Privacy & Cookies Policy

1. General Information

This Privacy & Cookies Policy explains how personal data is processed in connection with the website available at https://www.fadingray.com (the “Website”).

The Website showcases book cover design, original illustration, concept art, and book production services created by Lukasz Jaskolski (Fading Ray) and operated commercially under license/lease agreement by brimhouse sp. z o.o.

The Website does not require user accounts or direct automated checkout. Visitors may contact the studio via direct email or through the optional project inquiry form on the Contact page.

2. Data Controller

The controller of personal data processed in connection with commercial inquiries and studio operations on the Website is:

brimhouse sp. z o.o. (operating Fading Ray)
[Street Address, Postal Code, City], Poland
KRS: [0000XXXXXX] • NIP / EU VAT: [PLXXXXXXXXXX]
Email: contact@fadingray.com

3. What Personal Data May Be Processed

3.1. Data provided via the Quote Form or Direct Email

When you submit a project inquiry or email Fading Ray directly, the following data may be processed:

• your name, pen name, company, or publishing imprint details;
• your email address;
• selected service package, book genre, target formats, estimated budget, and target launch dates;
• book synopsis, creative brief notes, manuscript files, or reference attachments you voluntarily share;
• invoicing and billing details (such as business address and VAT/tax ID) when a project contract is concluded.

3.2. Technical Data and Server Logs

When you visit the Website, standard technical request data is processed automatically by our hosting and security infrastructure (Cloudflare Pages), including IP address, request timestamp, requested URL, browser/OS user-agent, HTTP status code, and security/anti-abuse signals.

4. Purposes and Legal Bases for Processing (GDPR)

• Responding to project inquiries & preparing quotes: Article 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or Article 6(1)(f) GDPR (legitimate interest in answering business correspondence).
• Performing commissioned design, illustration, and formatting contracts: Article 6(1)(b) GDPR.
• Tax, accounting, and statutory B2B/B2C invoicing obligations: Article 6(1)(c) GDPR.
• Website security, DDoS protection, and defending/establishing legal claims: Article 6(1)(f) GDPR.

5. Recipients of Personal Data

Personal data is never sold or shared for third-party advertising. Access is restricted strictly to trusted technical and professional processors where necessary:

• Cloudflare, Inc. — static website hosting (Cloudflare Pages), CDN, DNS, and network security;
• Web3Forms (when submitting via the online quote form) — encrypted form-to-email routing without storing marketing databases;
• Email hosting, accounting, and legal/tax service providers supporting brimhouse sp. z o.o.;
• competent public or tax authorities solely when required by applicable Polish or EU law.

6. International Data Transfers

Where infrastructure providers such as Cloudflare process technical data outside the European Economic Area (EEA), transfers rely on GDPR-compliant safeguards including the EU–US Data Privacy Framework adequacy decisions and European Commission Standard Contractual Clauses (SCCs).

7. Data Retention

• Inquiries that do not lead to a commissioned project are retained for up to 12 months after the final message.
• Project contracts, licensing records, and correspondence are kept for the duration of the license/cooperation and statutory limitation periods for copyright and contractual claims.
• Invoices and accounting records are retained for the period mandated by Polish tax and accounting regulations (typically 5 years from the end of the relevant tax year).

8. Your Rights Under the GDPR

Under the GDPR, you have the right to request access to your personal data, rectification, erasure (where applicable), restriction of processing, data portability, and to object to processing based on legitimate interests. You also have the right to lodge a complaint with your national supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — UODO).

9. Cookies & Local Fonts

• Zero Advertising or Profiling Cookies: FadingRay.com does not use Meta Pixel, Google Ads tracking, third-party behavioral ad cookies, or external Google Fonts CDN requests (all fonts are self-hosted locally on our server).
• Strictly Necessary Technical Mechanisms: Cloudflare may set strictly necessary security or load-balancing tokens solely to protect the Website from automated abuse and ensure reliable delivery.

10. Contact

For any privacy questions or GDPR requests, contact: contact@fadingray.com.