Privacy policy
This notice explains what personal data Cantonly ApS collects when you use cantonly.com, why, who else handles it, and the rights you have over it.
Who is responsible
The data controller is Cantonly ApS, Tagensvej 85F, 2200 Copenhagen, Denmark.
For anything about your personal data, email denmark-sales@cantonly.com.
Enquiries you send us
When you use the form on our contact page, we receive the details you enter: your name, company, email address, country, the product and quantity you are asking about, your preferred sourcing origin, which office should reply, and your message.
We use them to answer your enquiry and, if you ask us to, to prepare a quote. The legal basis is GDPR Art. 6(1)(b), steps taken at your request before entering into a contract, and Art. 6(1)(f), our legitimate interest in answering business enquiries. We keep enquiries for 24 months after our last contact with you, unless you become a customer, in which case we keep what our contract and accounting obligations require.
The form is delivered by Web3Forms, a form-processing service that forwards each submission to our inbox. Web3Forms acts as our data processor. Web3Forms processes submissions under its data processing agreement. Where it handles data outside the EU/EEA, the transfer is covered by the European Commission’s Standard Contractual Clauses.
If you email, phone, or message us on WhatsApp or WeChat instead, we receive what you send through that channel and use it in the same way. WhatsApp and WeChat are run by their own providers under their own privacy terms.
No analytics tool ever receives the content of the form. If you have accepted analytics cookies, we record only that an enquiry was sent, which office it was for and which origin was chosen.
Analytics cookies (only if you accept)
With your consent, we use Google Analytics 4 to understand how visitors use the site: which pages are read, how people arrive, and which contact options they use. Nothing is loaded from Google, and no analytics cookie is set, until you press Accept in the cookie banner.
If you accept, Google Analytics records the pages you view, the page that referred you, your device and browser type, an approximate location (country and city), and clicks on our contact buttons, phone numbers and email addresses. We remove query strings from page addresses before they are sent, except campaign tags such as utm_source. Google signals and advertising features are switched off.
| Cookie | Purpose | Lifetime |
|---|---|---|
_ga | Distinguishes one browser from another | 2 years |
_ga_<ID> | Keeps track of the current visit | 2 years |
The provider for visitors in the EU/EEA is Google Ireland Limited, acting as our processor. Data may be transferred to Google LLC in the United States, under Google’s data processing terms, which rely on the EU–US Data Privacy Framework and Standard Contractual Clauses. Analytics data is kept for 14 months.
The legal basis is your consent (GDPR Art. 6(1)(a) and the Danish Executive Order on cookies). You can withdraw it at any time with , also in the footer of every page. Withdrawing stops the tracking and deletes the analytics cookies from your browser.
Settings stored in your browser
Two small settings are kept in your browser's local storage. They never leave your device and are not used to identify you:
theme: your choice of light or dark appearance, if you used the switch in the header.cantonly_consent: your answer to the cookie banner, so we do not ask on every page. It expires after 12 months, when we ask again.
The introduction video
The video on our About page is hosted by YouTube. It is not loaded until you press play. When you do, it loads from youtube-nocookie.com, and Google receives your IP address and the usual browser information under its own privacy policy.
Hosting and server logs
The website is hosted by SuperHosting.RS (Superhosting d.o.o.) in Belgrade, Serbia. Like any web server, it records each request (IP address, time, page requested and browser type) to keep the site secure and working. Serbia is outside the EU/EEA, so this hosting is covered by the European Commission’s Standard Contractual Clauses. Logs are kept only as long as needed to keep the site secure and working, under the host’s retention policy.
Your rights
You can ask us for a copy of the personal data we hold about you, and ask us to correct it, delete it, restrict how we use it, or send it to you in a portable format. You can object to processing based on our legitimate interests, and withdraw any consent you have given. Email the address in the first section and we will reply within one month.
If you think we have handled your data wrongly, you can complain to the Danish Data Protection Agency, Datatilsynet (datatilsynet.dk), or to the supervisory authority where you live.