Privacy policy
How Uncompelled processes personal data when you use this website.
Privacy policy
This policy explains how we use your personal data when you visit Uncompelled’s websites, contact us or subscribe to our newsletter.
Providing information through our forms is voluntary; without the required details, we cannot answer your enquiry or complete your newsletter registration.
Data controller and contact
Uncompelled ApS is a trading name of Cozmo Systems ApS, Danish business registration number (CVR) 46655141. Cozmo Systems ApS is the data controller for the website services described here.
Contact us through our contact form or write to us at Krimsvej 11F, ground floor, 2300 Copenhagen S, Denmark.
Contact enquiries
We use your name, email address, selected topic and message to answer non-clinical enquiries, including course questions and practical questions about treatment availability. Please do not send detailed health information or treatment records.
We treat any health information in your message as confidential and keep its use and retention to the minimum necessary. Information we do not need is deleted where legally permitted.
Where you ask us to take steps before entering into a contract, we process the information needed for those steps under GDPR Article 6(1)(b). We answer other non-clinical enquiries on the basis of our legitimate interest in responding to questions about our services (Article 6(1)(f)).
The Uncompelled newsletter
We send the newsletter with your consent (GDPR Article 6(1)(a)), using one shared subscriber list across Uncompelled markets and websites.
We record your email address, language, signup market and website, subscription status, consent and any interests you select. Optional interests help us make the newsletter relevant to you; you still receive the general Uncompelled newsletter.
You confirm your email address before your subscription becomes active. Email addresses are stored encrypted. We process email delivery events, but do not track newsletter opens or clicks or store IP addresses or browser identifiers as proof of consent.
You can unsubscribe using the link in any newsletter. This applies across all Uncompelled markets and websites.
How long we keep your data
| Information | Retention |
|---|---|
| Ordinary general/course enquiries; purely practical treatment enquiries ending without treatment | Up to 12 months after closure, where needed for follow-up. |
| Unconfirmed newsletter registrations | Deleted from active storage seven days after signup. Copies may remain in recovery history for up to a further 30 days. |
| Active newsletter subscription | Until you unsubscribe. |
| Necessary consent evidence | While registration is active; afterwards, until two years after the last email sent under that consent. If no such email was sent, the evidence is deleted when registration ends. Confirmation emails do not count as use. |
| Minimal records preventing old registrations from being restored | Deleted 35 days after the latest verified deletion or completed checks after a relevant restoration, whichever is later, provided older data can no longer reactivate registration. A relevant restoration restarts the period. Recovery copies may remain for up to a further 30 days; this does not extend registration retention. |
| Minimal records of permanent delivery failures or spam complaints | Until the issue is verified as resolved or the block is no longer needed. A new signup does not automatically remove the block. |
We retain consent evidence to meet our legal duty to demonstrate consent (Article 6(1)(c)). Recovery and blocking records serve our legitimate interest in respecting your choices and preventing unwanted or undeliverable emails (Article 6(1)(f)).
Particular information may need to be retained where a legal obligation or a specific legal claim requires it.
Website operation and cookies
We process technical information, including IP addresses where necessary, to deliver the website and protect it against misuse. Our policy is to limit access to authorised people with a specific work-related need.
The legal basis is our legitimate interest in operating a secure, reliable website (GDPR Article 6(1)(f)). We keep technical records only for as long as needed for website delivery, security checks and resolving misuse or security incidents.
For cookies, browser storage and the choices available on your edition, see our cookies page. Optional analytics or advertising, where offered, require separate consent.
Service providers and international transfers
We do not share your personal data with unrelated third parties for their own marketing.
| Provider | Role | Data protection | | --- | --- | --- | | Microsoft 365 | Email correspondence about our websites, including practical enquiries about treatment availability. | Covered by the applicable standard agreement and Microsoft’s Data Protection Addendum. | | Cloudflare, Inc. | Website delivery and security; newsletter registration, consent records and unsubscribe requests where signup services are offered. | The standard agreement incorporates Cloudflare’s Data Processing Addendum. | | AWS, including Amazon SES | Email campaigns sent with your consent, when offered. | AWS’s Data Processing Addendum forms part of its standard Service Terms. |
The providers above may process personal data outside the European Economic Area (EEA). Their data protection terms provide for Standard Contractual Clauses where required and, for Cloudflare, the EU–US Data Privacy Framework where applicable. These safeguards set requirements for protecting transferred data. Contact us using the details above for information about safeguards relevant to your data and how to obtain a copy.
Your choices and rights
You can request access to your data, correction, deletion or restricted processing, and receive certain data in a portable form where the legal conditions are met. Legal obligations may limit some requests.
You can object to direct marketing at any time. You can also object to processing based on legitimate interests. Consent can be withdrawn at any time without affecting the lawfulness of earlier processing. Reading this policy does not constitute consent.
Use our contact form to exercise your rights. We may need to verify your identity.
You can complain to the Danish Data Protection Agency or another competent authority.
Updates
We update this policy when our website services or data practices change.
Effective date: 2 November 2026.