Privacy notice

GardenSteps is operated by Contenza K/S, Holmgade 8, 6430 Nordborg, Denmark (CVR 43349023). We are the data controller for the personal data described here.

What we collect

• Your email address, to sign you in and send your receipts.
• Purchase records (what you bought, when, and the amount). Card details are handled by Stripe and never reach us.
• Your course progress and quiz answers, so you can pick up where you left off.
• Messages you send through the help form.

Why, and our lawful basis

To provide the courses you bought (contract), to keep financial records (legal obligation), and to keep the service secure (legitimate interests). We do not sell your data and we don't use advertising trackers.

Who processes it for us

• Stripe: payments.
• Resend: sign-in and receipt emails (EU region).
• Hetzner: hosting for the site and our analytics server (EU data centres).
• Cloudflare: the security check on the sign-in page (Turnstile), which confirms you are a person. It sees technical details such as your IP address and browser, and isn't used for advertising.

Cookies and analytics

We use one essential cookie to keep you signed in. To count visits we use Plausible Analytics, which we run on our own server in the EU: it uses no cookies, doesn't track you across sites and stores no personal data, only anonymous totals such as page views and referring sites. We don't use advertising cookies or trackers, so no cookie banner is needed.

How long we keep it

Account and progress data for as long as your account is active; purchase records for 5 years from the end of the financial year, as required by Danish bookkeeping law. You can ask us to close your account at any time.

Your rights

You can ask for a copy of your data, or for it to be corrected or deleted, through the help form in your account. You can also complain to a data protection authority: in Denmark, Datatilsynet (datatilsynet.dk); in the UK, the Information Commissioner's Office (ico.org.uk).