Privacy

Blasfame is a marketing business registered in Denmark. We are the data controller for the personal data described in this policy.

You can contact us about anything in this policy at hello@blasfame.com.

We are not required to appoint a data protection officer. Privacy questions are handled by the owner of the business.

Contact details. Your name, business name, email address, and phone number if you give us one.

Billing details. Your billing address, VAT number where you have one, and a record of what you bought and when. We do not receive or store your full card number.

Correspondence. The emails you send us and our replies, including anything you attach.

Material you send us for a job. Pages, prices, plans, figures, brand material, and occasionally a mailing list or a file containing customer records.

Access to your accounts. Where a job requires it, an invitation to your advertising account, analytics property, tag manager, website editor, business profile or email tool.

Technical data. Our host, Vercel, records standard server logs when a page is requested, including IP address, timestamp, the page requested, browser user agent and response code. These are used to serve the site and protect it from abuse, and we do not use them to identify individual visitors.

To answer your enquiry and quote for work. Our basis is taking steps at your request before entering a contract.

To deliver the job you bought, and to support it afterwards. Our basis is performance of our contract with you.

To take payment and issue invoices. Our basis is performance of our contract, and compliance with a legal obligation for the accounting record itself.

To keep our website available, secure and functioning. Our basis is our legitimate interest in operating the site.

To meet our legal and tax obligations. Our basis is compliance with a legal obligation.

We do not use your data for marketing to you, we do not build advertising profiles, and we do not sell personal data.

We do not use advertising cookies, analytics cookies or tracking pixels, and we do not operate a consent banner because we do not set cookies that require consent.

Your light or dark display preference is saved in your browser's local storage so the site renders the way you chose on your next visit. It stays on your device and is not transmitted to us.

You can clear it at any time by clearing site data for blasfame.com in your browser.

We do not run analytics software, session recording, heat mapping or visitor fingerprinting on our website.

Where a job involves analytics on your own property, that data belongs to you, sits in your own account, and is governed by your agreement with that provider.

Payments are processed by Stripe Payments Europe, Ltd. Your card details are entered directly with Stripe and are handled under their PCI DSS certification.

We receive confirmation that a payment succeeded, the amount, the date, the last four digits of the card and the billing details needed to issue your invoice. We never receive your full card number, expiry date or security code.

Stripe acts as an independent controller for fraud prevention and for meeting its own regulatory obligations, and applies its own privacy policy to that processing. You can read it at stripe.com/privacy.

Invoices are issued and stored in e-conomic, our accounting system, supplied by Visma e-conomic A/S in Denmark.

Most jobs are carried out inside your own systems rather than by copying your data into ours. We are added as a user on the account and removed when the job is delivered.

Where a job involves personal data belonging to your customers, you are the controller of that data and we act as your processor. We process it only on your documented instructions.

We will enter into a written data processing agreement on request, and we will not engage a new sub-processor for your data without telling you.

Please send us only the data a job actually needs. If you send us more than that, we will tell you and delete the excess.

Vercel Inc., United States. Hosts blasfame.com and records the server logs described above.

Google Ireland Limited, Ireland. Google Workspace provides our email, calendar and file storage, so your correspondence and any files you send us are held there.

Stripe Payments Europe, Ltd., Ireland. Processes card payments and holds the payment record.

Visma e-conomic A/S, Denmark. Our accounting system, holding invoices and billing details.

AgileBits Inc., Canada. 1Password stores the credentials we use to reach the accounts we are invited into.

Each of these is bound by a data processing agreement and may use the data only to provide its service to us. We will tell you before we add a new provider that handles client data.

We also share data with the advertising, analytics and email platforms used for your job. Those are your own accounts under your own agreement with those platforms, and we act inside them as an invited user.

We will disclose data to a professional adviser or a public authority where we are legally required to. We do not share personal data with anyone else and we do not disclose it for anyone else's marketing.

Google Ireland, Stripe Ireland and Visma e-conomic process data inside the European Economic Area.

Vercel is based in the United States. That transfer is covered by the European Commission's standard contractual clauses together with Vercel's certification under the EU to US Data Privacy Framework.

1Password is based in Canada, which the European Commission has recognised as providing an adequate level of protection for data handled by commercial organisations.

Where a Google or Stripe service routes data to the United States, the same standard contractual clauses and Data Privacy Framework certifications apply.

You can ask us which safeguard applies to a particular provider and we will tell you.

Enquiries that do not lead to work: twelve months from the last message.

Client correspondence and delivered work: three years after the final job, so we can answer questions about what we produced for you.

Invoices and accounting records: five years from the end of the financial year, as required by Danish bookkeeping law.

Access to your accounts: removed on delivery of the job, or sooner if you ask.

Mailing lists and customer files sent to us for a job: deleted once the job is delivered, unless another job already booked requires them.

Server logs: retained on Vercel's standard retention schedule, which is measured in days rather than months.

Access to client material is limited to the person carrying out the job.

Credentials are stored in 1Password, never in a document or a spreadsheet, and every account we hold uses a unique password with two factor authentication enabled wherever the platform supports it.

Traffic to blasfame.com is encrypted in transit over TLS, and the data our providers hold is encrypted at rest.

We request the lowest level of access that will do the job, and we ask to be removed once it is delivered. We do not ask for your password, and you should not send us one.

If a breach occurs that is likely to present a risk to people's rights, we will notify the Danish data protection authority within 72 hours and tell affected clients without undue delay.

We do not carry out automated decision making or profiling that produces legal effects or similarly significant effects for anyone.

Under the General Data Protection Regulation you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict how we process it, to receive it in a portable format, and to object to processing carried out on the basis of legitimate interests.

To exercise any of these rights, email hello@blasfame.com setting out what you would like us to do. There is no charge.

We respond within one month. If a request is complex we will tell you before that month is up and may take up to two further months.

We may ask you to verify your identity where we cannot otherwise confirm it.

Some records cannot be erased on request, most commonly an invoice we are required by law to retain. Where that applies we will tell you which record it is and which obligation requires it.

Where we act as a processor for one of our clients, send your request to that business and we will assist them in responding.

Our services are sold to businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16.

If you are unhappy with how we have handled your personal data, contact us first at hello@blasfame.com and we will try to resolve it.

You also have the right to lodge a complaint with the Danish data protection authority, Datatilsynet, at datatilsynet.dk, or with the supervisory authority in the country where you live or work.

We review this policy when our processing changes and at least once a year.

When we update it we publish the revised version here with a new effective date. Where a change materially affects our clients, we tell them directly.

This version is effective 1 October 2026.