Privacy
Privacy Policy.
This policy explains how ShadowThread handles personal data when you visit the website, contact us or discuss a potential engagement.
Controller
The data controller is Damian Soubeste, sole trader (OSVČ), operating under the ShadowThread brand.
- Registered address
- Rybalkova 177/43, 101 00 Praha 10 – Vršovice, Czech Republic
- Business ID (IČO)
- 21243000
- hello@shadowthread.net
What data we process
- Contact and business information you provide, such as your name, email, company, role and preferred language.
- Information you choose to provide about a process, problem, systems, requirements or potential project.
- Communications and follow-up connected with your enquiry or engagement.
- Basic technical and security data generated when the website is delivered.
- Website analytics identifiers and usage data only where you have accepted analytics cookies.
Why we process it
| Purpose | Legal basis |
|---|---|
| Responding to enquiries, arranging discovery and taking steps toward a potential contract | Steps requested before entering into a contract where applicable; otherwise our legitimate interest in responding to genuine business enquiries |
| Managing prospect and client communication, CRM records and operational follow-up | Legitimate interests in running and documenting our B2B operations |
| Providing contracted services and managing delivery | Performance of a contract and related legitimate interests |
| Website analytics | Your consent. Google Analytics is not loaded unless analytics consent is granted. |
| Legal, accounting and compliance records | Compliance with legal obligations and, where relevant, establishment or defence of legal claims |
Service providers
We use a small number of service providers to operate ShadowThread. Depending on the interaction, personal data may be processed by:
- Airtable — website intake forms and internal CRM/operational records.
- Google Workspace — business email and communication.
- Google Analytics — website measurement, only after analytics consent.
- Cloudflare — website hosting, delivery, security and technical logs.
- n8n — workflow automation used to route or process operational information where relevant.
Some providers may process data outside the European Economic Area depending on service configuration. Where required, those transfers are handled using the safeguards made available by the relevant provider, such as standard contractual clauses or other lawful transfer mechanisms.
Retention
Enquiry and prospect records that do not become an active client relationship are generally retained for up to 24 months after the last meaningful interaction, unless a shorter period is appropriate or a longer period is required for legal claims or compliance.
Client, contractual, invoicing and accounting records may be kept for longer where required by Czech law or needed to establish, exercise or defend legal rights. Analytics data is retained according to the settings configured in the Google Analytics property and only for as long as needed for website measurement.
Your rights
Subject to the conditions in applicable data-protection law, you may request access, correction, deletion, restriction or portability of your personal data, and you may object to processing based on legitimate interests. Where processing is based on consent, you can withdraw that consent at any time without affecting earlier lawful processing.
To exercise a right, contact hello@shadowthread.net. You may also lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
Cookies and analytics
Non-essential analytics and marketing technologies are disabled until you choose to enable them. You can change your choice at any time using “Cookie settings” in the footer. See the Cookie Policy for details.
Last updated: 27 September 2026.