Privacy Policy

Last updated: 27 September 2026. This is a translation provided for convenience; the Polish version is legally binding.

This Privacy Policy explains what personal data we collect on homeshot.pl, why, how long we keep it and what rights you have. We apply Regulation (EU) 2016/679 (GDPR), the Polish Personal Data Protection Act of 10 May 2018 and the Polish Electronic Communications Law of 12 July 2024.

1. Data controller

The controller of your personal data is:

Andrii Bolhov BLHV
ul. 1 Sierpnia 24
63-000 Środa Wielkopolska
NIP: 7861737711
E-mail: info@homeshot.pl

For any questions about personal data, write to us at info@homeshot.pl.

2. What data we collect

  • Booking form: name, phone number, email address (optional), session address (city, street, house / entrance number), chosen service, date, number of people and comment.
  • Review form: signature (name or nickname) and review text.
  • Correspondence: data you provide when you write to us by email or messenger (Telegram, WhatsApp, Instagram).
  • Technical data: IP address, browser type and time of visit in server logs, and cookies (section 9).

We do not ask for data we do not need. The website and services are intended for adults only – we do not knowingly collect data of persons under 18.

3. Session materials

Videos and photos from the session contain your image and may reveal information about your sex life, which is a special category of data (Art. 9 GDPR). We process them only on the basis of your explicit consent (Art. 9(2)(a) GDPR) and only to perform the service: to record the materials and hand them over to you.

  • The materials never leave the session location with the operator – we hand them over to you on the spot right after the session.
  • After the handover, the operator deletes the materials from their devices in your presence, and you can check the device to make sure they have been deleted.
  • We keep no copies, and we never publish, sell or show the materials to third parties.

After the handover we have no access to the materials – you are responsible for storing them.

4. Purposes and legal bases

  • Handling your request, booking a date, contacting you about the session and performing the contract – Art. 6(1)(b) GDPR.
  • Session materials – Art. 9(2)(a) GDPR (explicit consent), see section 3.
  • Accounting and tax obligations – Art. 6(1)(c) GDPR (legal obligation).
  • Establishing, pursuing or defending claims and website security, including spam protection – Art. 6(1)(f) GDPR (legitimate interest).
  • Publishing reviews – Art. 6(1)(a) GDPR (consent).
  • Sending exclusive offers to your email address, if you provide it – Art. 6(1)(a) GDPR in connection with Art. 398 of the Electronic Communications Law (consent). You can withdraw your consent at any time by writing to info@homeshot.pl.
  • Analytics and marketing cookies, if we use them – Art. 6(1)(a) GDPR in connection with Art. 399 of the Electronic Communications Law (consent).

Providing data is voluntary, but we cannot accept a booking without the data marked as required in the form.

5. Recipients

We do not sell personal data. Only service providers who help us run the website have access to it, under data processing agreements:

  • Hostinger – website hosting, email and CDN;
  • an accounting office – for data needed for settlements;
  • messenger operators – if you choose to contact us via Telegram, WhatsApp or Instagram (under their own terms).

Public authorities may also receive data where required by law.

6. Transfers outside the EEA

We process data primarily within the European Economic Area (EEA). If a provider processes data outside the EEA, this is based on a European Commission adequacy decision or standard contractual clauses.

7. How long we keep data

  • Booking requests – deleted automatically 1 day after the booked session, and cancelled bookings within 1 day of cancellation.
  • Email address for offers – until you withdraw your consent.
  • Accounting documents – 5 years from the end of the calendar year in which the tax payment deadline expired.
  • Session materials – we do not keep them after the session ends (section 3).
  • Reviews – until you withdraw consent or the review is removed.
  • Server logs – for a short period set by the hosting provider.

8. Your rights

You have the right to access your data and receive a copy, to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You can withdraw consent at any time – this does not affect the lawfulness of processing before withdrawal.

To exercise your rights, write to info@homeshot.pl. We will reply within one month.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl).

We do not make automated decisions and do not use profiling.

9. Cookies

Cookies are small files stored in your browser. Strictly necessary cookies do not require consent – the website does not work properly without them:

  • homeshot_age_ok – age confirmation, 30 days;
  • pll_language – selected site language, 1 year;
  • hs_consent – your cookie choice, 12 months;
  • wordpress_*, wp-settings-* – only for logged-in site administrators.

We enable analytics and marketing cookies (e.g. visit statistics) only after you give consent in the cookie banner. You can change your choice at any time in the cookie settings. You can also delete or block cookies in your browser settings.

10. Security

The connection to the website is encrypted (HTTPS), and only authorised persons have access to requests. The form does not store your IP address – for spam protection we only use its encrypted hash, kept for no longer than one hour.

11. Changes to this policy

We may update this policy, e.g. when laws or our services change. The current version is always available on this page, and the date of the last change is shown at the top.