Legal
Privacy policy
LSK Nordic privacy policy: how we collect, use and protect your personal data under GDPR. Controller details, legal basis, cookies, your rights and contact information.
Who we are
- LSK — Geilargøta 12, 640 Rituvík, Faroe Islands.
- CVR 684732.
- Phone +298 255967 · Email info@lsk-nordic.dk · lsk-nordic.dk
- We are the data controller for the personal data you share with us.
What personal data we collect
- Enquiry form: your name, email address, phone number (optional), business name, industry, what you need, budget range, selected add-ons and your message.
- Client portal: your account email, project details, chat messages, uploaded logos, files, colours and brand preferences.
- Payments: order details such as package, amount and payment status. Card details are entered on our payment provider's own checkout page and never reach our servers.
- Technical data: standard server logs and session information needed to keep you signed in.
Why we process your data and our legal basis
- To answer your enquiry and prepare an offer — based on our legitimate interest and, when you ask us to proceed, the contract we are about to enter.
- To design, build and deliver the website or systems you ordered — necessary to perform our contract with you.
- To communicate with you during the project through the portal — necessary to perform our contract with you.
- To process the deposit and final payment, and to keep required accounting records — necessary to comply with legal obligations.
- To keep the site secure and functioning — based on our legitimate interest.
Who can see your data
- Only the LSK Nordic team working on your project, plus the service providers we need in order to run the service: our hosting and database provider, and our payment provider for the checkout and receipts.
- We share information with authorities only where the law requires it.
How long we keep your data
- Enquiries that do not become projects are kept while they are still relevant, then deleted.
- Project material and messages are kept for as long as we manage or support your website, so we can pick work back up.
- Records tied to invoicing are kept for the retention period required by accounting rules.
Your GDPR rights
- You have the right to access, correct, erase, restrict or object to the processing of your personal data.
- You can ask for a copy of the information we hold about you in a structured, commonly used format.
- You can ask us to close your portal account at any time.
- To make any of these requests, use the contact form or email us at the address above.
Cookies and local storage
- We use only what the site needs to work: a sign-in session for the client portal, an access session for the team panel, and small local values that remember what you have already seen in the portal.
- Cookies are grouped into four categories: strictly necessary, preferences, analytics and marketing. Only the strictly necessary ones are set without your consent.
- We do not use advertising cookies or third-party tracking pixels on this website. Analytics and marketing categories are inactive today and will only ever be used if you have accepted them.
- You can change or withdraw your consent at any time using the Cookies link in the footer of every page.
Security
- We store data in encrypted databases and use secure connections for all site traffic.
- Payment card details are handled entirely by our payment provider on their own secure checkout page.
Changes to this policy
- We may update this policy as our services or the law changes. The latest version is always published here.
Questions about this policy, or a request about your data? Contact us.
