In short: we only collect what we need to answer your enquiry and build your website, we never sell your data, and you can ask us to access or delete it at any time.
01Who we are
This Privacy Policy explains how LVL Gruppen (“LVLGRUPPEN”, “we”, “us”) collects, uses and protects personal data when you visit lvlgruppen.com, contact us, or buy our website design, hosting and support services.
We are a web design company based in Denmark and we are the data controller for the personal data described in this policy. We have not appointed a Data Protection Officer because the law does not require one for our activities. For any privacy question, write to info@lvlgruppen.com.
- Company: LVL Gruppen
- Company registration (CVR): 43855492
- VAT number: DK43855492
- Address: Søborg Hovedgade 38, 2860 Søborg, Denmark
- Email: info@lvlgruppen.com
- Phone: +45 71 58 19 30 (Denmark) · +1 478 780 6517 (USA)
02What personal data we collect
We only collect what we need. Depending on how you deal with us, this can include:
| Category | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, email address, phone number, business or website name | You, when you fill in our contact form, email us or call us |
| Project information | Business description, logos, photos, copy, login details you choose to share, feedback and approvals | You, when we build or maintain your website |
| Billing information | Billing name and address, VAT or tax number, invoice and payment records. We do not store full card numbers. | You and our payment provider |
| Communications | Emails, messages and notes from calls with us | You and us |
| Technical data | IP address, browser and device type, pages viewed, date and time, referring page | Automatically, through our website and hosting servers |
| Advertising and campaign data | Which ad, campaign or source brought you to our site (for example UTM parameters and ad click identifiers), and whether you submitted a form | Your browser and the advertising platform, when you arrive from one of our ads |
| Cookie data | Cookie identifiers and preferences (see section 9) | Your browser |
We do not knowingly collect special categories of personal data (for example health or biometric data). Please do not send us such data.
03How and why we use your data
We process personal data only when we have a legal basis under the EU General Data Protection Regulation (GDPR):
| Purpose | Legal basis (GDPR) |
|---|---|
| Reply to your enquiry, prepare your website mockup and book a call | Taking steps at your request before a contract (Art. 6(1)(b)); our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Deliver, host, maintain and support your website; manage the contract | Performance of a contract (Art. 6(1)(b)) |
| Send invoices, keep accounts and meet tax and bookkeeping duties | Legal obligation (Art. 6(1)(c)) |
| Send you automatic confirmation emails about your request | Performance of a contract / pre-contract steps (Art. 6(1)(b)) |
| Send marketing emails or newsletters | Your consent (Art. 6(1)(a)) or, for existing business customers where the law allows, our legitimate interest. You can opt out at any time. |
| Keep our website and systems secure, prevent fraud and spam, and improve our services | Legitimate interest (Art. 6(1)(f)) |
| Analytics and non-essential cookies, if enabled | Your consent (Art. 6(1)(a)) |
| Measure how well our ads work and show our ads to people who visited our site (conversion tracking and remarketing), if enabled | Your consent (Art. 6(1)(a)). We only load these tags after you accept marketing cookies. |
| Establish, exercise or defend legal claims | Legitimate interest (Art. 6(1)(f)) |
Contact by phone, email or text. When you send us your phone number or email address through our form, you ask us to contact you about your request, and we may do so by phone call, text message or email. We use your details for that purpose only. Message and data rates may apply, and you can reply STOP to any text or ask us to stop contacting you at any time.
We do not sell your personal data, and we do not use it for automated decision-making or profiling that has legal effects on you.
Our legitimate interests
Where we rely on legitimate interest (Art. 6(1)(f)), our interests are: answering business enquiries quickly, keeping our website and systems secure, preventing spam and fraud, running and improving our business, and defending legal claims. We balance these against your rights and expectations, and we only process what is necessary. You can object to this processing at any time (see section 7), and you can ask us for a summary of our balancing assessment.
Do you have to give us your data?
When you use our contact form we need your name, email address and phone number so that we can reply. If you do not provide them, we cannot respond to your enquiry. All other details are optional. If you become a client, we need your contact and billing details to make the contract and to meet our legal bookkeeping duties.
04Who we share your data with
We share personal data only with trusted providers who help us run our business, and only as far as needed. These are typically:
- Hosting, domain and website infrastructure providers (currently Hostinger) that run our own site and the websites we host for clients.
- Form and email delivery services (such as Resend) that deliver contact-form submissions to our inbox and send you an automatic confirmation email.
- Advertising platforms (such as Meta and Google), only if you accept marketing cookies. See section 10.
- Email, cloud storage and communication tools we use to manage projects and talk to clients.
- Payment providers and accountants who process payments and help us meet our accounting duties.
- Google services such as Google Fonts and Google Maps, if loaded on our pages (see section 9).
- Professional advisers, authorities or courts when we are legally required to, or need to protect our rights.
These providers act on our instructions under data processing terms, or as independent controllers under their own privacy policies. If our business is ever sold or merged, your data may be transferred to the new owner on the same terms as this policy.
05Transfers outside the EU/EEA
Some of our providers are located, or process data, outside the European Economic Area, including in the United States. Where this happens we make sure your data is protected by an approved safeguard, such as an adequacy decision (for example the EU-US Data Privacy Framework), the European Commission’s Standard Contractual Clauses, or another transfer mechanism allowed by GDPR. You can ask us for a copy of the safeguards by emailing info@lvlgruppen.com.
06How long we keep your data
| Data | Retention |
|---|---|
| Enquiries that do not become a project | Up to 24 months after our last contact, then deleted |
| Client contracts, project files and communications | For the length of the service and up to 3 years afterwards to handle questions and claims |
| Invoices and accounting records | 5 years after the end of the financial year, as required by the Danish Bookkeeping Act |
| Marketing consent records and opt-outs | Until you withdraw consent, plus a short period to prove we honoured your choice |
| Server and security logs | Up to 12 months |
When the retention period ends we delete or anonymise the data. If the law requires us to keep something longer, we keep it only for that purpose.
07Your rights
Under GDPR, and similar laws such as the California Consumer Privacy Act (CCPA) for US residents, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct data that is inaccurate or incomplete.
- Delete your data (“right to be forgotten”), unless we must keep it by law.
- Restrict or object to our processing, including direct marketing.
- Data portability: receive your data in a common, machine-readable format.
- Withdraw consent at any time, without affecting processing done before.
- Object to direct marketing at any time and free of charge. We will stop right away.
- Not be discriminated against for using your privacy rights (US residents).
To use any of these rights, email info@lvlgruppen.com. It is free of charge, although we may charge a reasonable fee or refuse a request that is clearly unfounded or excessive. We may need to verify your identity first, and we will reply within one month (or 45 days for US residents, extendable where the law allows).
Complaints. If you are not happy with how we handle your data, please contact us first. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet), or to the data protection authority in your own country.
US residents. We do not sell or “share” personal information as those terms are defined in the CCPA, and we have not done so in the past 12 months.
08Websites we build for you
When we build or host a website for a client, the client decides what personal data its own website collects from its visitors (for example through quote forms), and the client is the data controller for that data. In that case LVLGRUPPEN acts as a processor and handles the data only on the client’s instructions. Clients who need a data processing agreement can request one at info@lvlgruppen.com.
Clients are responsible for adding their own privacy policy and cookie notice to their website. We are happy to help with this on request.
09Cookies and similar technologies
Cookies are small files stored on your device. Our website uses:
- Strictly necessary cookies and storage that keep the site secure and working. These do not need consent.
- Analytics and marketing cookies, including advertising pixels only if we switch them on, and only after you accept them in our cookie banner. You can change your choice at any time through the cookie settings, and you can also block or delete cookies in your browser.
Our pages may load fonts from Google Fonts and map content from Google Maps. When this happens your IP address is sent to Google so the content can be delivered. See Google’s Privacy Policy.
10Advertising and our landing pages
We advertise our services online, for example on Meta (Facebook and Instagram) and Google. When you click one of our ads and land on our website, we may receive information about which ad or campaign brought you (for example campaign parameters in the link), and we record whether you submitted our form.
If you accept marketing cookies, our advertising partners may place a pixel or tag on our pages to measure results and to show our ads to people who visited our site. The advertising platform may process this data as an independent controller, or together with us, under its own privacy policy. We load these tags only after you consent, and you can withdraw consent at any time through the cookie settings.
We do not send your name, email address or phone number to advertising platforms. Details you enter in our form are used only as described in sections 2 to 6.
You can also control ads you see through the platforms themselves, for example Meta ad preferences and Google ad settings.
11Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, regular backups and software updates. No system is completely secure, so we cannot guarantee absolute security. If a data breach is likely to put your rights at risk, we will notify you and the authorities as required by law, within 72 hours where GDPR applies.
12Children
Our services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, please contact us and we will delete it.
13Third-party links
Our website may link to other websites, such as our social media pages. We do not control those sites and are not responsible for their privacy practices. Please read their policies before sharing personal data.
14Changes to this policy
We may update this policy from time to time, for example when our services or the law change. The latest version is always on this page with the “last updated” date shown at the top. If we make material changes, we will take reasonable steps to tell you, for example by email or a notice on our website.
15Contact us
Questions about this policy or your personal data? We are happy to help.
- Email: info@lvlgruppen.com
- Phone: +45 71 58 19 30 or +1 478 780 6517
- Post: LVL Gruppen, Søborg Hovedgade 38, 2860 Søborg, Denmark
Questions about your data? Send us a message and we will reply within 24 hours.
Email us