Privacy policy.

Last updated: 26 October 2026.

Who is responsible

Paul Loyanich operates loyanich.com and is responsible for the personal information processed for this website and the enquiries described here. Contact [email protected] for privacy questions and requests.

This is a personal professional website. References to Tarkmote describe collaboration and delivery capacity; they do not make every enquiry a contract with a Tarkmote company. Where an engagement is handled by a separate contracting entity, its identity and any relevant processing arrangements are agreed for that engagement.

Information and purposes

Project enquiries and correspondence

When you submit an enquiry or send an email, I receive the information you provide, such as your name, email address, phone number, company, subject and message. Website enquiries are stored in Odoo CRM. I use this information to respond, understand the project and discuss a possible engagement.

For steps you request before a contract with you personally, the legal basis is those pre-contractual steps. For business enquiries on behalf of an organisation, it is the legitimate interest in responding and developing relevant professional relationships. Sending an enquiry does not subscribe you to marketing.

Required fields are marked on the form. Without sufficient information and contact details, I may be unable to respond. Please do not send passwords, access tokens, payment-card details, sensitive personal information or confidential datasets through the form.

Accounts and the Forum

If you create or use an account, Odoo processes account identifiers, contact and profile information, login/session information and your activity needed to provide the account features. Passwords are used for authentication; do not share them in messages or forum posts.

Forum contributions and the profile information displayed with them may be visible to other visitors according to the forum’s visibility settings. Avoid posting information you do not want to make public. Account and forum data are used to provide the requested features and, on the basis of legitimate interests, to moderate misuse and keep the service secure. An enquiry-retention period does not automatically apply to public discussions or an active account; contact me about account or contribution removal.

Shop and transaction records

If you use the Shop, Odoo may process the contact, billing, order and other information required for the selected service or transaction. This supports steps before a contract, performance of the relevant agreement and applicable legal obligations. The seller and commercial terms shown for the transaction govern the purchase. Payment-related information is handled through the payment methods offered at checkout; do not send card details by email or in an enquiry.

Order, invoice and contractual records may need to be kept for applicable legal obligations or legal claims. They are handled separately from unsuccessful enquiries.

Website operation and security

Technical requests can include your IP address, requested address, time, browser/device information and error or security information. These are used to operate the website, diagnose faults and prevent abuse, on the basis of legitimate interests in a reliable and secure service.

Providers, access and locations

The website, Odoo database and filestore use shared self-hosted infrastructure in Poland. Access is limited to people who need it to handle requests, support the systems or meet legal responsibilities. Authorised technical administrators may access the shared infrastructure for operation and support.

• Cloudflare: website delivery, DNS and security, including technical connection and request information. See Cloudflare’s privacy information and processing terms.
• Brevo: transactional email delivery from Odoo. Information needed to deliver messages may include recipient information and message content. See Brevo’s privacy information.
• Google Workspace: email correspondence through [email protected]. See Google Workspace processing terms.

Necessary information may also be disclosed to professional advisers or authorities where required by law or needed to protect legal rights.

Processing outside the European Economic Area

External providers may process information outside the EEA, including through support or subprocessors. The applicable safeguards depend on the service and recipient and may include an adequacy decision or Standard Contractual Clauses with additional safeguards where required. Contact [email protected] for information about the arrangements applicable to your information.

Retention

The approved retention periods for this website are:

• Unsuccessful enquiries: 90 days after the enquiry is marked unsuccessful and closed, unless a legal obligation or specific legal claim requires longer retention.
• Routine access, application and error logs: 90 days.
• Security events and administrative audit records: one year.
• Regular backups: up to one year from creation.

Active engagements, accounts, forum contributions and contractual/accounting records are considered separately according to their purpose and applicable obligations. Incident, legal and recovery holds may justify longer retention with review of the continuing need.

This schedule is being implemented. Daily backups are in place; automated backup expiry and routine log and enquiry cleanup are not yet enabled. Contact me about a specific retention or deletion request while this work is completed.

Information removed from active records may remain in restricted recovery copies until they expire. Restoring a backup requires review and reapplication of applicable deletion and restriction decisions.

Your choices and rights

Depending on the circumstances and applicable law, you may request access, correction, deletion, restriction and portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your situation. If processing relies on consent, you may withdraw it without affecting processing that took place before withdrawal.

Email [email protected] with your request. I may ask for proportionate information to confirm your identity and normally respond within one month, explaining any lawful extension. Rights can be subject to legal exceptions.

You may complain to the competent data-protection authority where you live or work or where you believe an infringement occurred. You do not have to contact me first. The European Commission’s information for individuals explains these rights and complaint options.

Cookies and analytics

Odoo uses cookies or browser storage for functions such as sessions, language preferences, accounts and shopping-cart operation. Cloudflare security services may use cookies for request checks or remembering a completed challenge. Blocking these technologies can affect website features. See Cloudflare’s cookie information.

Optional Google Analytics and Plausible tracking are disabled in the new personal website template. If optional analytics is introduced, this notice and any necessary choice controls will be updated before it is enabled. The server-log and backup schedules do not determine an external analytics provider’s retention.

Updates and questions

This policy may be updated as the website and processing arrangements change. The date above identifies the latest revision. For questions or requests, contact [email protected].