Privacy policy
Last updated: September 2026
Firmatch.ai is a prototype platform for buying and selling micro and small businesses, developed as an Executive MBA capstone project. This page explains what data we collect through the forms on the site, why we collect it and what your rights are.
In brief
- We only collect the data you enter in the sign-up or valuation form.
- We use it solely to contact you about the platform pilot and your valuation.
- We don’t sell data, send advertising or track what you do on the site.
1. Data controller
The controller of your personal data is Konrad Żaczek, trading as KZ Advisory Konrad Żaczek, ul. Burakowska 16/158, 01-066 Warsaw, Poland. For anything relating to personal data, email us at kzaczekk@gmail.com.
2. What data we collect
We only process the data you give us through the forms:
- Waiting list: email address, who you are (e.g. seller, buyer, investor), optionally a range for the business value or budget, the date of your sign-up and the language version of the site.
- Business valuation: company name, your role in the company, first name and surname, email address, optionally a phone number, planned timing of the sale, sector, revenue, profit and profit growth, the date of your submission and the language version of the site. Your other answers in the calculator, such as customer structure or plans after the sale, are used only to calculate the result in your browser and are not sent to us.
In addition, our hosting provider processes technical data related to displaying the site, such as your IP address and browser information.
3. Purposes and legal bases
- Contacting you about the platform pilot and your business valuation – based on the consent you give in the form (Article 6(1)(a) GDPR).
- Preparing aggregated, anonymised summaries of interest in the platform for the Executive MBA capstone project – based on our legitimate interest (Article 6(1)(f) GDPR). The project does not publish any information that could identify you or your business.
- Keeping the site running and secure – based on our legitimate interest (Article 6(1)(f) GDPR).
4. Who we share data with
We don’t sell your data or share it with other companies for marketing purposes. Only authorised members of the project team can access submissions. We use service providers that process data on our behalf or in connection with running the site:
- Cloudflare, Inc. – website hosting and protection against attacks,
- Formspree, Inc. – handling the forms and forwarding submissions to our email inbox,
- our email provider – storing the messages containing submissions,
- Google (the Google Fonts service) – delivering fonts; when you view the site, your browser downloads them from Google’s servers, which receive your IP address.
5. Transfers outside the European Economic Area
Some of these providers are based in the United States, so your data may be transferred outside the EEA. Such transfers rely on the European Commission’s adequacy decision (the EU–US Data Privacy Framework) for organisations certified under it, or on standard contractual clauses approved by the European Commission.
6. How long we keep data
We keep form data until you withdraw your consent, but no longer than until the end of the platform pilot, and in any case for no more than 24 months from when you submitted the form. After that we delete it. Technical data in the hosting provider’s logs is kept for the period set by that provider’s own policies.
7. Your rights
You have the right to:
- access your data and receive a copy of it,
- have your data corrected,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest.
You can withdraw your consent at any time – just email kzaczekk@gmail.com. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. If you believe we are processing your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
8. Do you have to provide data?
Providing data is voluntary. However, without an email address and your consent we can’t add you to the waiting list or show you the valuation result.
9. Valuation and automated decision-making
The valuation result is an indicative estimate that your browser calculates automatically from the figures you enter. It is not an offer or a decision that produces legal effects for you. We do not profile users.
10. Cookies
This site does not use cookies or any analytics or advertising tools, and the forms do not store data in your browser’s storage. Our hosting provider may use technical mechanisms that are strictly necessary to protect the site from abuse.
11. Changes to this privacy policy
We will update this document whenever the way the site works changes – for example, when the prototype becomes a live service. The current version is always available at this address. This English version is a translation of the Polish privacy policy; if there is any discrepancy, the Polish version prevails.