Privacy notice

HortPass is operated by Contenza K/S, Holmgade 8, 6430 Nordborg, Denmark (CVR 43349023). We are the data controller for the personal data described here.

What we collect

• Your email address, to sign you in and send your receipts.
• Purchase records (what you bought, when, and the amount). Card details are handled by Stripe and never reach us.
• Your course progress and answers, so you can pick up where you left off.
• Messages you send through the help form.

Why, and our lawful basis

To provide the course you bought (contract), to keep financial records (legal obligation), and to keep the service secure (legitimate interests). We do not sell your data and we don't use advertising trackers.

Who processes it for us

• Stripe: payments.
• Resend: sign-in and receipt emails (EU region).
• Hetzner: hosting for the site and our analytics server (EU data centres).
• Cloudflare: the security check on the sign-in page (Turnstile), which confirms you are a person. It sees technical details such as your IP address and browser, and isn't used for advertising.

Our social media pages

We publish study posts on our Facebook Page, on Instagram (@hortpass_uk) and on Pinterest. We use our own publishing app, connected to our own accounts only, to schedule and post that content. It doesn't collect or store information about the people who see, like, comment on or share our posts, and it doesn't use Facebook or Instagram to sign anyone in.

If you follow us, comment or send us a message on those platforms, Meta (for Facebook and Instagram) and Pinterest process that data under their own privacy policies. We only see what the platform shows the account owner, and we use it only to reply to you. Links in our posts carry a campaign tag (for example utm_source=facebook) so our anonymous visit totals show which posts are useful. The tag identifies the post, not you.

Deleting your data

Our publishing app stores no personal data from Facebook, Instagram or Pinterest users, so there is nothing held by the app to delete. If you'd like us to delete a message or comment you sent us on social media, or any other data we hold about you, send us a message on our Facebook Page or Instagram, or use the help form in your account. We will confirm once it's done, within one month. You can also delete your own comments and messages on those platforms at any time.

Cookies and analytics

We use one essential cookie to keep you signed in. To count visits we use Plausible Analytics, which we run on our own server in the EU: it uses no cookies, doesn't track you across sites and stores no personal data, only anonymous totals such as page views and referring sites. We don't use advertising cookies or trackers, so no cookie banner is needed.

How long we keep it

Account and progress data for as long as your account is active plus 12 months; purchase records for 5 years from the end of the financial year, as required by Danish bookkeeping law.

Your rights

You can ask for a copy of your data, or for it to be corrected or deleted, through the help form in your account. You can also complain to a data protection authority: in Denmark, Datatilsynet (datatilsynet.dk); in the UK, the Information Commissioner's Office (ico.org.uk).