Privacy policy
Last updated: 13 November 2026
Who I am
This website is run by Mariusz Kozlowski, trading as Mario Builds AI, a sole trader based in the United Kingdom. I am the controller of the personal data described below. Contact: mariusz.kozlowski23@gmail.com, phone or WhatsApp +44 7446 377863.
What I collect
- Contact form: your name, email address, phone number (optional), business name (optional) and your message.
- Email and WhatsApp: anything you send me directly, and your contact details.
- Technical data: the hosting provider keeps standard server logs (such as IP address and browser type) to run and protect the site.
I don’t use advertising or tracking cookies on this site.
How I use it and why
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Replying to your enquiry and arranging a call | Steps at your request before entering into a contract, and legitimate interests |
| Using AI to sort enquiries and draft a first reply | Legitimate interests (responding quickly). You can ask for a reply written by me personally at any time. |
| Keeping records of our communication and work | Contract, and legal obligations (for example tax records) |
| Keeping the website secure | Legitimate interests |
I don’t sell your data and I don’t use it for marketing without your consent.
Automated replies
When you send the contact form, an AI system reads your message, gives it a priority and writes a first reply that is emailed to you automatically. This doesn’t lead to any decision with legal or similarly significant effects on you. I read every enquiry myself.
Who processes your data for me
- n8n GmbH (Germany): runs the automation that handles the contact form.
- Anthropic (USA): the AI model that drafts replies. Data sent through its business service isn’t used to train its models.
- Google (Gmail): email.
- Vercel: website hosting.
- Google Fonts: fonts on this site, which are loaded from Google’s servers.
- WhatsApp (Meta): if you choose to message me there.
Some of these providers are outside the UK. Where data is transferred abroad, it is protected by UK adequacy regulations or the UK International Data Transfer Addendum or Agreement.
How long I keep it
Enquiries that don’t lead to work: up to 24 months, then deleted. Client records: up to 6 years after our work ends, for tax and legal reasons.
Your rights
You can ask to access, correct or delete your data, to restrict or object to how I use it, and to receive a copy of it. Email me and I’ll reply within one month. If you’re not happy, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes
If this policy changes, the new version will appear on this page with a new date.