10 OCTOBER 2026

Privacy Notice

This notice explains how Mucinly handles information for agency enquiries, orders and delivery. Submitting a brief or accepting the Terms does not give consent to advertising or marketing.

Who is responsible

Zdenko Mucina, trading as Mucinly, Do Ulice 271/8, 01301 Teplička nad Váhom, Slovakia; IČO 53 699 254. Registered in the Trade Register at Okresný úrad Žilina, registration number 580-70540. Contact mucinly@gmail.com or +421 948 692 435 for privacy enquiries and requests.

Information used

We process contact and billing details, the website link and brand references you submit, your brief and creative instructions, correspondence, approval and consent records, payment references and status, and delivered work. A submitted website may provide product descriptions, images, logos, colours and fonts. Check that you have permission to supply material containing another person's information. Do not submit special-category personal data, passwords or card details.

Why we use it

We use information to respond to your enquiry and prepare an offer at your request, and to perform an agreed order. These activities rely on steps requested before entering a contract and contract performance. We retain records required by tax or other applicable law on the basis of legal obligation. Necessary security, fraud prevention, business-contact administration and legal-claim records rely on legitimate interests, balanced against your rights. Optional marketing or uses requiring consent must be separately requested; submitting a brief does not subscribe you to marketing. We do not make solely automated decisions with legal or similarly significant effects about customers.

Who receives information

Stripe processes checkout and payment information; Mucinly does not collect full card numbers. Resend processes transactional messages, including your order reference and email address. Google Gmail handles correspondence sent to or from mucinly@gmail.com. Vercel hosts the agency website and its order-processing functions. Neon stores the agency's briefs, order records, consent records and delivery status in a separate agency database. Our Stripe account is shared with other Mucinly services; payment-event information, including contact details, payment references, amount and status, may also reach our connected Supabase-hosted payment-notification systems. These services may process technical logs needed to operate and secure their services.

Creative work may require specialist AI or editing providers. Before customer personal data is supplied to a creative provider, we identify that provider and the applicable processing arrangements in the agreed workflow. We share only material needed for the task. We may also disclose information to professional advisers or authorities when lawfully necessary. Submission of a brief does not grant permission to publish your identity, likeness, confidential materials or finished creative in our portfolio.

Creative processing

Creative production may use specialist image-generation, video-generation, synthetic-voice and editing services. The information relevant to these tasks is the supplied product imagery, brand assets, scripts and creative instructions. Do not include customer lists, payment details, passwords or unrelated personal information in production materials. Where an asset contains personal information, such as an identifiable person's image or voice, processing requires the necessary permission and applicable data-protection arrangements. We do not use your permission to create an advertisement as permission to impersonate someone or fabricate a real customer's testimonial.

International processing

Hosting, payment, email and creative-processing services may involve processing outside the European Economic Area. Such transfers require a lawful mechanism, such as an applicable adequacy decision or standard contractual clauses with any necessary supplementary safeguards. Contact mucinly@gmail.com for the recipients and safeguards relevant to your order or to request a copy of applicable safeguards. No clause in these Terms replaces those requirements or reduces your data-protection rights.

Retention

Retention depends on the purpose of the record. Enquiry records are kept while your request and related follow-up remain open. Order and creative records are kept for delivery, support, the agreed revision period and any continuing contractual need. Financial records are retained for the applicable statutory recordkeeping period. Records necessary for an actual or reasonably anticipated dispute may be retained until that dispute and the applicable legal-claim period have ended. Once no contractual, legal or justified claims-related purpose remains, records are deleted or anonymised. Production files are not offered as permanent cloud storage: download your final deliverables and keep your own copy. Contact us to request deletion or information about the retention basis for a particular record; where a legal obligation prevents deletion, we will explain it.

Browser storage and external resources

The order form uses session storage to retain the current basket and brand details within your browser session. It clears that draft after successful submission. The agency pages request fonts from Google Fonts, which receives technical request information such as your IP address. Stripe's hosted checkout operates under its own privacy and cookie information. The agency website does not embed an advertising pixel. Optional advertising measurement or marketing must have its own lawful basis and any required consent; neither a brief nor payment constitutes that consent.

Your rights

Depending on the applicable conditions, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. Where consent is used you may withdraw it without affecting prior lawful processing. Contact mucinly@gmail.com; we may request proportionate information to verify your identity. We respond within the applicable statutory period, generally one month, and explain any lawful extension. You may complain to the Slovak data-protection authority or another competent supervisory authority.