Legal

Privacy Policy — Propel Data ApS

Last updated: 19 August 2026

1. Who we are

Propel Data ApS ("Propel", "we", "us", "our") is a data controller for the personal data described in this policy.

We do not have a statutory obligation to appoint a Data Protection Officer, but you can always reach us using the contact details above with any questions about how we handle your personal data.

2. What personal data we collect

We collect different types of personal data depending on how you interact with us:

If you fill in a form on our website (contact, audit request, or similar)

  • Name
  • Work email address
  • Company name and job title
  • Phone number (if provided)
  • Any information you include in a free-text message field

If you register for a webinar or event

  • Name
  • Work email address
  • Company name
  • Ad spend or company-size information provided at registration (where relevant to the webinar topic)
  • Attendance and engagement data (e.g. whether you attended, questions asked)

If you subscribe to our newsletter or content

  • Name (if provided)
  • Email address
  • Engagement data such as opens and clicks, used to understand what content is useful

If you become a client or are otherwise in a sales conversation with us

  • Name, email, phone number, job title, company name
  • Contents of email and call correspondence
  • Contract and billing details, where relevant

We do not currently use analytics, tracking, or non-essential cookies on our website. If this changes in future, we will update this policy and add a cookie consent mechanism before doing so.

We do not knowingly collect special categories of personal data (e.g. health data) through our website.

3. Why we collect it and our legal basis

PurposeLegal basis (GDPR Article 6)
Responding to your contact or audit requestArt. 6(1)(b) — necessary to take steps toward a contract with you, or Art. 6(1)(f) — our legitimate interest in responding to enquiries
Registering you for a webinar and sending related communicationsArt. 6(1)(b) or Art. 6(1)(f) — performing the service you signed up for
Sending you our newsletter or marketing contentArt. 6(1)(a) — your consent, which you can withdraw at any time
Delivering a contracted service (audits, retainers)Art. 6(1)(b) — necessary to perform our contract with you
Invoicing and bookkeepingArt. 6(1)(c) — necessary to comply with the Danish Bookkeeping Act

We only collect the personal data we need for these purposes and do not use it for unrelated purposes without informing you.

4. Who we share your data with

We use a number of service providers ("data processors") to run our business. We have data processing agreements in place with each of them, as required by GDPR. This may include providers of:

  • Email and marketing tools (e.g. MailerLite)
  • CRM and workspace tools (e.g. Notion)
  • Cloud storage and file sharing (e.g. Google Drive)
  • Video conferencing and webinar hosting (e.g. Luma)
  • Website hosting (e.g. Cloudflare)

Some of these providers may be located outside the EU/EEA (commonly the US). Where this is the case, we ensure an appropriate transfer mechanism is in place, such as the European Commission's Standard Contractual Clauses, or that the provider is certified under the EU-US Data Privacy Framework.

We do not sell your personal data. We only disclose it to third parties outside the above where required by law (e.g. to Danish tax authorities) or with your explicit consent.

5. How long we keep your data

  • Contact/audit form enquiries that don't lead to a client relationship: deleted after 12 months of inactivity
  • Webinar registration data: kept for 24 months to allow follow-up, then deleted or anonymised
  • Newsletter subscribers: kept until you unsubscribe or withdraw consent
  • Client and contract data: kept for the duration of the client relationship plus 3 years, and financial records for 5 years as required by the Danish Bookkeeping Act (bogføringsloven)

These are our current retention practices; we review and delete data we no longer need on an ongoing basis.

6. Your rights

Under the GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data, where applicable
  • Restriction — ask us to limit how we use your data
  • Objection — object to our use of your data, including for direct marketing
  • Data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

7. Cookies

We do not currently use analytics or tracking cookies on our website. If we introduce them in future (for example, website analytics), we will update this policy and put a cookie consent mechanism in place beforehand.

8. Changes to this policy

We may update this privacy policy from time to time, for example if we start using a new tool or change how we handle data. We will post the updated version here with a new "last updated" date. If the changes are significant, we will highlight this more prominently, for example via email to newsletter subscribers.