Privacy Policy

This website and the software products described on it are operated by Pedro Bandeira Duarte dos Santos, trading as 3DH Consulting, a sole proprietorship registered in Poland (CEIDG) and based in Warsaw, Poland. NIP PL5213562807, REGON 142346889.

For the purposes of the EU General Data Protection Regulation (GDPR), 3DH Consulting is the data controller for personal data collected through this website and in the course of its client relationships. Contact: pedro@3dhconsulting.com.

We collect only what we need to run the business:

• Contact and enquiry data. Name, email address, company, and the content of any message you send us through the contact form or by email.
• Newsletter data. Email address, if you subscribe. You can unsubscribe from any email we send.
• Website usage data. Aggregate analytics about pages viewed and how visitors move through the site. We use this to improve the site, not to profile individuals.
• Client relationship data. Contact details and correspondence relating to a project or contract.

This is the part that matters most to prospective clients, so we state it plainly.

Our software products, including Scout, are deployed as managed solutions inside the customer's own Microsoft 365 tenant. Customer content processed by those products, including documents, email, calendar data, and any client information, remains in the customer's own Microsoft environment, under that customer's control and subject to Microsoft's EU Data Boundary commitments where applicable.

3DH Consulting does not host, copy, or retain customer content as part of normal product operation. Where a customer grants us administrative access in order to deploy, configure, or support a product, we access only what is necessary for that purpose, and only for as long as necessary. In that context 3DH Consulting acts as a processor on the customer's instructions, governed by the relevant services agreement and, where required, a data processing agreement.

• To respond to enquiries and provide services. Legal basis: performance of a contract, or steps taken at your request before entering into one.
• To send a newsletter. Legal basis: your consent, withdrawable at any time.
• To operate and improve the website. Legal basis: our legitimate interest in running a functioning website.
• To meet accounting and tax obligations. Legal basis: compliance with a legal obligation under Polish law.

We do not sell personal data. We share it only with service providers that help us operate, and only to the extent necessary. These include hosting and infrastructure providers, email delivery providers, and Microsoft as the platform on which our products run. Each is bound by its own contractual and data protection obligations.

We may also disclose data where we are legally required to do so.

We prefer EU-hosted processing. Where a provider processes data outside the European Economic Area, that transfer is covered by an adequacy decision or by Standard Contractual Clauses.

Enquiry correspondence is kept for as long as needed to deal with the enquiry and for a reasonable period afterwards. Client records are kept for the duration of the relationship and then for the period required by Polish accounting and tax law. Newsletter data is kept until you unsubscribe.

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, write to pedro@3dhconsulting.com. You also have the right to lodge a complaint with the Polish supervisory authority, the Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa.

We apply appropriate technical and organisational measures, including access control, encryption in transit, and the principle of least privilege. No system is perfectly secure, but we take this seriously and design our products so that customer content stays in the customer's own environment.

If we change this policy we will update the date at the top of this page. Material changes affecting existing clients will be communicated directly.

Pedro Bandeira Duarte dos Santos 3DH Consulting
Warsaw, Poland · NIP PL5213562807
pedro@3dhconsulting.com

Our full registered address is held in the Polish CEIDG register and is available on request to anyone with a legitimate need for it, including for service of legal documents.