GDPR policy
General Data Protection Regulation policy.
Updated: October 2026
The General Data Protection Regulation (GDPR) has applied across the European Union since 25 May 2018. In the United Kingdom the same rules apply as the UK GDPR, alongside the Data Protection Act 2018. They give individuals rights over personal data that relates to them, wherever that data is processed.
This page explains when Hopp Tech acts as a data processor and when as a data controller, where data is kept, and how we delete data and handle a breach. How we use the personal data we collect through hopp.tech is set out in our privacy policy.
Where Hopp Tech acts as a data processor
Hopp Tech Ltd acts as a data processor for any data that a client provides, uploads or transfers to our servers. The client is the data controller for that data.
Where Hopp Tech acts as a data controller
Hopp Tech Ltd acts as the data controller for data provided during ordering and general account management, for the details people send us through hopp.tech, and for any data held for marketing purposes.
Where data is kept
Website
Hosted by Cloudflare. Cloudflare serves each visitor from the data center nearest to them, which for visitors in Europe is a data center in Europe.
Enquiries, customer service and customer relationship management
Freshsales and Freshdesk, by Freshworks, hosted in the United States, the European Economic Area, India and Australia.
See Freshworks’ data hosting details.
Offices
Gl. Kongevej 11, 3rd floor,
1610 Copenhagen,
Denmark (main hub)
86-90 Paul Street,
London EC2A 4NE,
United Kingdom
Type of data
The GDPR applies to any data that can identify a living person, including but not limited to an email address, a postal address and a phone number.
Data processing agreements
Our data processing commitments to visitors are set out in our privacy policy.
Deleting data
Any data you delete from our servers is deleted immediately or, where the data is backed up, within 30 days. When services are cancelled, data is destroyed within a maximum of 180 days. Customer data may be kept for up to 6 years to meet legal obligations. If you opt in to our marketing, we may keep your email address for that purpose until you opt out.
Data breach
Under the GDPR it is the data controller (the Hopp Tech client) that reports a data breach to the supervisory authority. As the data processor, Hopp Tech assists with the notification.
Glossary
| Data subject | A living person or individual. |
| Data controller | The organization that collects personal data and decides how it is processed, for example a Hopp Tech client. |
| Data processor | An organization that processes personal data on behalf of the data controller, for example Hopp Tech Ltd. |
| Personally identifiable information (PII) | Information that can identify a living individual. |
| Supervisory authority | The authority responsible for enforcing the regulation within a territory. In the UK it is the Information Commissioner’s Office (ICO). |
| Individual rights | The rights the GDPR gives individuals over their personal data. |
| Data breach | Intentional or accidental loss of, or damage to, personal data. |