Privacy
Privacy notice.
Draft notice, last updated November 1, 2026. A lawyer will review it, and we will update this page if anything changes.
Who we are
The data controller for this website is LØFT, CVR number pending, Denmark. Write to us at hello@loeftconsult.com about anything on this page.
What we collect, and why
When you write to us
The contact form sends us your name, work email, company, team size and message. We use them to reply and to prepare a proposal if you ask for one. The legal basis is your consent, which you give with the checkbox on the form (GDPR Article 6(1)(a)). You can withdraw it at any time by writing to us, and we then delete your details. If you ask us for a contract, the work to prepare it rests on steps you ask for before a contract (Article 6(1)(b)). We keep inquiries for up to 12 months after our last contact, unless we start working together.
When you draft a Lift Plan
The role, industry and description you type into the live generator are sent to our AI provider to draft the plan. Don't enter names or other personal data there. We keep the drafted plan for up to 24 hours, so a repeated request gets the same answer without a new AI call. If you ask us to email you the plan, we keep your email address and the plan as an inquiry, on the same basis and for the same time as above.
When you visit the site
Our hosting provider processes your IP address and request details to deliver the pages and protect them from abuse. To limit automated use of the forms and the generator, we keep a one-way hash of your IP address until the end of the hour, so for at most one hour. Our pages set no cookies and store nothing on your device, and we use no analytics and no tracking. Our fonts are served from our own site. The bot check on the forms is described below.
Who processes data for us
- Hosting, email forwarding and bot protection: Cloudflare runs the site and its forms, and it forwards the emails you send us to our inbox. When you use a form, its bot check (Turnstile) collects technical signals from your browser to tell people from automated traffic. Cloudflare also uses those signals to improve Turnstile, as a controller in its own right, as its Turnstile privacy addendum explains.
- Email delivery: Scaleway delivers contact-form messages to our inbox and processes them in the EU.
- Email hosting: the provider that hosts our mailboxes stores the messages we receive.
- AI provider: Anthropic drafts Lift Plans in the live generator. Its commercial data is stored in the United States, and it may process requests in the United States, Europe, Asia and Australia.
We put a data processing agreement in place with each of them. Where data leaves the EU, the transfer relies on the EU-US Data Privacy Framework or the EU standard contractual clauses. If we add a tool for managing customer relationships, we will name it here before we use it.
Your rights
You can ask to see, correct or delete your data, to restrict or object to our use of it, and to receive it in a portable format. Write to the address above. You can also complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk.
Changes
We will update this page if what we collect or who processes it changes.
This notice is general information, not legal advice.