Privacy policy

14 October 2026

Who we are

This website (mash.agency) is run by M.Marketing Mariia Orishko (“Mash”, “we”, “us”), ul. Piłsudskiego 38, 09-210 Drobin, Poland, NIP (VAT EU): PL7761701406. We are the controller of the personal data described below.

Questions about your data: maria@mash.agency.

What we collect

Project form: what you are working on, a link to your business (optional), your name, your preferred channel and contact (email, WhatsApp or Telegram).

Career form: your name, Telegram, Instagram (optional), specialty, portfolio and CV (as a link or an uploaded file).

We don’t use analytics, advertising pixels or tracking cookies on this website.

Why we use it

To reply to your enquiry and prepare a proposal — the legal basis is the steps you ask us to take before entering into a contract (Art. 6(1)(b) GDPR).

To review your job application — the same basis, or your consent where it is required.

We don’t sell your data and don’t use it for automated decision-making.

Who processes it for us

Vercel Inc. — hosts the website and processes form submissions.

Resend — delivers form submissions to our inbox by email.

Our email provider — stores the messages in our mailbox.

YouTube (Google) — only when you press play on a video; see the Cookie policy.

Some of these providers are located outside the EEA; transfers are covered by the EU Standard Contractual Clauses or an adequacy decision.

How long we keep it

Enquiries: as long as we are in touch and up to 2 years after the last contact.

Job applications: up to 12 months, unless you ask us to delete them earlier.

Your rights

You can ask for access to your data, a correction, deletion, restriction of processing, data portability, or object to processing. Where we rely on consent, you can withdraw it at any time.

Write to maria@mash.agency. You also have the right to lodge a complaint with a data protection authority (in Poland: the President of the Personal Data Protection Office, UODO).