Privacy policy

Table of contents

Last updated: 21.10.2026

1. Overview

This Privacy Policy explains how BillTech Group sp. z o.o. ("DoubleData", "we", "our", "us") collects, uses, discloses, and safeguards personal data when you visit or interact with our website (the "Site") and related online services. DoubleData is a brand of BillTech Group sp. z o.o..

2. Data controller & contact

BillTech Group sp. z o.o. is the controller of your personal data.

Address: ul. Złota 75A/7, 00-819 Warszawa, Poland Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego, KRS 0000681407, NIP 7010698224, REGON 367482813 Email: privacy@doubledata.com

If you have questions about this Policy or your data, contact us at the email above.

3. Scope

This Policy applies to personal data collected through our Site and online forms. It does not apply to data collected offline or via channels other than the Site.

4. Data we collect

  • Data you provide: name, business email, phone number, company, job title, country/region, and the content of messages you send to us (e.g., demo requests, downloads).
  • Data collected automatically: IP address, device and browser type, operating system, referring/exit pages, timestamps, pages viewed, clicks, approximate location (based on IP), and similar technical data. When you view or use one of our forms, Cloudflare Turnstile processes your IP address and other browser signals (such as the browser type and TLS fingerprint) to tell people from bots. Cloudflare also uses these signals to improve its bot detection.
  • Data from third parties: business contact and firmographic information from partners or public sources; campaign/attribution data from analytics and marketing tools.

5. Cookies & tracking technologies

We use cookies, pixels, tags, and similar technologies to:

  • Operate the Site and measure performance
  • Remember preferences (e.g., language, consent choices)
  • Understand usage and improve content
  • Attribute marketing campaigns and measure conversions
  • Personalize communications (where permitted)

Optional cookies (personalization, performance and marketing) stay off until you allow them.

These are the cookies used on the Site:

  • dd_cookie_consent (DoubleData; necessary): remembers your cookie choices. Lifetime: 180 days.
  • __cf_bm (Cloudflare, in the Cal.com booking calendar shown after you contact us; necessary): tells people and bots apart to protect the calendar. Lifetime: 30 minutes without activity.
  • _ga (Google Analytics; performance): distinguishes visitors. Lifetime: 2 years.
  • _ga_<container-id> (Google Analytics; performance): keeps the state of your session. Lifetime: 2 years.
  • Browser-build capture (fp.doubledata.com, our own host; performance): no cookie, sent only with Performance consent. Each page sends one request that records which browser build made it (TLS handshake and HTTP/2 characteristics, plus the IP address the connection carries). Nothing is stored on your device.
  • dd_traffic_source (DoubleData, first party; marketing): remembers how you first reached our site (the referring site, the first page you visited and any campaign tags such as utm_source or gclid in its link), so that a form you send tells us which campaign brought you. We set it only if you accept Marketing cookies and delete it if you refuse or withdraw that consent. Lifetime: 30 days.
  • _gcl_au (Google Ads, through Google Tag Manager; marketing): links visits to our ad campaigns and measures conversions. Lifetime: 90 days.
  • _gcl_aw and _gcl_gs (Google Ads, through Google Tag Manager; marketing): set when you arrive through a Google ad, to credit later conversions to that ad click. Lifetime: 90 days.
  • _twclid and other cookies set by X (X Corp., X ads pixel; marketing): link visits from X ads to actions on the Site and measure campaign results. Lifetime: set by X, see X's cookie policy.

You can manage consent and cookie preferences at any time via Cookie settings in the footer. You may also control cookies in your browser; however, some features may not function properly without certain cookies.

6. Our use of personal data

We use your data to:

  • Provide, operate, secure, and maintain the Site
  • Respond to inquiries, provide requested resources, and manage downloads
  • Analyze Site usage and improve our services and content
  • Run marketing and attribution (e.g., email follow-ups after content downloads, campaign performance) where permitted by law
  • Prevent fraud and abuse, and comply with legal obligations
  • Establish, exercise, or defend legal claims

With your Performance consent, our own host fp.doubledata.com records which browser build loads the Site (see section 5) to keep the browser profiles of our data-collection tooling current; the legal basis is your consent, which you can withdraw at any time in Cookie settings.

We process your personal data based on:

  • Consent (e.g., analytics/marketing cookies, certain email marketing)
  • Contract or steps you ask us to take before a contract, or our legitimate interest in replying to business enquiries (to provide resources or information you requested)
  • Legitimate interests (e.g., Site security, product improvement, B2B marketing, fraud prevention), balanced against your rights
  • Legal obligations (e.g., record-keeping, compliance)

8. Retention

We retain personal data only as long as necessary for the purposes described above, including to comply with legal, accounting, or reporting requirements. Retention periods depend on the data type and context (e.g., inquiry records are kept for a reasonable period after last contact).

9. Sharing & disclosures

We do not sell personal data. We may share personal data with:

  • Service providers/processors: Cloudflare (hosting, content delivery, security, including bot protection on our forms through Cloudflare Turnstile), Google (Tag Manager, Analytics), Postmark (email delivery), Slack (internal notifications), Pipedrive (CRM), our self-hosted workflow automation server (form automation), Cal.com (meeting scheduling).
  • Independent controllers for advertising, with your consent: Google (Google Ads) and X Corp. (X ads pixel).
  • Our group company DoubleData, Inc. (New York, USA), which processes the enquiries you send us through the Site on behalf of BillTech Group sp. z o.o., as our processor.
  • Professional advisers and auditors.
  • Authorities, where required by law or to protect rights and safety.

In case of a business transfer (e.g., merger, acquisition), personal data may be transferred to the new owner under this Policy's terms.

10. International transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (including the United States). For providers certified under the EU-U.S. Data Privacy Framework, we rely on the European Commission's adequacy decision (Implementing Decision (EU) 2023/1795). For other transfers, we use Standard Contractual Clauses approved by the European Commission, with supplementary measures where needed. You can request a copy of the relevant safeguards at privacy@doubledata.com.

11. Your rights

Subject to conditions and exceptions, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data
  • Restrict or object to processing (including direct marketing)
  • Data portability
  • Withdraw consent at any time (without affecting prior lawful processing)

To exercise your rights, contact privacy@doubledata.com. We will respond within one month or as required by law.

If you believe we have not resolved your concern, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland) or with the data protection authority in the country where you live or work.

12. US state privacy rights (incl. California)

Depending on your state, you may have rights to:

  • Know/access categories and specific pieces of personal information collected
  • Delete personal information
  • Correct inaccuracies
  • Opt out of sale/share or targeted advertising (if applicable)

To exercise these rights or submit an authorized agent request, email privacy@doubledata.com. If we "sell" or "share" personal information as defined by applicable law, you can opt out via Cookie settings in the footer or by emailing privacy@doubledata.com. We will not discriminate against you for exercising your rights.

13. Marketing communications

If you opt in (or where permitted by law), we may send you marketing emails. You can unsubscribe at any time via the link in the email or by contacting us. Even if you opt out, we may send non-marketing messages (e.g., transactional or service notices).

14. Security

We implement technical and organizational measures designed to protect personal data from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

15. Children's privacy

Our Site is not intended for children under 13 (or a higher age where required by local law). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to remove it.

The Site may contain links to third-party websites or include third-party tags and scripts (e.g., analytics, attribution). We do not control third-party practices. Please review their privacy policies.

17. Changes to this policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and post the new version on this page. Significant changes may also be communicated by other reasonable means.