Privacy Policy

Westbridge Systems LTD (company number 16944743), 65 London Wall, London, United Kingdom, EC2M 5TU, is the data controller for personal data processed through this website and our services. Contact: hello@candylabs.dk.

Contact and project data you submit: name, company, email, phone, website and the description of your project or booking.

Booking data: selected time slot, timezone and meeting details.

Billing data: billing name, address, VAT number and invoice history. Card details are handled by our payment provider — we never receive or store your full card number.

Technical data: IP-derived country, browser type, pages viewed and basic usage events, used to operate and improve the site.

To respond to enquiries and prepare proposals (legitimate interest / steps prior to a contract).

To deliver, support and invoice our services (performance of a contract).

To comply with accounting and tax obligations (legal obligation).

To improve the site and our services (legitimate interest).

We share data only with processors that help us run the business: cloud hosting and database providers, email delivery, payment processing, and analytics. They act on our instructions and under a data processing agreement. We never sell personal data.

Where data is transferred outside the EU/UK, we rely on adequacy decisions or standard contractual clauses.

Enquiry and booking data is kept for up to 24 months after the last contact. Accounting records are kept for the statutory period (currently 5–6 years). Project data is kept for the duration of the engagement and a reasonable period afterwards for support purposes.

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time.

To exercise your rights, email hello@candylabs.dk. You also have the right to complain to your local data protection authority.

We use encrypted connections, access control, role-based permissions and row-level security in our databases. No system is perfectly secure, but we work to protect data with appropriate technical and organisational measures.

We may update this policy. The date at the top of this page shows the latest version.