Privacy policy

Last updated: 30 October 2026

Who we are

This website is run by OpFinQ [legal name and company form], CVR [number], [address], Denmark (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us at finops@opfinq.com.

What we collect

Messages you send us. If you use the contact form or email us, we receive your name, work email, company and message, plus anything else you choose to include.
Technical data. Our hosting provider processes your IP address and basic request details, such as the page, browser and time, to deliver the site and keep it secure. We do not use this to identify you.
Cookies. This site does not set cookies for analytics or marketing, and it has no tracking or advertising tools. The fonts are served from our own site, so your browser does not contact Google or other font services.

Why we use it and our legal basis

To reply to your enquiry and, if you ask for it, to prepare a proposal. The basis is our legitimate interest in answering business enquiries and steps taken at your request before a contract (GDPR Article 6(1)(f) and 6(1)(b)).
To run and secure the website. The basis is our legitimate interest (Article 6(1)(f)).
To meet legal duties, such as bookkeeping if you become a client (Article 6(1)(c)).

We do not send marketing emails unless you have asked for them, and we do not sell personal data.

Who we share it with

We use a few service providers that handle data on our behalf:

Web3Forms delivers contact form messages to our inbox. [Confirm the operator, location and data processing terms before launch.]
Cloudflare provides hosting, DNS and email forwarding for opfinq.com.
Google (Gmail) receives and stores the emails forwarded to us. [Update if you change mailbox provider.]

We may also disclose data where the law requires it.

Transfers outside the EU and EEA

Some of these providers are based in, or process data in, countries outside the EU and EEA, such as the United States and India. Where this happens we rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. [Confirm the mechanism for each provider before launch.]

How long we keep it

Enquiries that do not lead to a project: deleted after 12 months.
If you become a client: kept for the engagement and for as long as bookkeeping law requires, currently five years after the end of the financial year [verify].
Technical logs: kept by the hosting provider for short periods only.

Your rights

Under the GDPR you can ask us for access to your personal data, and for it to be corrected or deleted. You can also ask us to restrict how we use it, object to processing based on our legitimate interest, and, where it applies, ask for a copy in a portable format. Write to finops@opfinq.com and we will reply within one month.

If you are unhappy with how we handle your data, you can complain to Datatilsynet, the Danish Data Protection Agency.

Security

The site and the contact form use encrypted connections (HTTPS). Access to our mailbox is limited to us.

Changes

We may update this policy from time to time. The date at the top shows the latest version.