This privacy policy explains how Grape Bandflower processes personal data on grapebandflower.digital. It follows the data lifecycle from collection and use through disclosure, retention, and deletion, with particular attention to contact requests, site security, and technical delivery.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
When you use the contact form or otherwise reach out to Grape Bandflower, we may process your name, email address, phone number if you provide it, inquiry message, and service preferences. We also process limited technical data such as server request metadata and browser and device information to support delivery, security, and basic site operation.
We receive personal data from the information you enter into forms or send through our service channels. Technical data is generated automatically when you visit the website, including information needed to route requests, maintain security, and keep the site functioning properly.
The website uses essential cookies needed for site operation and cookies that store privacy preferences. Essential cookies help the site load and function as intended, while preference cookies remember your selected settings. No additional cookie purposes are described in this notice unless they are separately enabled and disclosed.
We use essential cookies to support core site functions and privacy preference cookies to remember your choices. Because only limited cookie uses are confirmed, we do not rely on analytics or advertising cookies on the basis of this notice. You can manage cookies through your browser controls, and disabling some cookies may affect site functionality.
We use personal data to respond to inquiries, manage service preferences, maintain the website, support security monitoring, and ensure technical delivery of the pages and forms you use. Where needed, we also use data to keep records of communications, handle follow-up, and meet legal or administrative obligations connected to the service.
We may share personal data with service providers that help us operate the website, deliver technical functions, or process and route contact requests. These recipients may act on our instructions and are expected to use the data only for the services they provide to us. We do not describe any marketing or analytics sharing in this notice unless it is separately enabled and disclosed.
We may disclose personal data to authorities, courts, or other public bodies when required by law, regulation, or a valid legal process. We may also share information where disclosure is necessary to establish, exercise, or defend legal claims, or to protect the security and integrity of the website and its users.
You may have rights to receive information about our processing, access your data, correct inaccurate details, request deletion in appropriate cases, object to certain processing, and ask for restriction or portability where the law provides for it. These rights are exercised through a review process that considers the request, the data involved, and any legal obligations that apply.
To exercise a privacy right, submit a request through one of the contact channels listed in this policy and describe the data or processing activity involved. We will review the request, confirm what information is needed, and respond within the period required by applicable law. If we cannot fully comply, we will explain the reason to the extent permitted.
We keep personal data only for as long as it is needed to respond to inquiries, maintain records connected to the service relationship, protect the website, or meet legal and accounting obligations. When the relevant purpose ends, we delete the data or anonymize it where appropriate, unless a longer retention period is required by law or necessary to resolve a dispute.
If we make material changes to this privacy policy, we will update the notice on the website and, where appropriate, use a reasonable method to draw attention to the change. The version in effect is the one published at the time of your visit, unless a later effective date is stated.
Under the GDPR, personal data must be processed lawfully, fairly, and transparently, and only for specified purposes. We limit processing to the operational, security, and communication needs described in this notice, and we keep data only as long as it remains necessary for those purposes or for legal compliance.
Because Grape Bandflower is based in Denmark and serves users in the European Economic Area, GDPR applies to personal data processed in scope of that regulation.
Where GDPR applies, you may request access, rectification, erasure, restriction, portability, or objection, depending on the legal basis and context of the processing. If consent is used for a specific processing activity, you may withdraw it for future processing. We may need to verify your identity before acting on a request and may retain limited information where required to meet legal obligations or resolve disputes.
Use the listed service channels for privacy questions, requests, or follow-up on a submitted inquiry.
