Privacy Polices

Last updated: May 15, 2026

This Privacy Policy explains how Social Media Sugar Fairy ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website, sign up for our newsletter, book a consultation, or use our services.

We're committed to protecting your privacy and being transparent about how we handle your data. If you have any questions about this policy, contact us at: hello@socialmediasugarfairy.com

1. Who We Are

Social Media Sugar Fairy is a boutique social media marketing agency. We provide social media management, Meta ads management, email marketing services, and consulting programs to businesses across Europe and beyond.

Business Owner: Piotr Brzeski
Website: www.socialmediasugarfairy.com
Contact email: hello@socialmediasugarfairy.com
Business location: Poland
NIP: 5862407073
REGON: 528970994

2. What Information We Collect

We only collect information that's necessary to provide our services and communicate with you.

Information You Give Us Directly

When you sign up for our newsletter:

Your email address
Your first name (optional)

When you book a discovery call or consultation:

Your name
Email address
Phone number (optional)
Business name
Information about your business that you share with us

When you become a client:

Full name
Business name and details
Contact information (email, phone, address)
Billing/payment information
Social media account access (only when needed for management services)
Any other information you share with us during our work together

When you contact us via email, social media, or contact forms:

Your name
Email address
The content of your message

Information We Collect Automatically

When you visit our website:

IP address
Browser type and version
Pages you visit
Time spent on pages
Referring website
Device type
Cookies and similar tracking technologies (see our Cookie Policy)

This information is collected through tools like Google Analytics and Meta Pixel to help us understand how visitors use our site.

3. How We Use Your Information

We use your personal information only for legitimate business purposes:

To provide our services to you (managing your social media, running your ads, etc.)
To respond to your inquiries and communicate with you
To send you our newsletter (if you've subscribed)
To process payments and invoicing
To improve our website and services
To send you important updates about our services
To comply with legal obligations
To prevent fraud and protect our business

We will never:

Sell your personal information to third parties
Share your data with marketers or advertisers without your consent
Use your information for purposes you haven't agreed to

4. Legal Basis for Processing Your Data (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

Consent: When you sign up for our newsletter or fill in our forms
Contract: When you become a client and we provide services to you
Legitimate interests: To run our business, communicate with you, and improve our services
Legal obligations: To comply with tax, accounting, and other legal requirements

You can withdraw your consent at any time (see Section 7 for your rights).

5. How Long We Keep Your Data

We keep your information only as long as we need it:

Newsletter subscribers: Until you unsubscribe
Inquiry/contact form submissions: Up to 2 years
Client records: For the duration of our working relationship plus 7 years for accounting and legal compliance
Website analytics data: Up to 26 months (Google Analytics default)
Cookies: Varies based on cookie type (see our Cookie Policy)

After these periods, we securely delete or anonymize your data.

6. Who We Share Your Data With

We only share your data with trusted third parties that help us run our business. These include:

Service Providers:

Wix - Our website hosting platform
Mailchimp - Email newsletter delivery
MailerLite - Email newsletter delivery
Google - Analytics and Workspace (email, documents)
Meta (Facebook/Instagram) - For running ads and pixel tracking
Payment processors - For billing and invoicing
Calendly - Booking discovery calls
Klaviyo - Email marketing services for client work

All these providers are GDPR compliant and have their own privacy policies.

Legal Requirements:
We may share information if required by law, court order, or to protect our legal rights.

Business Transfers:
If our business is sold or merged, your information may be transferred to the new owners. We'll notify you before this happens.

7. Your Rights

Under GDPR and similar privacy laws, you have the following rights:

Right to access – Request a copy of the personal data we hold about you
Right to rectification – Request that we correct inaccurate or incomplete data
Right to erasure – Request that we delete your personal data ("right to be forgotten")
Right to restriction – Request that we limit how we use your data
Right to data portability – Request your data in a portable format
Right to object – Object to certain types of processing (like marketing)
Right to withdraw consent – Unsubscribe from emails or withdraw consent at any time
Right to complain – File a complaint with a supervisory authority

To exercise any of these rights, email us at hello@socialmediasugarfairy.com. We'll respond within 30 days.

If you're not satisfied with our response, you can contact your local data protection authority. In Poland, this is UODO (Urząd Ochrony Danych Osobowych) at www.uodo.gov.pl.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your experience. For detailed information about how we use cookies, please see our Cookie Policy.

9. Data Security

We take data security seriously and implement reasonable measures to protect your information:

SSL encryption on our website
Secure password practices
Limited access to your data (only people who need it)
Regular updates of our systems and software
Trusted, GDPR-compliant service providers

However, no method of transmission over the internet is 100% secure. While we do our best to protect your data, we can't guarantee absolute security.

If a data breach occurs, we'll notify affected users and relevant authorities within 72 hours as required by law.

10. International Data Transfers

We're based in Poland (EU), and most of our service providers process data within the EU/EEA. Some providers (like Google or Meta) may transfer data to the United States.

When data is transferred outside the EU/EEA, we ensure adequate safeguards are in place, such as:

EU Standard Contractual Clauses
Adequacy decisions by the European Commission

11. Children's Privacy

Our services are not intended for individuals under 16 years old. We don't knowingly collect data from children.

If you believe we've collected information from a child, contact us immediately at hello@socialmediasugarfairy.com and we'll delete it.

12. Third-Party Links

Our website may contain links to third-party websites (like Instagram, our clients' websites, or partner tools). This privacy policy doesn't apply to those sites.

We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements.

When we make significant changes, we'll:

Update the "Last updated" date at the top
Notify you via email if you're a subscriber or client
Post a notice on our website

Please review this policy periodically to stay informed.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: hello@socialmediasugarfairy.com
Website: www.socialmediasugarfairy.com

We'll respond to your inquiry as quickly as possible, usually within 30 days.

Thank you for trusting Social Media Sugar Fairy with your information. We take that responsibility seriously and are committed to protecting your privacy every step of the way. 🤍