Privacy Policy

At Simple, protecting your privacy and personal data is a core priority. This Privacy Policy explains how And Simple ApS collects, uses, discloses, and safeguards personal information when you visit or use our websites, products, and services.

This Privacy Policy applies to online activities only and is valid for visitors to our websites and products hosted on the staging.andsimple.co domain and its subdomains. It does not apply to information collected offline or through channels other than our websites and products.

If you have any questions about this Privacy Policy or our data practices, please contact us.

1. Data Controller

When you use this website or create an account, you interact with:

And Simple ApS
Store Kannikestræde 18a, St
1169 Copenhagen
Denmark

And Simple ApS acts as the data controller for personal data processed under this Privacy Policy.

2. Consent

By using our website or services, you acknowledge that your personal data may be processed as described in this Privacy Policy. Where required by law, we will ask for your explicit consent, particularly in relation to marketing communications and non-essential cookies.

You may withdraw your consent at any time.

3. Legal Basis for Processing

We process personal data under one or more of the following legal bases in accordance with the General Data Protection Regulation (GDPR):

Performance of a contract where processing is necessary to provide our services or manage user accounts
Legitimate interests, such as improving our services, ensuring security, and communicating with users, provided these interests do not override your rights
Legal obligations where processing is required by applicable law
Consent, where you have explicitly agreed to specific processing activities

4. Information We Collect

Information you provide directly

You may provide personal data when you:

Register for an account
Contact us directly
Subscribe to updates or communications

This may include:

Name
Company name
Email address
Telephone number
Address
Message content and attachments
Any other information you choose to provide

Information collected automatically

When you visit our website, we may automatically collect:

IP address
Browser type and version
Device information
Date and time of access
Referring and exit pages
Usage and interaction data

5. How We Use Your Information

We use personal data to:

Provide, operate, and maintain our websites and services
Manage user accounts and customer relationships
Improve, personalize, and expand our products and offerings
Understand how users interact with our platform
Develop new features, services, and functionality
Communicate with you, including customer support and service updates
Send marketing and promotional communications where permitted
Detect, prevent, and address fraud or security issues
Comply with legal and regulatory obligations
Facilitate interactions and share relevant professional information between users and clients as part of our service delivery.

6. Log Files

We use log files as part of standard hosting and analytics practices. Log file data may include IP addresses, browser type, internet service provider, date and time stamps, referring and exit pages, and click counts. This information is used for site administration, analytics, and security purposes and is not used to directly identify individuals.

7. Cookies and Similar Technologies

We use cookies and similar technologies to ensure website functionality, analyze usage, and improve user experience.

Essential cookies are necessary for the website to function
Non-essential cookies such as analytics or marketing cookies are used only where you have provided consent

You can manage or disable cookies through your browser settings or any cookie management tool we provide. Disabling certain cookies may affect website functionality.

8. Third-Party Service Providers

We use trusted third-party service providers to support our operations. These providers may process limited personal data on our behalf under contractual obligations and applicable data protection laws.

We currently use services such as:

Infrastructure & Security: Google Cloud and Kinsta for secure hosting and data storage; Cloudflare for website performance and security.
Customer Relationship Management (CRM) & Marketing: HubSpot and Dripify for managing user relationships, customer support, and outreach.
Payments & Billing: Stripe for secure subscription billing and payment processing.
Compliance & Consent: CookieYes for managing user cookie preferences and maintaining GDPR compliance.
Business Intelligence & Productivity: Notion, and Ahrefs to manage internal operations and service analytics.
AI & Transcription: Fireflies.ai for automated meeting transcription
Accounting: Xero and e-conomic for financial record-keeping and invoicing.

These providers act as data processors and are restricted from using your data for any purpose other than providing services to us.

9. Third-Party Websites and Advertising

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those websites. We recommend reviewing their respective privacy policies for information about their data practices.

We do not control or assume responsibility for third-party cookies or technologies.

10. International Data Transfers

When personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place, including Standard Contractual Clauses or other lawful transfer mechanisms approved under the GDPR.

11. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Account and customer data are retained for the duration of the relationship and a reasonable period thereafter for legal, accounting, and compliance purposes.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include access controls, secure hosting environments, and data minimization practices.

13. Your Data Protection Rights (GDPR)

You have the right to:

Access your personal data
Request correction of inaccurate or incomplete data
Request erasure of your data under certain conditions
Restrict processing under certain conditions
Object to processing under certain conditions
Request data portability

We respond to valid requests within one month.

14. California Consumer Privacy Rights (CCPA)

California residents have the right to request disclosure of the personal information we collect, request deletion of personal information, and object to certain processing activities.

Simple does not sell personal information within the meaning of the CCPA.

Requests can be submitted by contacting us, and we will respond within the required timeframe.

15. Children’s Information

Our services are intended for professionals and are not directed at children. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that such data has been collected, we will take steps to delete it promptly.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. The latest version will always be available on our website.