Your data and privacy

What we hold about you

It depends on what you use:

• Help centre requests — your name, e-mail address, any company name, the request itself with its messages and attachments, the page you came from, and your IP address for abuse prevention. Kept for 12 months after the request is closed.
• Newsletter and interest updates — your e-mail address, language, chosen interests, the consent you gave (version, time, hashed IP) and the delivery, open and click events of our e-mails. Kept while you are subscribed; events for 13 months.
• A Conphora account — the account data held by our sign-in provider, your organisation, and what you do in the Academy, the tools and the platform.
• Website visits — nothing personal: our statistics are cookieless and aggregated.

The full description, with legal bases and every retention period, is in the Privacy Policy.

How to ask for a copy, a correction or deletion

Send an e-mail to info@conphora.com from the address the data belongs to. Say which of these you want:

1. A copy of the personal data we hold about you (access, GDPR Article 15).
2. A correction of data that is wrong or incomplete (Article 16).
3. Deletion of your data (Article 17). Some data we must keep — for example invoices under bookkeeping law, or the hash of an unsubscribed address so we do not e-mail you again — and we tell you what stays and why.
4. Restriction of a processing, or an objection to a processing based on our legitimate interest (Articles 18 and 21).
5. Portability — your data in a machine-readable format (Article 20).

Writing from the address itself is how we know the request is yours; for an account we may ask you to confirm from the signed-in platform instead. We never ask for a copy of an ID document.

How long an answer takes

We answer within one month of receiving your request. For a complex request the law allows two more months; if we need them, we tell you within the first month and say why. There is no fee.

Quicker routes for common cases

• Newsletter: the unsubscribe link and the preferences page in every e-mail work at once, without writing to us.
• Account: most account data can be changed in the platform under your profile and organisation settings.
• A help centre request: reply in the thread and ask us to delete it; we close and delete it ahead of the normal 12 months.

If you are not satisfied

You can complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk — or to the supervisory authority in the EU country where you live or work. We would also like to hear from you first, at the same address, so we can put it right.

Who is responsible

Conphora ApS, Copenhagen, Denmark (CVR 43489968), is the data controller for the website, the help centre and the newsletter. For data that a customer organisation processes in the platform, the organisation is the controller and Conphora its processor under the data processing agreement in our terms; the processors we use are listed on the Sub-processors page.