Last updated: September 3, 2026 · Effective date: September 3, 2026
This Privacy Policy explains how we collect, use and disclose personal information about visitors to our website and people who submit our contact form. It applies to sinundigital.eu and any page that links to this policy (the “Site”).
The business responsible for the personal information described here (the “controller” or “business”) is:
We provide business-to-business marketing services (booked roofing estimate appointments) to roofing contractors. This Site is not directed to consumers seeking roofing work.
The table below is our “notice at collection” under the California Consumer Privacy Act, as amended by the CPRA. It lists the categories of personal information we collect, why, and how long we keep them.
| Category (CCPA) | Examples we actually collect | Purpose | Retention |
|---|---|---|---|
| Identifiers | First and last name, email address, phone number, IP address, device/browser identifiers and cookie IDs | Contacting you, scheduling calls, sending information you asked for, fraud prevention, advertising measurement | 36 months after last contact, unless you ask us to delete sooner |
| Commercial information | Number of roofing jobs per month, annual revenue range, services you expressed interest in | Qualifying whether our service is a fit; preparing your proposal | 36 months after last contact |
| Internet or other electronic network activity | Pages viewed, referring URL, UTM parameters, time on page, interactions with our ads | Measuring and improving our advertising and the Site | Up to 24 months (or the advertising platform's own window) |
| Geolocation data (approximate only) | Coarse city/region inferred from IP address by our advertising and hosting providers | Ad targeting and fraud prevention | Up to 24 months |
| Inferences | Whether your company appears to be a qualified prospect | Sales prioritization | 36 months after last contact |
| Consent records | The exact consent wording shown to you, the timestamp, the page URL and your browser user-agent string | Proving your prior express written consent to be contacted, as required by the TCPA | At least 5 years (statute of limitations); kept even if you opt out of marketing |
Sensitive personal information. We do not knowingly collect sensitive personal information as defined by California or other state law (such as Social Security numbers, precise geolocation, account credentials, racial or ethnic origin, health, biometric or genetic data, or the contents of your communications). We do not use or disclose any such information for purposes that would trigger a “limit the use of my sensitive personal information” right.
Sources. We collect personal information directly from you (the form), automatically from your device (cookies and similar technologies), and from our advertising and scheduling providers (for example, when you book a call).
We do not use your personal information for automated decision-making that produces legal or similarly significant effects about you, and we do not profile you for such purposes.
In the last 12 months we disclosed the categories of personal information above to the following types of recipients:
| Recipient | Role | What they receive |
|---|---|---|
| Google LLC / Google Ireland Ltd. (Google Sheets, Apps Script, Gmail) | Service provider - stores our lead records and sends our email | Form submissions, consent records |
| Calendly LLC | Service provider - appointment scheduling | Name, email, booking details |
| Telegram FZ-LLC | Service provider - internal notification of new inquiries | Name, phone, email, form answers |
| Netlify Inc. (or our current web host) | Service provider - website hosting and logs | IP address, request logs |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd. | Advertising partner - ad delivery and measurement (Meta Pixel) | Cookie/device identifiers, IP address, page activity and the fact that a qualified inquiry occurred. We do not send your name, email address or phone number to Meta. |
| Professional advisors, and acquirers in a merger or sale | Legal/business necessity | Only as required |
Our service providers are contractually restricted to using personal information only to perform services for us. We may also disclose personal information when required by law, valid legal process, or to protect our rights, safety or property.
We do not sell your personal information for money. We have not done so in the preceding 12 months, and we do not sell or share the personal information of anyone we know to be under 16.
We do “share” certain information for cross-context behavioral advertising. When the Meta Pixel is active, identifiers, device information and browsing activity are made available to Meta so it can measure and optimize our ads. Under the CCPA/CPRA this counts as “sharing,” and under Virginia, Colorado, Connecticut, Texas, Oregon, Montana, Florida and similar laws it counts as processing for “targeted advertising.” You have the right to opt out.
How to opt out:
Browser-based opt-outs are stored on the device you used, so please repeat them on each browser and device. We do not discriminate against you for exercising any privacy right.
Mobile numbers and SMS. Your mobile phone number and your text-message consent are never sold, shared or otherwise disclosed to third parties or affiliates for their own marketing or promotional purposes. Phone numbers are disclosed only to service providers who help us deliver our own messages to you.
The Site uses a small number of cookies and similar technologies:
We honor the Global Privacy Control (GPC) signal. If your browser sends GPC, we treat it as an opt-out of sale/sharing and targeted advertising and we do not load advertising technologies at all - you do not have to do anything else. You can also block or delete cookies in your browser settings, and you can adjust your Meta ad preferences inside your Facebook or Instagram account.
We do not use session-replay tools, keystroke logging, or chat-transcript recording, and we do not permit third parties to read the contents of what you type on the Site before you submit the form.
When you check the consent box and submit the form, you give your prior express written consent for us to contact you at the number you provided, including with automated dialing technology and prerecorded voice messages, for marketing purposes. Consent is not a condition of purchasing any goods or services. Message frequency varies. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
To stop text messages, reply STOP to any message; reply HELP for help, or contact us at the address in section 16. To stop calls, tell us during any call or email us - we will add you to our internal do-not-call list, which we maintain and honor for at least five years. We keep a record of the exact consent language you saw, together with the timestamp, page and browser, as proof of consent.
Every commercial email we send identifies us, includes a valid physical postal address, and contains a working unsubscribe link. We honor opt-out requests within 10 business days, as required by law.
Depending on where you live - including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky and Rhode Island - you may have the right to:
How to submit a request. Email jmoscicka@sinundigital.com with the subject line “Privacy Request,” or use our Your Privacy Choices page. Please tell us which right you want to exercise and include the email address or phone number you gave us so we can locate your record.
Verification. Before we act on an access, deletion or correction request, we verify your identity by matching at least two data points you provide (for example, the email address and the phone number in our records), or by asking you to reply from the email address on file. We do not use the information you provide for verification for any other purpose.
Timing. We confirm receipt within 10 business days and respond within 45 calendar days. If we need more time, we will tell you and may extend by another 45 days (Colorado: 45 days total plus one 45-day extension; other states vary slightly - we apply the shortest applicable deadline).
Authorized agents. You may use an authorized agent. We will ask for written permission signed by you, and we may still ask you to verify your own identity directly.
Appeals. If we decline your request, you may appeal by replying to our decision email with the word “Appeal.” We will respond in writing within 45 days (60 days in Colorado, Connecticut and Virginia where permitted) explaining our reasoning. If your appeal is denied, you may contact your state Attorney General; California residents may also complain to the California Privacy Protection Agency.
California “Shine the Light.” We do not disclose personal information to third parties for their own direct marketing purposes, so no §1798.83 disclosure is required.
We keep personal information only as long as needed for the purposes described in section 2. In practice: lead and CRM records for 36 months after our last substantive contact; proof-of-consent records for at least 5 years; advertising and analytics identifiers for up to 24 months; email and Telegram notification copies for up to 12 months. When a retention period expires, we delete or de-identify the data.
We use access-controlled Google accounts with multi-factor authentication, encrypted transport (HTTPS/TLS) for the Site and all form submissions, and least-privilege access to our lead spreadsheet and CRM. No system is perfectly secure; we cannot guarantee absolute security, and you submit information at your own discretion. If a breach affecting your personal information occurs, we will notify you and any regulator required by applicable state breach-notification law.
The Site is intended for business owners and is not directed to children. We do not knowingly collect personal information from anyone under 18, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child provided us personal information, email us and we will delete it.
We operate from Poland (European Union) and use providers located in the United States and the European Union. If you are in the United States, your personal information will be transferred to and stored in the EU as well as the US. If you are in the EU or UK, your information may be transferred to US providers under the European Commission's Standard Contractual Clauses, the EU-US Data Privacy Framework where applicable, or another lawful transfer mechanism.
Because our business is established in Poland, the EU General Data Protection Regulation also applies to our processing. For visitors in the EEA or UK:
| Purpose | Legal basis |
|---|---|
| Responding to your inquiry, scheduling and holding a call | Art. 6(1)(b) - steps at your request prior to a contract |
| Marketing calls, texts and emails | Art. 6(1)(a) - your consent |
| Advertising cookies and the Meta Pixel | Art. 6(1)(a) - your consent (set CONSENT_MODE = 'optin' on the Site before advertising in the EU/UK) |
| Security, fraud prevention, record-keeping and defending claims | Art. 6(1)(f) - our legitimate interests |
You have the rights of access, rectification, erasure, restriction, objection (including to direct marketing at any time), portability, and withdrawal of consent at any time without affecting the lawfulness of processing before withdrawal. You may lodge a complaint with your local supervisory authority or with the Polish authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland.
The Site links to and embeds third-party services (for example, the Calendly scheduling widget). Their own privacy policies govern the information they collect. We are not responsible for third-party practices.
We may update this policy. When we do, we will change the “Last updated” date at the top and, if the changes are material, provide a more prominent notice on the Site. This policy is reviewed at least once every 12 months, as California law requires.
If you need this policy in an alternative accessible format, email us and we will provide one.
© 2026 Sinun Digital - Julia Mościcka. All rights reserved. This site is not affiliated with, endorsed by or sponsored by Meta Platforms, Inc.