Last updated: 28 October 2026
This policy explains how Secherit collects and uses personal data when you visit secherit.dk, create an account, manage licenses or contact support.
1. Who is responsible?
The controller is Oliver Gravenslund Secher, Denmark, operating Secherit. For privacy questions, requests or withdrawal of marketing consent, email contact@secherit.dk. You can request further controller contact details using this address.
2. Information we collect
Accounts: your email address, username, display name, profile information, password hash and account-related records. Passwords are handled by WordPress; we do not need you to send your password to us.
Licenses and purchases: licenses assigned to your account, plugin names, plans, status and expiry dates. If purchases become available, order and billing information will be processed to fulfil and document those purchases. Payment services are not currently connected.
Support: your name, email address, enquiry category, subject and message. Enquiries are delivered to our support mailbox. Please do not include passwords, secret keys, payment details or other unnecessary sensitive information.
Security and technical data: hosting and security services can process IP addresses, request information, browser/device signals, timestamps and security events. The support form uses a keyed hash of the connecting IP address for a temporary sending limit. This limit expires after 15 minutes.
Preferences: your optional newsletter/marketing choice, when that choice was recorded or changed, the consent wording where consent was given, and the date/version of your privacy-policy acknowledgement.
3. Why we use your data
We use account and license information to provide and manage the services you request, including login, downloads and password recovery (performance of a contract or steps requested before a contract). We use support information to respond to your request (contract-related purposes or our legitimate interest in answering enquiries). We use security information to protect the service against abuse and fraud (legitimate interests). Where applicable, we retain transaction records to meet legal obligations.
Newsletter and promotional emails require your separate, optional consent. You do not have to subscribe to create or use an account. Essential account, security, password-reset and requested support emails are not marketing messages and are not controlled by that checkbox.
4. Marketing preferences
Marketing consent is not preselected. You can withdraw or change it under Profile and security → Email preferences, or by emailing contact@secherit.dk. Withdrawal does not affect processing carried out before it. A newsletter delivery service has not yet been connected; the website currently records your preference. Before introducing another provider or a new use of your data, we will update this policy as appropriate.
5. Providers and recipients
We use Simply.com for hosting and email delivery, WordPress/WooCommerce software for accounts and service management, and Cloudflare Turnstile for bot protection on protected forms. Turnstile processes browser and technical signals to determine whether a request is legitimate. See Cloudflare’s Privacy Policy and Simply.com’s privacy information.
Access is limited to people and providers who need information to operate, secure or support the service, or where disclosure is legally required. WordPress plugins running on our server are not, by themselves, a statement that your data is sent to their developers.
6. International processing
Some providers, including Cloudflare, operate internationally, and processing may take place outside the EU/EEA. Where applicable, international transfers must rely on an appropriate legal mechanism, such as an adequacy decision or standard contractual clauses. Contact us for information about the providers and transfer safeguards relevant to your data.
7. Cookies and similar technologies
WordPress and WooCommerce use cookies and related storage for sign-in, sessions, account functions and, where used, the shopping cart. Turnstile uses technical signals for bot protection. Marketing consent at signup does not provide consent for optional analytics or advertising cookies. If optional tracking is introduced, it will need a separate consent mechanism where required.
8. How long we keep information
We retain account and license information while it is needed to provide the account, related services and support, and to resolve relevant disputes. Support messages are retained while needed to handle the enquiry and reasonable follow-up. Marketing preference records are retained while needed to apply your choice and demonstrate consent or withdrawal. Temporary support rate-limit records expire after 15 minutes. Hosting logs and backups follow the applicable provider settings and retention cycles. Information subject to a legal retention requirement may need to be kept after an account is closed. Contact us for a review of the data held about you.
9. Your rights
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. You can withdraw consent at any time. We may need to verify your identity before acting on a request. Contact contact@secherit.dk.
You can also complain to the Danish Data Protection Agency (Datatilsynet) or another competent supervisory authority. We do not use the account portal to make solely automated decisions producing legal or similarly significant effects about you.
10. Changes to this policy
We may update this policy as the service develops. The date above identifies this version. Material changes will be communicated where appropriate.