This privacy policy covers this website only — asherpa.ai. It explains what happens when you browse our site or fill in our contact form.
Who we are
This privacy policy is issued by:
Asherpa ApS
CVR no. 46435656
Drabæksvej 18, 3450 Allerød, Denmark
For the personal data covered by this policy, Asherpa is the data controller.
For privacy enquiries, contact our Persondataansvarlig (Privacy Lead) Kogulan Kugathasan at kk@asherpa.dk.
What we collect
We are deliberately minimal in what we collect from website visitors.
| What | When | Why |
|---|---|---|
| Name, email, phone, message content | If you contact us via form or email | To respond to your enquiry |
| Anonymised analytics | When you visit any page (only if you accept analytics cookies) | To understand site usage |
| IP address, browser, device type | Server logs, on each request | Security and debugging |
We do not use third-party advertising trackers, social pixels, or behavioural profiling.
Why we process your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries | Art. 6(1)(b) — pre-contractual / contract |
| Website analytics | Art. 6(1)(a) — consent via cookie banner |
| Server logs, security, debugging | Art. 6(1)(f) — legitimate interest |
International transfers
Some of our service providers (such as Netlify) are based in or operate from the United States. Where this applies, we rely on EU-approved transfer mechanisms — primarily Standard Contractual Clauses and, where available, the EU-US Data Privacy Framework — to ensure your data is protected to the standard required by EU law.
How long we keep data
- Contact form submissions — up to 24 months, unless we are in active dialogue with you
- Server logs — 30 days
- Analytics — aggregated and anonymised; raw data retained no longer than necessary
Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Art. 15 AccessRequest a copy of the personal data we hold about you.
- Art. 16 RectificationAsk us to correct inaccurate data.
- Art. 17 ErasureAsk us to delete your personal data.
- Art. 18 RestrictionAsk us to limit how we process your data.
- Art. 20 PortabilityReceive your data in a structured, machine-readable format.
- Art. 21 ObjectionObject to processing based on legitimate interest.
- Art. 7 Withdraw consentWithdraw consent at any time for processing based on consent.
To exercise any of these rights, contact us at kk@asherpa.dk.
You also have the right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby — datatilsynet.dk) if you believe your rights have been infringed.
Security
We apply appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, restricted access to systems on a need-to-know basis, and written confidentiality obligations for all personnel.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects when the current version came into effect. The most recent version is always available at this URL.
Contact
For any questions about this privacy policy or how we handle your personal data, please reach out.
Kogulan Kugathasan
Co-Founder, Asherpa ApS
Drabæksvej 18, 3450 Allerød, Denmark · CVR 46435656