Privacy Policy

1.1Clausebook ApS (Danish company number (CVR): to be confirmed before launch), postal address to be confirmed before launch, Copenhagen, Denmark, is responsible for the personal information handled through clausebook.co. Contact: privacy@clausebook.dk.

1.2As a company in Denmark, we are bound by the EU General Data Protection Regulation (GDPR) in everything we do with personal information (Article 3(1)). Australia’s Privacy Act 1988 reaches a business outside Australia that carries on business here (section 5B), but its Australian Privacy Principles do not bind most small businesses — those with an annual turnover of $3,000,000 or less (sections 6C–6D). We follow those principles all the same, and this policy says what Australian Privacy Principle 1 asks a privacy policy to say.

2.1Document information: the names, addresses and other details you type into a guided set-up. We use them to generate your document. Legal basis under the GDPR: the contract (Article 6(1)(b)). We never ask for a tax file number, a Medicare number, a driver licence or passport number, or a company’s ACN or ABN: where a document needs one, it prints a line to fill in by hand.

2.2Order information: your email address, what you bought and when, the words under the button you pressed at checkout, and your receipts. If you type your email in the checkout and leave before paying, we keep that email and the name of the document you were drafting (clause 3.2). Legal basis: the contract, our legal obligation to keep accounting records under the Danish Bookkeeping Act, and our legitimate interest in seeing which checkouts are left unfinished (Article 6(1)(b), (c) and (f)).

2.3Technical information: your IP address and browser details are handled in server logs and to protect our forms against abuse, and a message sent through the contact form is stored with the sender’s IP address. Our pages load their typefaces from Google Fonts, so your browser also sends your IP address to Google when it fetches them. Legal basis: our legitimate interest in a secure, working service (Article 6(1)(f)). We use no analytics or tracking service.

2.4We do not sell personal information or disclose it for anyone’s benefit. We do not use the contents of your documents for marketing, profiling or training of any kind, and we send no marketing emails: what we send is the confirmation of your order with your receipt, the confirmation of a cancellation and our answers to your messages.

2.5You can read every page of this site without telling us who you are. To buy a document we need an email address to deliver it to, and the details the document itself must contain.

3.1Orders and the documents bought with them: five years from the end of the financial year of the order, because the Danish Bookkeeping Act (section 12) requires us, as a Danish company, to keep our accounting records that long. There is no account to delete: your order link stays valid for the same period, and you can ask us to remove the document itself sooner.

3.2An email typed into the checkout without a purchase is deleted after 30 days; if you complete the purchase, it is removed from that list straight away.

4.1We share personal information only with the processors we need to run the Service, under data processing agreements.

4.2Current processors: payments (Stripe), transactional email (Resend), hosting (Vercel) and database (Supabase, EU region). Your browser also fetches our typefaces from Google Fonts (clause 2.3). An up-to-date list is available on request.

5.1You can ask for a copy of the personal information we hold about you and have it corrected; you can also have it erased, restricted or sent to you in a portable form, or object to our use of it (GDPR, Articles 15–21). Write to privacy@clausebook.dk: we answer within one month, free of charge (Article 12(3)).

5.2If you think we have handled your information wrongly, complain to us first, in writing, at privacy@clausebook.dk: we answer within 30 days and tell you what we will do about it. Because we are a Danish company, you can also complain to Datatilsynet, the Danish Data Protection Agency (GDPR, Article 77). The Office of the Australian Information Commissioner takes complaints about businesses the Privacy Act binds.

6.1Personal information you give us leaves Australia: it is stored in the European Union. Where a processor transfers it to a country outside the European Economic Area, we rely on an adequacy decision of the European Commission or on standard data protection clauses (GDPR, Articles 45 and 46). Ask us, and we tell you which countries our processors use.