 30 days (GDPR) or 45 days (CCPA). We do not charge a fee for reasonable requests.
9. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to operate core functionality, analyse traffic, and, where consent is given, to support advertising and retargeting.
Types of cookies we use
- Strictly necessary cookies: required for the website to function. These cannot be disabled.
- Analytics cookies: used to understand how visitors interact with the site (for example, via Google Analytics 4). Enabled only with your consent.
- Advertising cookies: used to measure campaign performance on Google Ads and LinkedIn Ads. Enabled only with your consent.
You can manage or withdraw cookie consent at any time via your browser settings or by contacting us. Note that disabling certain cookies may affect the functionality of the website.
10. Marketing Communications
We send marketing emails only to individuals who have expressly opted in, or where we have a legitimate interest in contacting them in a B2B context as permitted by applicable law (including the Polish Act on Electronic Commerce and the EU ePrivacy Directive).
Every marketing email includes an unsubscribe link. You can also opt out at any time by emailing marketing@oligamy.com with "Unsubscribe" in the subject line. Requests are processed within 5 business days.
11. Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.
12. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews of our tools and processors.
No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority as required by law.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. We will post the updated policy on this page with a revised date. For material changes, we will make reasonable efforts to notify affected individuals directly.
Continued use of our website or services after changes become effective constitutes acceptance of the updated policy.
14. Contact
For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact:
Oligamy Software sp. z o.o.
Nowiec 38, 80-293 Gdansk, Poland
NIP: 5833433323 | KRS: 0000911398