Privacy Policy - BondIT Consultancy

BondIT Consultancy ApS ('BondIT', 'we', 'us', or 'our') is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or engage our services. We measure as little as possible, by default anonymously, and ask for explicit consent before loading anything that sets cookies or transmits to a third party.

1. Data Controller

BondIT Consultancy ApS, CVR 43578431, Stagebjerg Alle 29, 6051 Almind, Denmark, is the data controller responsible for your personal data. You can reach us at [email protected].

2. Data We Collect

Two layers of measurement run on this site. The first — anonymous audience measurement via our self-hosted Rybbit analytics — is always on: it counts page views, the referring page, and the country derived from your IP (the IP itself is not stored). No cookies, no fingerprinting, no personal identifiers, no third-party requests. The second — performance diagnostics (Core Web Vitals and JavaScript errors, also via Rybbit) — only loads after you click Accept on the consent banner, and sets no cookies either. When you submit our contact form, the details you enter are sent directly to HubSpot, the CRM we use to handle and follow up on enquiries; no HubSpot tracking script runs on this site. We may also collect contact information you provide through our forms and any correspondence you send us by email.

3. Purpose and Legal Basis

We process your personal data to respond to your enquiries and provide our consultancy services (legitimate interest and contractual necessity), to improve our website and user experience (consent, via the opt-in performance and error diagnostics), and to fulfil legal obligations under Danish and EU law.

4. Cookies

This site sets no cookies, in either measurement tier. Earlier versions used HubSpot tracking cookies when you consented; any still in your browser are deleted on your next visit. Your consent choice is remembered in your browser's local storage under the key `bondit_analytics_consent_v2`; that is not a cookie and is never transmitted to us. If you decline, we re-ask after 30 days so a change of mind is not lost forever; if you accept, the choice persists until you change it via the Cookie settings link in the footer.

5. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Contact form enquiries are retained for a maximum of 3 years. Analytics data is retained in accordance with our analytics provider's standard retention settings.

6. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at www.datatilsynet.dk.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.

8. How to Withdraw Consent

You can change your mind at any time. The footer at the bottom of every page has a Cookie settings link. Clicking it clears your stored choice, downgrades analytics to the anonymous tier, and re-opens the consent banner so you can choose again. Withdrawing consent is — as the GDPR requires — as straightforward as giving it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the date of last update.