Privacy policy
How we handle personal data on this website, and which cookies we set. Last updated 14 October 2026.
Who we are
This website is operated by CtrlDocs ApS ("CtrlDocs", "we", "us"), the data controller for the personal data described here.
- CtrlDocs ApS, Vandtårnsvej 62a, 2860 Søborg, Denmark
- CVR 28123981
- Email: sales@ctrldocs.com
What we collect and why
Contact and demo requests. When you send a form on this site we receive the details you enter, typically name, email address, company, phone number and your message. We use them to answer you, arrange a demo or trial, and follow up on your request. Legal basis: our legitimate interest in responding to enquiries, or the steps needed before entering a contract with you. Forms are provided by HubSpot; the submitted data is stored in our HubSpot account.
Spam protection on forms. We have switched on HubSpot's spam protection for our forms. It uses Google reCAPTCHA. When a form comes into view, reCAPTCHA checks technical details, such as your IP address, your browser and how you use the page, to tell people from automated programs. It stores a few items in your browser, and more when you send the form (all listed in the table below). We don't ask for consent for this, because the check is part of the form working securely; if you prefer, email or call us instead. Legal basis for the data: our legitimate interest in keeping automated spam out of our enquiries. Google LLC processes the data as HubSpot's sub-processor, may use it only to run reCAPTCHA and keep it secure, and does not use it for personalised advertising.
Server logs. Our hosting provider records technical data such as IP address, browser type and requested pages to keep the site running securely. Legal basis: legitimate interest in operating a secure website.
Statistics. Only with your consent. Google Analytics 4 and Microsoft Clarity collect usage data such as the pages you view, your device and browser and your approximate location, so we can see how many people visit and improve the site. Clarity also produces heatmaps and session recordings; text you type is masked. Legal basis: your consent.
Marketing. Only with your consent. The HubSpot tracking script recognises returning visitors and connects page visits to a form you send, so that our follow-up is relevant to you. Legal basis: your consent.
Live chat. The chat is provided by HubSpot and appears only after you accept marketing cookies. We use what you write in a chat, and the contact details you choose to share, to answer you. Legal basis: our legitimate interest in answering the questions you send us.
Newsletter. Your name and email address, used to send our newsletter. Legal basis: your consent. You can unsubscribe in any email.
Who receives the data
Processors, who handle data on our behalf: HubSpot (forms, live chat, the newsletter and, with consent, marketing tracking), Google LLC (USA) as HubSpot's sub-processor for the reCAPTCHA spam protection on forms, and our hosting provider. For one thing HubSpot acts on its own account: it counts views of the link to HubSpot that it shows under our forms on its free plan. This happens without consent whenever a form is shown (see HubSpot's privacy policy). Two recipients decide for themselves how they use the data, and receive it only with your consent: Google Ireland Limited (Google Analytics 4) and Microsoft Ireland Operations Limited (Microsoft Clarity; see the Microsoft Privacy Statement). We do not sell personal data. Some of these providers process data in the United States. Where data is transferred outside the EU/EEA, we rely on the EU–US Data Privacy Framework or the EU standard contractual clauses.
How long we keep it
Enquiries are kept for as long as needed to handle them and for a reasonable period afterwards, normally up to two years after the last contact, unless a customer relationship follows. Chat conversations are kept like enquiries. Newsletter data is kept until you unsubscribe. Server logs are kept for a short period for security purposes. Cookie lifetimes are listed in the table above.
Your rights
You may ask for access to your personal data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Where processing rests on consent you may withdraw it at any time. Write to sales@ctrldocs.com. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk.
Changes
We update this policy when our processing changes. The date at the top shows the current version.