Privacy policy
Last updated · 5 November 2026
Who we are
This policy explains how Hanse ("Hanse", "we", "us") collects and uses personal data when you visit gethanse.eu (the "Website"), contact our sales team or sign up for a Hanse account. Hanse is the data controller for this data.
What we collect
We collect only what we need to respond to you, run your account and keep the Website working.
- Sales contact form: name, work email, company, role, and the message and details you choose to send.
- Account sign-up: name, email address, company, password (stored in hashed form) and account settings. If you buy credits, we also collect billing details such as company name, billing address and VAT number. Payments are handled by our payment provider; we do not store full card numbers.
- Website usage: our analytics are managed by cookiebot and record aggregated data such as pages visited, referring site, browser, device type and country. They are not used to identify you. Our hosting provider also keeps short-lived server logs, including IP addresses, for security and troubleshooting.
- Communications: emails and messages you send us, and our replies.
We do not knowingly collect special category data. The Website and platform are intended for businesses and are not directed at anyone under 18.
How we use it and why
We use personal data only for the purposes below, each with a legal basis under the GDPR.
| Purpose | Data used | Legal basis |
|---|---|---|
| Respond to sales enquiries and follow up | Contact form data, communications | Legitimate interests; steps before entering a contract |
| Create and manage your account | Account data | Performance of a contract |
| Process credit purchases, invoices and tax records | Billing data | Performance of a contract; legal obligation |
| Send service and account emails | Email, account data | Performance of a contract |
| Send product updates and marketing | Email, company | Legitimate interests, with an opt-out in every email; consent where the law requires it |
| Understand and improve the Website | Aggregated analytics | Legitimate interests |
| Keep the Website and platform secure and prevent abuse | Server logs, account data | Legitimate interests; legal obligation |
| Comply with the law and enforce our terms | Data relevant to the matter | Legal obligation; legitimate interests |
We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
International transfers
We aim to store and process personal data within the European Economic Area (EEA). Where a service provider processes data outside the EEA, we make sure an approved safeguard is in place, such as an adequacy decision by the European Commission (including the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses. You can ask us for details of these safeguards using the contact details below.
How long we keep it
We keep personal data only as long as we need it for the purposes above.
| Data | Retention |
|---|---|
| Sales enquiries that do not become customers | Up to 24 months after our last contact |
| Account data | For the life of your account, then deleted or anonymised within 90 days of closure |
| Billing and invoice records | As long as tax and accounting law requires, typically [6 to 10] years |
| Server logs | Up to 30 days, unless needed to investigate a security incident |
| Marketing email preferences | Until you unsubscribe; we keep a suppression record so we do not email you again |
Aggregated analytics contain no personal data and may be kept indefinitely.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy
- correct inaccurate or incomplete data
- ask us to delete your data
- restrict or object to how we use it, including objecting to marketing at any time
- receive your data in a portable format
- withdraw consent at any time, where we rely on consent
To exercise any of these rights, email privacy@gethanse.eu. We will reply within one month and may ask you to confirm your identity first.
Security and data on the platform
We protect personal data with appropriate technical and organisational measures, including encryption in transit, access controls limited to staff who need it, and hashed passwords. No system is completely secure, but we work to prevent unauthorised access, loss or misuse.
This policy covers data Hanse controls as a business. It does not cover the content customers send through the Hanse platform, such as prompts, inputs, model outputs and request logs. For that content, Hanse acts as a data processor on behalf of the customer, and its handling is governed by our Platform Terms and Data Processing Agreement.
Changes and contact
We may update this policy as Hanse grows. The current version is always on this page, with the "Last updated" date at the top. If we make significant changes, we will notify account holders by email before they take effect.
Questions or requests about your personal data: privacy@gethanse.eu