Privacy Policy - BondIT Consultancy

BondIT Consultancy ApS ('BondIT', 'we', 'us', or 'our') is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website or engage our services. We measure as little as possible, by default anonymously, and ask for explicit consent before loading anything that sets cookies or transmits to a third party.

1. Data Controller

BondIT Consultancy ApS, CVR 43578431, Stagebjerg Alle 29, 6051 Almind, Denmark, is the data controller responsible for your personal data. You can reach us at [email protected].

2. Data We Collect

Two layers of measurement run on this site. The first — anonymous audience measurement via our self-hosted Rybbit analytics — is always on: it counts page views, the referring page, and the country derived from your IP (the IP itself is not stored). No cookies, no fingerprinting, no personal identifiers, no third-party requests. The second — performance diagnostics (Core Web Vitals, JavaScript errors via Rybbit) and contact attribution via HubSpot — only loads after you click Accept on the consent banner. HubSpot is a third-party service that sets cookies (hubspotutk, __hssc, __hssrc, __hstc) when active; we use it solely to attribute and follow up on enquiries submitted through our contact form. We may also collect contact information you provide through our forms and any correspondence you send us by email.

3. Purpose and Legal Basis

We process your personal data to respond to your enquiries and provide our consultancy services (legitimate interest and contractual necessity), to improve our website and user experience (consent, via analytics cookies), and to fulfil legal obligations under Danish and EU law.

4. Cookies

The anonymous measurement tier sets no cookies. The enhanced tier — only loaded with your consent — uses HubSpot, which sets the cookies named above to attribute return visits and form submissions. Your consent choice is remembered in your browser's local storage under the key `bondit_analytics_consent_v2`; that is not a cookie and is never transmitted to us. If you decline, we re-ask after 30 days so a change of mind is not lost forever; if you accept, the choice persists until you change it via the Cookie settings link in the footer.

5. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy. Contact form enquiries are retained for a maximum of 3 years. Analytics data is retained in accordance with our analytics provider's standard retention settings.

6. Your Rights

Under GDPR you have the right to access, rectify, erase, restrict, or object to processing of your personal data, and the right to data portability. To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet) at www.datatilsynet.dk.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.

8. How to Withdraw Consent

You can change your mind at any time. The footer at the bottom of every page has a Cookie settings link. Clicking it clears your stored choice, removes HubSpot and its cookies, downgrades analytics to the anonymous tier, and re-opens the consent banner so you can choose again. Withdrawing consent is — as the GDPR requires — as straightforward as giving it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on this page with the date of last update.