Privacy Notice
Last updated: 20 July 2026
This notice reflects the current After The Form website, Instagram messaging, free Follow-up Leak Check and paid audit service. It will be updated when a material provider or data flow changes.
1. Who is responsible for your data?
After The Form is operated by Tamertech - Denmark, which is the data controller for the personal data described in this notice.
Tamertech - Denmark
CVR: 45780015
Kildeagervej 241, 8361 Hasselager, Denmark
Email: hello@aftertheformhq.com
2. What this notice covers
This notice explains how personal data is handled when you:
- Visit an official After The Form website
- Contact @aftertheformhq through Instagram or email
- Complete the free Follow-up Leak Check
- Ask for, purchase or receive a Lead Follow-up Leak Audit
- Exercise a privacy right or raise a complaint
3. Data we may collect
Depending on your interaction, we may process:
- Name, job title, company and business contact details
- Instagram username and message history
- Information about enquiry volumes, channels, ownership, response times, follow-up and outcomes
- Written intake answers and business-process descriptions
- Anonymised screenshots, examples, templates or exports supplied for an audit
- Contract, invoice and payment-status information
- Emails, support questions and delivery correspondence
- Basic technical and security data such as timestamps, IP address and server logs
- Aggregated website analytics such as page path, referrer, approximate location, browser, device type and operating system
Do not provide passwords, credentials, payment-card data, national identification numbers, health information or other sensitive information. Remove unnecessary personal data from screenshots and examples before sending them.
4. Why we use the data and our legal basis
Responding to enquiries and providing the free Leak Check
We use the information to answer your request, review your responses and send a personalised diagnosis. The legal basis is our legitimate interest in responding to relevant business enquiries and, where you request steps toward a paid audit, Article 6(1)(b) GDPR.
Assessing fit and preparing an audit
We use the information to confirm scope, provide terms, prepare an invoice and decide whether the service can be delivered. The legal basis is Article 6(1)(b) GDPR—steps taken at your request before entering a contract.
Delivering the paid audit
We use the information to analyse the agreed workflow, prepare the report, deliver recommendations and provide the written Q&A window. The legal basis is Article 6(1)(b) GDPR—performance of the service contract.
Understanding and improving the website
We use aggregated Vercel Web Analytics to understand which pages are visited, where traffic comes from and whether visitors use the DM LEAK call to action. The legal basis is our legitimate interest in measuring and improving the website and its business relevance. Custom events contain only a general button location such as header or hero and do not include message content, names or email addresses.
Invoicing, bookkeeping and legal obligations
We use contract and invoice information to issue and retain accounting documentation. The legal basis is Article 6(1)(c) GDPR and applicable Danish bookkeeping and tax obligations.
Security, abuse prevention and legal claims
We use proportionate information to protect accounts and systems, prevent misuse, document agreements and establish, exercise or defend legal claims. The legal basis is Article 6(1)(f) GDPR.
We do not make decisions with legal or similarly significant effects solely through automated processing. Leak Check scores and buyer-facing recommendations are human-reviewed.
5. Where the data comes from
Most information is collected directly from you through Instagram, email, intake material and business correspondence. Technical and aggregated analytics information may be generated automatically by the services used to operate the website, email and security systems.
6. Who may receive the data?
Access is limited to Tamertech - Denmark and service providers needed for the relevant interaction. Current provider categories include:
- Meta/Instagram for Instagram messaging
- Vercel for website hosting, delivery, technical security and aggregated Web Analytics
- Simply.com for domain administration and business email
- Secure document or file-storage providers used for a specific audit
- Invoicing, bookkeeping and payment-administration providers
- Technical support and security providers where required
Only the providers needed for the relevant purpose receive data. Where an audit requires a separate intake, storage or payment service, the applicable instructions or invoice will identify that service before the relevant material is submitted.
7. Transfers outside the EEA
Some technology providers may process data outside the European Economic Area. Where this occurs, the transfer must rely on a valid mechanism, such as an adequacy decision or approved contractual safeguards. Provider documentation and applicable safeguards are reviewed as part of supplier selection.
8. How long we keep data
- Free Leak Check and unconverted enquiries: normally deleted or anonymised within six months after the last meaningful interaction.
- Incomplete intake where no audit proceeds: normally deleted within 30 days after the process is closed.
- Detailed audit working material and supplied evidence: normally deleted within 30 days after the seven-day Q&A window closes.
- Final reports and essential delivery correspondence: normally retained for up to 12 months to support the delivered service.
- Invoice and accounting material: retained for the period required by Danish bookkeeping law, generally five years from the end of the relevant financial year.
- Web Analytics: retained according to the reporting period available under the Vercel plan; the temporary visitor-session identifier is discarded after 24 hours.
- Technical and security logs: retained only as long as reasonably needed for security, troubleshooting and abuse prevention, subject to provider settings.
Data may be kept longer when required by law, an active dispute or a documented legal claim. When data is no longer necessary, it is deleted or anonymised.
9. Your rights
Subject to the GDPR and any applicable limitations, you may have the right to:
- Receive information about how your data is used
- Request access to your personal data
- Correct inaccurate or incomplete data
- Request deletion
- Restrict certain processing
- Object to processing based on legitimate interests
- Receive data you supplied in a portable format where the conditions apply
- Withdraw consent where processing is based on consent
To exercise a right, contact hello@aftertheformhq.com. Reasonable information may be requested to confirm identity.
10. Complaints
Please contact Tamertech - Denmark first so the concern can be addressed. You also have the right to complain to the Danish Data Protection Agency, Datatilsynet.
12. Changes to this notice
This notice may be updated when services, providers or legal requirements change. The current version and update date will be published on aftertheformhq.com.