Legal

Privacy policy

AItillery

Last updated: 27 October 2026

Effective date: on publication

1. Who we are

AItillery is a business brand operated by Flow Marketing Solutions ApS (“we”, “us” or “our”), a company incorporated in Denmark under CVR no. 45831973, with its registered address at Avnedevej 15, 2730 Herlev, Denmark.

Flow Marketing Solutions ApS is the data controller for personal data processed through aitillery.com, enquiries and introductory bookings, and its own business administration, unless a particular engagement or applicable agreement identifies a different controller or a processor relationship. Where we process personal data on a client’s behalf, section 2 and the applicable data processing agreement apply.

You can contact us at support@aitillery.com.

2. Scope

This Privacy Policy explains how AItillery collects and processes personal data through https://aitillery.com, enquiries, introductory bookings, professional communications and our business and advisory services. It applies to visitors and business contacts in Denmark, the European Economic Area (EEA) and other jurisdictions, including the United States, subject to applicable law.

This policy is currently provided in English. A Danish-language version may be introduced later; no separate Danish-language policy is currently available.

Where AItillery processes personal data on behalf of a client as a data processor, the relevant engagement and data processing agreement govern that processing. This Privacy Policy primarily describes processing for which we determine the purposes and means.

3. Information we collect

3.1 Information you provide

When you contact us through the website, we collect the information you provide in the contact form: your name, work email address and message.

When you book an introductory call through Cal.com, we process the contact details needed to arrange the meeting and the business information requested in the booking form. The booking form asks for your first name, email address, job title, company name, years in business, approximate annual company revenue, the time frame in which you are looking to start, how we can help and the service you wish to discuss; you may also provide your last name, telephone number, your company website and the email addresses of any guests you add. These details are used to arrange, prepare for and assess the relevance and scope of the requested conversation.

During client engagements, we may process relevant business contact information, correspondence, contractual information and billing information. Please do not submit patient records, special-category health information or other sensitive personal data through the general website contact or booking forms.

3.2 Technical and usage information

When you access the Website, the hosting and security services used to deliver and protect it may process technical connection information, such as IP addresses, browser and device information, and access logs, in accordance with their respective functions and retention settings.

We use Plausible Analytics to understand aggregate Website usage. In its standard configuration, Plausible does not set analytics cookies or use persistent cross-site visitor identifiers, and it does not store raw visitor IP addresses or User-Agent strings. Our hosting provider, Framer, also provides cookie-free, aggregated statistics about visits to the Website. The analytics information made available to us is used to understand website traffic and improve our services, not to build behavioural advertising profiles. Additional details are provided in our Cookie Policy.

3.3 Information from third parties

We may receive professional or business information about you from publicly available sources (such as LinkedIn), analytics providers, or marketing platforms.

4. Purposes and legal bases for processing

Where the GDPR applies, we process personal data for the following purposes and legal bases:

Enquiries and introductory calls. To receive and respond to enquiries, arrange calls and manage potential client relationships. For business enquiries, our legal basis is generally our legitimate interests in responding to enquiries and operating a business-to-business advisory service (Article 6(1)(f)), subject to the relevant balancing assessment. Where necessary to take steps requested by an individual before a contract with that individual, Article 6(1)(b) may apply.

Client engagements and administration. To arrange, deliver and administer services, communicate with client representatives, and manage payments and records. Depending on the relationship, we rely on contractual necessity where the individual is a contracting party (Article 6(1)(b)), legitimate interests in managing corporate relationships (Article 6(1)(f)), and applicable legal obligations (Article 6(1)(c)).

Website operation, security and improvement. To provide and safeguard the Website, investigate misuse and understand aggregate usage. Where personal data are involved, the basis is our legitimate interests in secure and effective website operation (Article 6(1)(f)), subject to any separate consent requirement under applicable rules on cookies and similar technologies.

Legal obligations. To meet applicable accounting, tax and regulatory requirements (Article 6(1)(c)).

We do not use the general website contact or booking forms to make solely automated decisions about individuals that produce legal or similarly significant effects.

5. Recipients and service providers

Where necessary, we share information with service providers that support our website, business email, scheduling and analytics, and with professional advisers or public authorities where appropriate or required by law. The services we currently use for this are Framer (website hosting, contact-form handling and site statistics), Google Workspace (business email, calendar and video calls), Cal.com (scheduling of introductory calls), HubSpot (customer relationship management, connected to our Cal.com booking process) and Plausible Analytics (website statistics).

We only describe other providers, such as payment-processing services, where they are actually used for the relevant processing. We enter into data processing agreements where required by law.

In connection with a merger, acquisition or sale of assets, your information may be transferred to the successor entity.

Some suppliers or their subprocessors may process information outside the EEA. Where GDPR international-transfer rules apply, we use an appropriate legal transfer mechanism, such as a relevant adequacy decision, the EU–US Data Privacy Framework for recipients actually certified under it, or applicable Standard Contractual Clauses with any necessary supplementary safeguards. Information about relevant safeguards may be requested at support@aitillery.com.

6. Cookies and tracking

For detailed information about the cookies and tracking technologies we use, your options, and how to manage preferences, please see our Cookie policy page.

7. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, subject to applicable legal obligations and circumstances where retention is necessary for the establishment, exercise or defence of legal claims.

Enquiries and introductory bookings. Where no client engagement follows, we generally retain enquiry and booking information for up to 12 months after the last substantive business-related contact, unless an ongoing business relationship, open proposal, legal obligation or another documented legitimate reason justifies a different period. We maintain a documented process for reviewing and deleting information that is no longer needed.

Client and engagement records. We retain information necessary to manage an active engagement for its duration. Certain contractual and client-specific business records may be retained for up to five years after the engagement ends where justified by the relevant purpose and legal basis, or longer where required by law or necessary for legal claims. This does not mean that all client correspondence or project data is automatically retained for five years. Where we process personal data on a client’s behalf, retention is governed by the applicable agreement and data processing terms.

Accounting records. Accounting material is generally retained for five years from the end of the financial year to which it relates, subject to applicable legal exceptions.

Website analytics. We use Plausible Analytics in its cookieless configuration, and our hosting provider, Framer, provides cookie-free site statistics. Their processing and retention of technical data and aggregated statistics are governed by the applicable provider arrangements and our actual analytics configuration.

Deletion requests. We handle requests for erasure separately and without undue delay, subject to applicable legal grounds for retaining information.

8. Data security

We use reasonable technical and organisational safeguards to protect personal information, including encryption in transit, access controls, and contractual protections with service providers. No method of transmission or storage is completely secure. If you have concerns about the security of your information, contact us at support@aitillery.com.

9. Children

Our services are not directed at individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Your rights and choices

You may contact us at support@aitillery.com to request access to, correction of, or deletion of your personal information.

Rights under applicable data protection law

Subject to the conditions and limitations of applicable law, you may request access to your personal data, correction of inaccurate information, erasure, restriction of processing and data portability where applicable. You may object to processing based on legitimate interests and to direct marketing. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, contact support@aitillery.com. We may request information reasonably necessary to verify your identity.

You also have the right to lodge a complaint with a competent supervisory authority. In Denmark, the supervisory authority is Datatilsynet (https://www.datatilsynet.dk). We encourage you to contact us first, but doing so is not a condition of exercising your right to complain.

11. International processing and transfers

The business operating AItillery is established in Denmark. Depending on the providers used, some personal data may be processed by recipients or subprocessors outside the EEA, including in the United States. Where the GDPR’s rules on international transfers apply, we rely on appropriate transfer mechanisms and safeguards as described in section 5.

Additional rights may apply under the laws of other jurisdictions. A future Danish-language website does not affect your ability to exercise rights under this English-language notice.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated on our Website and, where appropriate, by email. The “Last updated” date at the top indicates the most recent revision.