Privacy policy

Who is responsible

Clay Group I/S, based in Denmark, is the data controller for personal information collected through this website and our business enquiries. For privacy questions or to exercise your rights, use our contact email in the footer.

Information you provide

The enquiry form asks for your name, email address, organisation and message. A phone number is optional. You choose whether to contact us; the required fields let us understand your enquiry and reply. The form cannot be submitted without them.

Please keep your message relevant to your enquiry and avoid including sensitive personal data, identity documents or confidential project documents. Project information can be discussed separately with appropriate confidentiality arrangements.

Technical information and spam protection

Our hosting and security services process technical information, such as IP addresses, connection information and security logs, to serve and protect the website.

The contact form also uses temporary hashes of your email address and a technical visitor identifier, which may be your IP address, to limit repeated submissions. These records are kept in server memory for spam checks, rather than in a permanent enquiry database. Your IP address is not included in the enquiry email.

Why we use your information

We use enquiry details to respond, discuss a possible business relationship and maintain relevant correspondence. Our legal basis is our legitimate interest in handling business enquiries under Article 6(1)(f) of the GDPR. We also rely on legitimate interests to protect the website and prevent misuse. Where an enquiry concerns a contract with you personally, steps you request before that contract may rely on Article 6(1)(b).

Sending an enquiry does not subscribe you to marketing. We do not use enquiry details for profiling or automated decisions that have legal or similarly significant effects.

Email delivery and service providers

The website runs on Sites hosting using Cloudflare infrastructure. When you submit the form, our server passes your enquiry to Resend for email delivery to our company mailbox. Resend and our business email provider process the message and contact details so we can receive and reply to your enquiry.

The website does not keep a separate enquiry database or save form details in browser storage. The delivered email remains in our mailbox, and service providers may retain delivery records and technical logs under their applicable terms and settings.

We do not sell enquiry data. We use service providers where necessary to operate the website and handle correspondence. Any wider sharing for a project introduction is discussed separately, unless disclosure is required by law.

International processing

Resend states that its primary processing takes place in the United States. Its data processing agreement includes EU Standard Contractual Clauses for transfers where these safeguards are required. You can read the safeguards using that link.

Hosting and business email services may also process information outside the European Economic Area. You can contact us for further information about the providers handling your enquiry and applicable transfer safeguards.

How long information is kept

Enquiries are kept as email correspondence. Retention depends on whether the enquiry is still being handled, whether it leads to a business relationship, and any applicable legal recordkeeping or claims requirements. Our retention criterion is to keep information only while needed for those purposes. You can ask us about the retention or deletion of your particular enquiry.

The form's spam checks use a ten-minute checking window. Expired in-memory records are cleared on subsequent form activity or when the server instance ends. Provider logs and mailbox copies are handled separately from these temporary records.

Your privacy rights

Depending on the circumstances, you can request access to your information, correction of inaccurate details, deletion, restriction of processing or data portability. You can also object to processing based on legitimate interests. These rights have conditions and exceptions under the GDPR.

Send your request using the contact email in the footer. Please describe the enquiry or information concerned; avoid sending identity documents unless we request information needed to verify your identity. We respond without undue delay and within one month, unless a permitted extension applies. If an extension is needed, we will explain it within that month.

You can complain to Datatilsynet, the Danish Data Protection Agency, or another relevant supervisory authority.

Cookies and tracking

We have not added advertising cookies, visitor analytics, tracking pixels or marketing trackers to the website. The hosting platform may use necessary cookies or similar features for access and security. The contact form does not save your message or contact details in local storage or session storage.

If optional tracking is introduced, the privacy information and any required consent controls must be updated before it is used.

Updates

This notice may be updated as our contact processes or service providers change. The date above identifies the current version.