Privacy Policy
Version of 31 August 2026
This policy explains what personal data sales.aplora.pro collects, why we process it, who we share it with and how you can control any of it. It covers this website only.
1. Who we are and how to reach us
The data controller is Aplora Sales, Warsaw, Poland (“we”).
For anything to do with your data — including exercising the rights in section 8 — write to info@aplora.pro.
2. The principles we work by
We process data according to Article 5 GDPR:
- lawfulness, fairness and transparency — we process only what we have a basis for, and we explain it here;
- purpose limitation — we use the data only for the purposes in section 4;
- data minimisation — we collect exactly what it takes to answer your enquiry;
- accuracy — we correct data when you ask us to;
- storage limitation — we delete data once the purpose is met (periods in section 7);
- integrity and confidentiality — data travels over HTTPS and access to it is restricted;
- accountability — we can demonstrate that all of the above holds.
3. What data we collect
From the form. Your name, phone number and email address. The “Book a demo” window also has an optional “Company” field; the enquiry page has an optional comment about your situation. Email is required in the demo window and optional on the enquiry page.
Automatically, with the enquiry. Alongside the fields you filled in we store: the address of the page the form was sent from, the referring page, the campaign UTM tags, the date and time of sending and receipt, your IP address and your browser string (user agent).
In your browser. UTM tags are kept in the tab's temporary storage for the length of your visit, and your choice from the cookie consent dialog is kept in your browser's local storage. Neither is shared with other sites.
In web server logs. Every request to the site is written to a log: IP address, date and time, page address, browser and operating system.
Third-party cookies. These appear only if you allow them in the consent dialog — see section 10. The site sets no cookies of its own.
4. Purposes and legal bases
We process data for the following purposes:
- answering your enquiry, contacting you, running a demo and preparing a proposal — Article 6(1)(b) GDPR, steps taken at your request before a possible contract;
- understanding which channel an enquiry came from (UTM tags, referrer, page address) — Article 6(1)(f), our legitimate interest in knowing which advertising works;
- pre-filling the dialling code for your country in the form — Article 6(1)(f), our legitimate interest in making the form easy to fill in; your IP address is resolved to a country for this, and the address is not stored alongside the number;
- keeping the site running and secure and investigating faults from the logs — Article 6(1)(f), legitimate interest;
- measuring traffic — Article 6(1)(a), your consent, which you can withdraw;
- measuring advertising performance — Article 6(1)(a), your consent, which you can withdraw.
5. Who we share data with
Only those who need it for the purposes above:
- the hosting provider whose server runs this site;
- Notion Labs, Inc. — your enquiry becomes a record in our Notion-based CRM, where someone on the team sees it and replies;
- an IP-to-country lookup service — it receives only the address and answers with a country code, so that the form can pre-fill the right dialling code;
- Google Ireland Limited — Google Analytics, if you allowed analytics cookies;
- Meta Platforms Ireland Limited — Meta Pixel, if you allowed marketing cookies.
6. Transfers outside the European Economic Area
Enquiries submitted through the form are stored in the United States: our CRM runs on Notion, operated by Notion Labs, Inc. Google and Meta may also process data in the United States, through Google LLC and Meta Platforms, Inc.; both participate in the EU–US Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023. Where that does not apply, EU Standard Contractual Clauses do. The IP-to-country lookup is performed by an external service, which may likewise process data outside the EEA.
How they handle data themselves: Notion's policy, Google's policy and Meta's policy.
We do not sell your data and we do not pass it to third parties for their own advertising.
7. How long we keep data
There is no single period — it depends on why the data was collected:
- an enquiry and the correspondence about it — 3 years from our last contact, unless you ask us to delete it sooner;
- web server logs — 30 days;
- UTM tags in your browser — until you close the tab;
- the record of your cookie choice — 12 months, after which we ask again;
- Google and Meta cookies — on their own schedules: `_ga` and `_ga_*` up to two years, `_fbp` up to 90 days.
8. Your rights
In relation to your data you have the right to:
- access it and receive a copy;
- have inaccurate data corrected;
- have it erased;
- restrict processing;
- receive it in a machine-readable format and port it to another controller;
- object to processing based on our legitimate interest;
- withdraw consent to analytics and marketing at any time — this does not affect the lawfulness of processing before the withdrawal.
9. Exercising your rights, and where to complain
Write to info@aplora.pro — we answer within one month. Changing your cookie consent takes no email: there is a “Cookie settings” link at the bottom of every page.
If you believe we are infringing your rights, you may lodge a complaint with the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
10. Cookies and similar technologies
Cookies are small files a site stores in your browser. This site sets none of its own. All we keep in your browser is the UTM tags for the length of your visit and the choice you made in the consent dialog — that is local storage, and it is shared neither with us nor with other sites.
Cookies come from third-party trackers, and only once you have allowed them:
- analytics — Google Analytics: `_ga`, `_ga_W2VP5W3SK0`. They show how many people visit the site and which pages they read;
- marketing — Meta Pixel: `_fbp`, `_fbc`. They let us measure how our advertising performs.
11. Managing cookies
You can change your choice at any time through the “Cookie settings” link at the bottom of every page. Declining changes nothing about how the site works for you.
Cookies can also be turned off and deleted in your browser settings. To opt out of Google Analytics specifically, use Google's browser add-on.
12. Web server logs
Requests to the site are written to web server logs. They exist to diagnose faults and protect against abuse, are not linked to a particular person and are not used to identify anyone. Only those maintaining the server have access to them.
13. Automated decisions and profiling
We make no automated decisions about you and build no profiles. Enquiries are read by people.
14. Age
This site is addressed to people acting for a business. We do not knowingly collect data from anyone under 16. If that has happened by oversight, write to us and we will delete it.
15. Changes to this policy
We may update this policy — for instance if we add new services. The version in force is always published on this page, dated at the top. We will announce any substantial change on the site.