Privacy Policy
Last updated: 25 June 2026
1. Who we are
This Privacy Policy explains how Bosar Limited Liability Company, a limited liability company registered in Poland (NIP 6793318472), operating the AI Audit service ("Bosar Agency", "we", "us", or "our"), collects, uses, holds, and discloses your personal data when you visit this website or book a call with us.
We are the data controller for the personal data described in this policy. Our registered address is:
Bosar Limited Liability Company
Na Zjezdzie Street 11, unit 5P
30-527 Kraków, Poland
Because we are established in the European Union, we process personal data in accordance with the EU General Data Protection Regulation (GDPR). Because our services are offered to people in Australia, we also handle personal information consistently with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). See section 10 for information specific to Australian users.
2. The personal data we collect
Information you give us
When you apply for or book an AI Audit Discovery Call through our booking widget, you may provide:
- Your name and business name
- Your email address and phone number
- Information about your business, such as annual revenue band, team size, and your role
- Any other details you choose to share in the booking form or on a call
Information we collect automatically
When you visit the site, we and our service providers may automatically collect:
- Device and browser information, such as IP address, browser type, and operating system
- Usage information, such as pages viewed, links clicked, time on page, and whether you played a video
- Information from cookies and similar technologies, including advertising and analytics identifiers
3. How we use your data and our legal bases
Under the GDPR we must have a lawful basis for each way we use your personal data. The table below sets out what we do and why.
| What we do | Legal basis (GDPR) |
|---|---|
| Schedule, confirm, and conduct your discovery call, and assess whether the audit is a fit | Taking steps at your request before entering a contract; our legitimate interest in responding to enquiries |
| Communicate with you, including reminders and follow-ups about your booking | Our legitimate interest in delivering the service you asked for |
| Operate, secure, and improve our website and services | Our legitimate interest in running a safe, working website |
| Measure and improve our marketing, including the performance of our ads, using analytics and advertising cookies | Your consent (where required for non-essential cookies) |
| Comply with our legal and accounting obligations | Compliance with a legal obligation |
Where we rely on consent, you can withdraw it at any time without affecting processing that already took place. Where we rely on legitimate interests, you can object — see section 9.
4. Cookies and tracking technologies
We use cookies and similar technologies to run the site, understand how it is used, and measure our advertising. These include analytics tools and advertising pixels. Essential cookies are needed for the site to function. For non-essential cookies (analytics and advertising), we will seek your consent where required, and you can control cookies through your browser settings, though disabling them may affect how the site works.
5. Who we share your data with
We do not sell your personal data. We share it only with service providers (processors) who help us run the site and our booking process, and only as needed for them to provide their services. These include:
- Vercel for website hosting
- iClosed for scheduling and booking
- Meta Platforms (Facebook and Instagram) for advertising and conversion measurement
- PostHog for product and website analytics
- Wistia, Vimeo, and VTurb (ConverteAI) for video hosting and playback
We may also disclose your personal data where required or authorised by law, or to protect our rights.
6. International data transfers
Some of our service providers are located outside the European Economic Area (EEA), including in the United States. Where we transfer personal data outside the EEA, we rely on appropriate safeguards under the GDPR — such as the European Commission's Standard Contractual Clauses or an adequacy decision — so that your data continues to receive an equivalent level of protection. You can ask us for more detail using the contact details below.
7. How long we keep your data
We keep your personal data only for as long as we need it for the purposes described in this policy, or as required by law (for example, accounting records). When it is no longer needed, we take reasonable steps to delete or anonymise it.
8. How we protect your data
We take reasonable technical and organisational measures to protect your personal data from misuse, interference, loss, and unauthorised access, modification, or disclosure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Your rights
Subject to the GDPR, you have the right to:
- Access the personal data we hold about you
- Have inaccurate or incomplete data corrected
- Have your data erased ("right to be forgotten") in certain circumstances
- Restrict or object to our processing of your data
- Receive your data in a portable format (data portability)
- Withdraw your consent at any time, where we rely on consent
- Lodge a complaint with a supervisory authority (see section 11)
To exercise any of these rights, contact us using the details in section 13. We will respond within the timeframes required by law.
10. Australian users
If you are in Australia, we also handle your personal information in line with the Australian Privacy Act 1988 (Cth) and the APPs. You may request access to, and correction of, the personal information we hold about you, and you may ask us to stop sending you marketing. If you are not satisfied with how we have handled your personal information, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Complaints
If you have concerns about how we handle your personal data, please contact us first so we can try to resolve them. You also have the right to lodge a complaint with a data protection supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), at uodo.gov.pl; in Australia, the OAIC, as noted above.
12. Third-party links
Our site may link to third-party websites and embed third-party content. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.
13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, contact us at:
Bosar Limited Liability Company
Na Zjezdzie Street 11, unit 5P, 30-527 Kraków, Poland
Email: Bohdan.p@bosar.agency