Privacy policy

1. Introduction

Ghorin operates a marketing website with a single contact form. We don't run a backend that stores personal data, we don't use analytics or tracking cookies, and we don't have user accounts. This policy explains the only places personal data does pass through the site, and how it's handled in line with the EU General Data Protection Regulation (GDPR).

2. What we receive when you contact us

• Name (required, you provide it)
• Work email address (required, you provide it)
• Type of work you're asking about (required)
• Timeline (optional)
• Free-text message (optional, you provide it)

3. How that data flows

When you submit the contact form, the information is sent to a small serverless function that immediately forwards it to our inbox via Resend (an email delivery provider). Nothing is written to a database. Once the email arrives, the data lives in our standard email account, like any other email you would send us directly.

4. Why we process it

We use the data only to reply to your inquiry and evaluate whether we're a good fit to work together. Legal basis: legitimate interest (Article 6(1)(f) GDPR) and, where you ask us to take steps before entering an agreement, contractual necessity (Article 6(1)(b) GDPR).

5. Sub-processors we rely on

• Vercel — hosts the website and the contact-form function (the host's standard request logs include IP address and browser metadata, retained per Vercel's policy).
• Resend — delivers the contact-form email to our inbox.
• Standard email infrastructure — once the email lands, it sits in our inbox until we delete it.

6. Cookies and tracking

This site sets no analytics cookies, no marketing cookies, and no tracking pixels. If that ever changes, this policy will be updated first and a clear notice shown on the site.

7. Retention

Email inquiries are kept while we're still in conversation, and for a reasonable period afterwards in case you come back. If you'd like your message and our reply deleted, ask us and we'll do it.

8. Sharing

We don't sell, trade, or share personal data with anyone other than the sub-processors listed in section 5, all of whom act under GDPR-aligned terms.

9. Your rights

Under GDPR, you can access, correct, delete, or restrict processing of your data. Email us and we'll handle it. You can also lodge a complaint with Datatilsynet (the Danish Data Protection Agency).

10. Contact

For privacy-related questions, email contact@ghorin.com.