Privacy Policy

Last updated: June 2026

This policy explains how ConsultingXYZ collects and processes personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

The data controller responsible for your personal data is ConsultingXYZ, based in Copenhagen, Denmark. For any privacy-related matter you can reach us at martin@ewrything.com.

2. Information We Collect

We collect only the information you provide to us directly. When you submit our contact form or pricing configurator, we collect your name, email address, and optionally your company name, phone number, the message you write, and the configurator selections you make. We do not buy personal data or collect it from third parties.

3. How We Use Your Information

We use this information solely to respond to your inquiry, prepare a project quote, and communicate with you about a potential or ongoing engagement. We do not use it for advertising and we do not sell or share it for marketing purposes.

4. Legal Basis for Processing

We process your contact-form data on the basis of your consent (GDPR Art. 6(1)(a)) and our legitimate interest in responding to business inquiries (Art. 6(1)(f)). Where we enter into a contract with you, processing is also based on the performance of that contract (Art. 6(1)(b)).

5. Data Retention

We keep inquiry data only as long as needed to handle your request and any resulting engagement, and no longer than 24 months after our last contact unless a longer period is required by law (e.g. bookkeeping obligations) or to manage an active project. You may ask us to delete your data sooner at any time.

6. Data Storage, Security & International Transfers

Your data is stored securely with encryption in transit and at rest. We use Supabase (database) and Vercel (hosting); where these providers process data outside the EU/EEA, they do so under appropriate safeguards such as the EU Standard Contractual Clauses.

7. Third-Party Services

We rely on the following processors: Supabase (database), Vercel (hosting and analytics), and Resend (transactional email). Each acts on our instructions and has its own privacy terms governing the data they process on our behalf.

8. Cookies & Analytics

We use essential cookies for theme preferences and, where applicable, authentication. We use privacy-friendly, aggregate analytics (Vercel Analytics) to understand site usage; this does not use advertising cookies or build profiles of individual visitors.

9. Your Rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these rights, contact us at martin@ewrything.com and we will respond within one month.

10. Right to Complain

If you believe we have handled your personal data improperly, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

11. Contact

For any questions about this policy or your data, contact us at martin@ewrything.com.