Legal
Privacy Policy
Last updated: 17 August 2026
Draft — not yet ready to publish. This page is still missing the registered company name and CVR number, and should be reviewed by a Danish lawyer or advisor before it is legally binding.
This Privacy Policy explains how ACLA Development ("ACLA Development", "we", "us") collects and uses personal data when you visit our website (acla-development.com) or contact us about our services. We handle your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).
1. Who we are (Data Controller)
The data controller responsible for your personal data is:
- ACLA Development
- Email: contact@acla-development.com
If you have any questions about this policy or how we handle your data, contact us at the email above.
2. What personal data we collect
We collect personal data in the following situations:
When you contact us or request a quote — through our contact form, by email, or by phone — we collect:
- Your name
- Your email address
- Your phone number (if provided)
- What you're interested in (a website, AI automation, or both)
- The content of your message and any details you share about your project
When you visit our website, limited technical data is collected automatically, such as:
- IP address
- Browser type and device information
- Pages viewed
- Referring website
This technical data is processed only by Cloudflare, our hosting provider, in the server and security logs needed to deliver the site and protect it from abuse. We run no analytics of any kind, and we do not build profiles of visitors or track you across sites. See our Cookie Notice for what is stored in your browser — which is no cookies at all.
We do not intentionally collect any special categories of sensitive personal data (such as health, religion, or political views) through our website.
3. Why we use your data and our legal basis
Under GDPR we must have a lawful basis for each use of your data. Ours are:
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiry and preparing a quote | Steps taken at your request prior to entering a contract (Art. 6(1)(b)), and our legitimate interest in responding to enquiries (Art. 6(1)(f)) |
| Providing our services once you become a client | Performance of a contract (Art. 6(1)(b)) |
| Sending you information you asked for | Consent (Art. 6(1)(a)) |
| Analytics and understanding website usage | Consent (Art. 6(1)(a)) — not applicable today, as we use no analytics tools |
| Keeping records and meeting legal/accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Securing our website and preventing fraud/abuse | Legitimate interest (Art. 6(1)(f)) |
4. Who we share your data with
We do not sell your personal data. We currently use no analytics, chatbot, or CRM tools. We share data only with the service providers that help us run the site and respond to enquiries:
- Website hosting / infrastructure: Cloudflare Pages
- Contact form delivery: Web3Forms (web3forms.com) — delivers messages submitted via our contact form
We host our own typefaces on this site rather than loading them from a third party, so viewing the site does not disclose your IP address to a font provider.
Each of these providers processes data on our behalf under a data processing agreement. We'll update this list whenever we add a new tool.
We may also disclose data where required by law or to a public authority.
5. International transfers
Our contact form provider (Web3Forms) is based outside the EU/EEA, in the United States. This means the details you send us through the contact form are transferred there. Where this happens, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses or an adequacy decision, so your data receives an equivalent level of protection.
6. How long we keep your data
- Enquiries that don't become projects: up to 12 months, then deleted.
- Client records and correspondence: for the duration of our engagement and afterwards as required by Danish accounting law (generally 5 years from the end of the relevant financial year).
7. Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten"), where applicable
- Restrict or object to our processing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent (this does not affect processing done before withdrawal)
To exercise any of these rights, email us at contact@acla-development.com. We will respond within one month.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we have mishandled your data: www.datatilsynet.dk, Carl Jacobsens Vej 35, 2500 Valby, Denmark.
8. How we protect your data
We take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access — including secure hosting, restricted access, and encryption in transit (HTTPS). No system is perfectly secure, but we work to keep your data safe.
9. Cookies
Our website sets no cookies. It uses two strictly necessary entries in your browser's session storage, which are cleared when you close the tab. Please see our Cookie Notice for full details.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows the latest version. Significant changes will be highlighted on our website.
11. Contact
Questions about this policy or your data? Contact us at contact@acla-development.com.