ReportingLab / legal
Privacy notice
How we use personal information when you visit our website, contact us, subscribe to ReportingLab emails or work with us.
Who we are
ReportingLab is the public brand of Reporting Lab, CVR 36135980, Skovbovej 6, 2800 Kongens Lyngby, Denmark. Reporting Lab is the controller for the personal information described in this notice.
For privacy questions or to exercise your rights, email privacy@reportinglab.com.
This notice covers information we use when you visit our website, send us a business enquiry, subscribe to ReportingLab emails, or communicate with us about potential or ongoing work. Client engagements may have additional privacy arrangements, depending on the work and our role. We will explain those arrangements where relevant.
What we collect and why
| Activity | Information | Purpose and legal basis |
|---|---|---|
| Website operation and security | IP address and technical information associated with requests to the site, such as browser or device information and access logs. | Deliver and protect the website. Our legitimate interest is to operate a reliable and secure site. See “Cookies and embedded content” below for technologies that need a separate choice. |
| Business enquiries | First name, last name, work email, company name, job title, your message and our subsequent correspondence. | Respond to the enquiry, understand your role, record it in our customer relationship system and follow up about possible work. We rely on our legitimate interest in responding to business enquiries and considering potential work. Sending an enquiry alone does not subscribe you to ReportingLab emails. |
| ReportingLab emails | Email address, subscription choice and evidence of that choice. | Email you new insights when they are published, information about our consulting services, and updates on events and webinars. We rely on your consent. You can withdraw it at any time. |
| Business relationships | Business contact details, correspondence and information needed to arrange or deliver agreed work. | Manage the relationship and deliver the work. For contacts acting for an organisation, we rely on our legitimate interest in working with that organisation. Where you personally enter a contract with us, we use information necessary to perform it. |
| Invoices and accounting | Contact and transaction details needed for invoices and accounts. | Meet our legal accounting and tax obligations. |
Using the enquiry form
All six enquiry fields are required to submit the form: first name, last name, work email, job title, company name and a message. The form has no newsletter signup; you can subscribe separately. Please do not include sensitive personal information or confidential client documents in an initial enquiry; we can arrange an appropriate way to share material if needed.
Where information comes from
We receive enquiry and subscription information directly from you. For business relationships, we may also receive your work contact details from your organisation or colleagues involved in the work. If we use information from another source or for a new purpose, we will provide any further privacy information required.
Providers and transfers
We use providers for website hosting and security, forms and customer relationship management, business email and document storage, and newsletter delivery. They process relevant information for us under applicable service agreements. People working with Reporting Lab may access information only as needed for the relevant purpose. We may also disclose information where the law requires it or to establish, exercise or defend a legal claim.
Processing outside the EEA
Some of our service providers process personal information outside the European Economic Area, including in the United States. We rely, as applicable, on an EU adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's standard contractual clauses. Relevant clauses are available on request through our privacy contact.
How long we keep information
We keep an enquiry while we respond and consider potential work. If it does not lead to an active opportunity or ongoing business relationship and you are not subscribed to ReportingLab emails, we permanently delete your contact and enquiry information from our CRM, email and other active records within six months of our last substantive exchange. You may object to our use of your enquiry information on grounds relating to your situation. We will assess the request and stop processing unless we have compelling legitimate grounds or need the information for a legal claim.
We keep relevant contact and correspondence records while needed for an active business relationship, and delete them when that purpose ends unless another stated reason applies. We keep accounting records for as long as applicable accounting and tax laws require.
If you subscribe to ReportingLab emails, we keep your contact details and consent record while the subscription is active. Your contact record also retains the history of any enquiry you submitted. We review whether that history remains relevant to potential work. You can unsubscribe at any time. If you unsubscribe and there is no active opportunity or ongoing business relationship, we permanently delete your contact and its enquiry history from our CRM, email and other active records within six months of your unsubscribe date or our last substantive exchange, whichever is later.
Residual copies may remain in service-provider backups until overwritten or deleted under their retention schedules.
A specific legal obligation or an actual dispute may require us to keep relevant records longer. We limit such retention to the information and period needed for that reason.
We keep technical and security records for the period needed to operate the website, investigate incidents and protect it against misuse. The period depends on the purpose of the record and any incident that requires investigation.
Your rights
Depending on the circumstances, you may request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may object to processing based on our legitimate interests on grounds relating to your situation, and you may object to direct marketing at any time. Where we rely on consent, you may withdraw it without affecting processing carried out before withdrawal.
To make a request, email privacy@reportinglab.com. We may ask for proportionate information to verify your identity. Some rights have conditions or exceptions. You may complain to Datatilsynet or another competent supervisory authority; you do not need to contact us first.
Changes to this notice
We will update this notice when our practices change and show the date of the current version.
Last updated: 1 October 2026