Privacy policy
Last updated: 5 November 2026
This policy explains what personal data Gaard Audio collects, why, and what rights you have. We collect as little as we can.
1. Who is responsible
The data controller is Morten Nørgaard, trading as Gaard Audio, a sole trader in Denmark.
Address: Søndergade 34, 6580 Vamdrup, Denmark
CVR: [pending]
Privacy contact: contact@gaardaudio.com
2. What we collect and why
| When | Data | Why, and the legal basis | How long we keep it |
|---|---|---|---|
| You buy a licence | Name, e-mail address, country, order number, product and price. Paddle shares these with us. We never see your card or bank details. | To create and e-mail your serial, help you with your order and keep accounts. Contract (GDPR art. 6(1)(b)) and legal obligation (art. 6(1)(c)). | Order records: 5 years, as the Danish Bookkeeping Act requires. |
| Your serial | Your name and e-mail address are built into your serial, together with a licence number and date. | To show who the software is licensed to, resend a lost serial and disable serials that are shared or refunded. Contract (art. 6(1)(b)). | As long as the licence exists, because it is a lifetime licence. |
| You use the contact form | Name, e-mail address, topic and message. | To answer you. Our legitimate interest in answering questions (art. 6(1)(f)), or steps before a contract (art. 6(1)(b)). | Up to 2 years after our last contact, unless the message is part of an order record. |
| You visit the website | IP address, browser type and the pages requested, in our host's technical logs. | To deliver the website and protect it against attacks. Legitimate interest (art. 6(1)(f)). | Short-term, as set by our host (Cloudflare). |
The software itself
VariBlend does not connect to the internet and does not send any data to us. The software stores your serial only on your own computer.
3. Who we share data with
- Paddle (Paddle.com Market Ltd, UK) is our reseller and the Merchant of Record for all orders. Paddle processes your payment and order data as an independent controller under its own privacy policy.
- Cloudflare hosts this website, runs the Turnstile spam check on the contact form and forwards e-mail sent to our address.
- Resend delivers our e-mails, such as your serial and replies from the contact form.
- YouTube (Google) receives data only if you press play on an embedded video. The video is not loaded before you do.
- Accountants, lawyers and authorities, when needed for bookkeeping or required by law.
Cloudflare and Resend process data for us under data processing agreements. We never sell your data and we do not use it for advertising.
4. Transfers outside the EU
Some of these providers are based in, or use servers in, the United States or the United Kingdom. Transfers to the UK rely on the European Commission's adequacy decision. Transfers to the United States rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.
5. Cookies
This website does not use cookies for tracking or advertising, and it has no analytics cookies. The Turnstile spam check on the contact form may store technical data that is strictly necessary to tell people from bots. Paddle's checkout uses cookies needed to complete your payment when you open it. An embedded YouTube video can set cookies, but only after you press play.
6. Your rights
Under the GDPR you have the right to:
- get a copy of the personal data we hold about you (access);
- have incorrect data corrected (rectification);
- have your data deleted (erasure), unless we must keep it by law;
- have the use of your data restricted (restriction);
- receive your data in a portable format (portability);
- object to processing based on our legitimate interests (objection);
- withdraw consent at any time, where processing is based on consent.
E-mail contact@gaardaudio.com to use these rights. We answer within one month. You can also complain to the Danish Data Protection Agency, Datatilsynet, or to the data protection authority where you live.
7. Security
We protect your data with encrypted connections (HTTPS), access only for the people who need it, and providers with strong security practices. Serials are created with a signing key that never leaves our own computer.
8. Changes
We update this policy when the way we handle data changes. The date at the top shows the latest version.