Privacy Policy
Last updated: 21 October 2026
This Privacy Policy explains how TakeOffer (the service available at takeoffer.app, the "Operator", "we") collects, uses, stores and protects personal data of people who use the website. We use the principles of the EU General Data Protection Regulation (GDPR) as a benchmark of good practice for all users, wherever they live. For detailed information on each function and on cookies, see also our document "Personal Data Processing and Cookies".
1. Who is responsible for your data
The controller of personal data is the Operator: TakeOffer, the service at takeoffer.app. You can contact us at [email protected] on any matter relating to your data.
2. What data we collect
We collect only the data needed to run the website and its features:
- Email address, when you sign in to your account with a sign-in link, join the consultation waiting list, confirm a subscription or write to us.
- Waiting list request: the text you write about the help you are looking for.
- Consultant application data: your name, contact details and the information you provide in the "become a consultant" form (for example experience, specialisation and links).
- Test results: your answers and results in free career tests, linked to your account if you are signed in.
- Technical data: IP address, device and browser type, language, pages visited, date and time of visits, and the source from which you arrived.
- Cookies: a language cookie (to_lang), a sign-in session cookie and analytics data. Details are in the document "Personal Data Processing and Cookies".
- Correspondence: the content of messages you send to us and our replies.
We do not ask for sensitive categories of data (health, religion, political views and similar). Please do not include them in free-text fields.
3. Purposes and legal bases
- Consent. Sending emails about the waiting list and service news, including the email sent when consultations launch; non-essential analytics where consent is required. You can withdraw consent at any time.
- Performance of a contract or steps before entering into one. Creating and maintaining your account, sending the sign-in link, saving your test results, processing your consultant application and, in future, providing consultations under separate terms.
- Legitimate interest. Keeping the website secure and preventing abuse, fixing errors, understanding in aggregate how the website is used and improving it, and answering your enquiries. We balance these interests against your rights and stop if your rights prevail.
- Legal obligation. Where the law requires us to keep or disclose certain data.
4. Mailings and double confirmation
When you join the waiting list we send a message asking you to confirm your address. We add you to the mailing only after you confirm (double opt-in). Every email contains an unsubscribe link. Service emails, such as the sign-in link, are not marketing mailings and are sent as long as you use your account.
5. How long we keep data
- Waiting list data: until the consultations launch and you are notified, or until you withdraw consent or ask us to delete it, and in any case no longer than 24 months after your last confirmed activity.
- Account data and test results: while the account exists; deleted on request or after 24 months of inactivity.
- Consultant applications: up to 12 months after the decision, unless you agree to a longer period or an agreement is concluded.
- Technical logs: usually up to 12 months.
- Correspondence: for the time needed to resolve your request and for a reasonable period afterwards.
- Records of consent and unsubscribing: for as long as needed to prove that we respect your choice.
After these periods data is deleted or anonymised.
6. Who receives your data
We do not sell personal data. We share it only with processors and service providers who act on our instructions under written agreements and may use the data only for the agreed purpose:
- an email delivery provider that sends our mailings and service emails;
- hosting and infrastructure providers where the website and its database run;
- analytics providers that help us measure website usage.
We may also disclose data to public authorities where the law requires it, and to professional advisers bound by confidentiality. Your data is stored in a single service database on the Operator's servers, and access to it is restricted to authorised persons.
7. International transfers
Our providers may process data in countries other than the one where you live, including countries that may not offer the same level of data protection. In that case we take steps to protect the data: we choose providers that give contractual guarantees, such as standard contractual clauses, and we share only the data that is necessary. You can ask us for information about the safeguards we use at [email protected].
8. Your rights
Subject to the law that applies to you, you have the right to:
- access your data and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data deleted;
- restrict processing in certain cases;
- object to processing based on legitimate interest;
- receive your data in a structured, commonly used format and transfer it to another service (portability);
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
- lodge a complaint with a data protection supervisory authority, for example in the country where you live or work.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
9. How to unsubscribe and how to delete your data
To unsubscribe, click the unsubscribe link at the bottom of any email. To delete your data, to close your account or to exercise any other right, write to [email protected] from the address you used on the website and say what you need. We may ask you to confirm your identity so that your data is not disclosed to another person. We reply within a reasonable time, and in any case within 30 days; if your request is complex we will tell you about an extension and the reason. Some data may remain in backup copies for a limited period and is deleted as the copies are rotated.
10. Security
We apply technical and organisational measures proportionate to the risk: encrypted connections, restricted and logged access to the database, separation of duties, regular updates and backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach is likely to put your rights at risk, we will notify you and the competent authority as the law requires.
11. Children
The service is not intended for persons under 16. We do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
12. Links to other websites
The website may contain links to third-party websites. We are not responsible for their content or privacy practices; please read their policies.
13. Changes to this policy
We may update this policy, for example when the website gains new functions. The current version is always published on this page with its date. If a change materially affects how we use your data, we will notify you by email or on the website, and where consent is needed we will ask for it again.
14. Contacts
For questions about this policy or your data, write to [email protected].