Privacy Policy
Last updated: 1 September 2026
Bary ("Bary", "we", "us", "our") collects, uses, stores and discloses information that may identify individuals ("personal data"). This policy covers visitors to heybary.com, our business contacts and customers, and people who apply for a job with us.
We are the data controller for the personal data described here.
Svveet ApS (Bary)
Bryghuspladsen 8, 1473 København, Denmark
CVR 40904581
hey@heybary.com
Each section below sets out what we collect, why, and on what legal basis under the General Data Protection Regulation.
Contents
- Website visitors
- Booking a demo or contacting us
- Business contacts we reach out to
- Customers and platform users
- Brand tracking surveys
- Search and AI data in the platform
- Job applicants
- Who we share data with
- International transfers
- How long we keep data
- Your rights
- Marketing
- External links
- Security
- Changes to this policy
- Contact
1. Website visitors
What we collect. Your IP address, browser and device type, operating system, the pages you visit and links you click, how long you stay, your screen resolution and browser language, the site you arrived from, and the campaign parameters in the link you used.
Why. To keep the site available and secure, to understand how it is used so we can improve it, and — where you have consented — to measure and target advertising.
Legal basis. Our legitimate interest in operating and securing the site, for cookies that are strictly necessary. Your consent for everything else, including performance and advertising cookies.
Cookies. Details of the specific cookies we set are in our Cookie Policy below. You can change or withdraw your consent at any time through the cookie settings on the site.
2. Booking a demo or contacting us
What we collect. Name, work email, company, job title, and anything you write to us. If you book a meeting, the time you selected and our notes from the conversation afterwards.
Why. To arrange and hold the meeting, answer your question, and follow up on a possible commercial relationship.
Legal basis. Steps taken at your request before entering a contract, and our legitimate interest in managing enquiries.
3. Business contacts we reach out to
What we collect. Name, job title, company, work email, and publicly available professional information. We may enrich this using third-party business data providers to keep our records accurate and complete.
Where it comes from. Publicly available sources and business contact databases.
Why. To contact you about Bary where we have reason to believe it is relevant to your professional role.
Legal basis. Our legitimate interest in business-to-business marketing. We have assessed that this interest is not overridden by your rights, because the data concerns you in a professional capacity only and the contact relates directly to your role. Where that assessment does not hold, we rely on your consent instead.
Your right to object. Reply to any message from us, or write to hey@heybary.com. We remove you and do not contact you again.
4. Customers and platform users
What we collect. Name, work email, job title, company, login credentials, and log data about use of the platform.
Why. To provide and support the service, administer the contract, issue invoices and collect payment, and to understand how the platform is used so we can improve it.
Legal basis. Performance of a contract, our legal obligation to keep accounting records, and our legitimate interest in developing our products.
5. Brand tracking surveys
Bary measures brand perception through consumer panel surveys. We want to be precise about what this involves.
All surveys are fielded by a third-party panel provider, who recruits, compensates and manages the respondents and is the controller of their personal data. Bary does not process respondent contact details or any other information that identifies an individual. We receive anonymised survey responses that do not constitute personal data under applicable privacy law.
Surveys are conducted with the informed, freely given and explicit consent of respondents.
We work with our provider to ensure survey data remains anonymised throughout its use. While we analyse patterns and trends in that data, we do not attempt — or permit any attempt — to re-identify respondents, and we do not combine the data with other datasets in any way that could lead to re-identification.
Demographic attributes such as age bracket, gender and region are used to weight and segment results. They are never used to single out an individual.
6. Search and AI data in the platform
Where a customer connects Google Search Console, we process aggregated search demand data for that customer's domain. It contains no personal data.
Our AI visibility measurement sends queries to third-party language models and records the responses. These queries concern brands and product categories and contain no personal data.
7. Job applicants
If you apply for a job with us, we process the information in your application, anything we receive from a recruitment provider, and — with your permission — from your references.
Why. To assess your application and manage the recruitment process.
Legal basis. Steps taken at your request before entering an employment contract, and our legitimate interest in running a fair recruitment process.
How long. Six months after the process ends, unless you agree to us keeping your application on file for future openings.
8. Who we share data with
Service providers. We use third parties to run our IT systems, host our website and platform, manage our customer records, and send email. They act on our instructions under written agreements requiring confidentiality, use of the data only for the service they provide to us, and compliance with data protection law. A current list of our sub-processors is available on request.
Payment and banking providers, to process payments.
Authorities, where we are required by law to disclose information. We check every request from law enforcement or a regulator carefully before disclosing anything.
Aggregated statistics about website traffic and usage may be shared with partners in a form that does not identify anyone.
In a corporate transaction. If we sell or transfer all or part of our business or assets, we may transfer personal data to the buyer as part of that transaction. Any buyer will be bound by this policy.
We do not sell personal data.
9. International transfers
We process and store personal data within the EU/EEA wherever possible. Some of our providers operate outside the EU/EEA. Where data is transferred outside the EU/EEA, we rely on an adequacy decision from the European Commission or on Standard Contractual Clauses with the safeguards those clauses require.
Write to hey@heybary.com if you want details of a specific transfer.
10. How long we keep data
We keep personal data only for as long as it is needed for the purpose it was collected for, or as long as the law requires.
| Data | Retention |
|---|---|
| Website analytics | Up to 14 months |
| Enquiries and demo bookings | Two years from last contact |
| Business contacts we approached | Twelve months from last contact, or immediately on request |
| Customer records | Duration of the agreement, then five years from the end of that financial year, as required by the Danish Bookkeeping Act |
| Job applications | Six months after the process ends |
We may keep data longer where we need an accurate record in the event of a complaint, or where we reasonably believe litigation is possible. When data is no longer needed, we delete it securely or anonymise it so it can no longer be used.
11. Your rights
Depending on the processing in question, you have the right to:
- Access the personal data we hold about you and receive a copy of it.
- Correct data that is inaccurate or incomplete.
- Erase your data in certain circumstances.
- Restrict our processing while a dispute about accuracy or legitimate interest is resolved.
- Port data you have given us, in a machine-readable format, where processing is based on consent or contract.
- Object to processing based on legitimate interest. Where you object to direct marketing, we stop — there is no balancing test.
- Withdraw consent at any time, where consent is the basis we rely on.
Write to hey@heybary.com. We respond within one month. If your request is complex or you have made several, we may need up to two further months, and we will tell you if that is the case. There is no charge unless a request is manifestly excessive.
You can also complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, dt@datatilsynet.dk. We would appreciate the chance to resolve the matter with you first.
12. Marketing
We keep direct marketing proportionate and relevant. In most cases it is based on legitimate interest; in some cases on your consent.
You can opt out of email marketing at any time using the unsubscribe link or by writing to us. When you unsubscribe, your address is moved to a suppression list so it is not added back by mistake. If you want the data deleted entirely rather than suppressed, we will do that — but then nothing prevents the address being added again if it re-enters our systems later.
Opting out of marketing does not stop service communications relating to a contract you have with us.
13. External links
Our site links to third-party sites. We are not responsible for their privacy practices, and we encourage you to read their policies. This policy covers only data collected by us.
14. Security
Access to personal data is limited to those who need it for their work. Data is encrypted in transit and at rest, access to the platform database is separated per customer, and administrative accounts require multi-factor authentication. We review access rights regularly.
Security also depends on your own device and your handling of login credentials. Please protect both.
15. Changes to this policy
We update this policy when our processing changes or the law requires it. The current version is always published here with the date of the last change at the top. Where a change materially affects how we process your data, we publish it before it takes effect.
16. Contact
Questions, requests or complaints: hey@heybary.com.
Cookie Policy
Last updated: 1 September 2026
This part of the policy explains how we use cookies and similar technologies on heybary.com, and what choices you have. Where cookies amount to personal data, the rights described above apply to them too.
What cookies are
Cookies are small text files stored on your device when you visit a website. They make sites work, remember your choices, and tell site owners how their site is used.
Some are session cookies, which disappear when you close your browser. Others are persistent cookies, which stay on your device and are read again on your next visit.
The cookies we use
Strictly necessary. Required for the site to function — page delivery, security, and remembering your cookie choices. The site cannot work without them, so they are set without consent.
Performance. These tell us which pages are visited, how long people stay, and where errors occur, so we can improve the site. Set only with your consent.
Functionality. These remember choices you make, such as language or region. Set only with your consent.
Advertising. These let us measure the effect of our advertising and show ads to people who have visited the site. They record which pages you visited, and that information may be shared with the advertising platform. Set only with your consent.
Third-party cookies
Some cookies are set by others, not by us.
| Provider | Purpose |
|---|---|
| Google Tag Manager | Loads the tools we use. Sets no tracking cookies of its own. |
| Measures the effect of our LinkedIn advertising and enables us to show ads to people who have visited the site. | |
| HubSpot | Runs our demo booking. Distinguishes visitors and remembers a booking in progress. |
These providers use the information they collect under their own policies. We recommend reading them if you want to know more.
Your choices
We ask for your consent before setting any cookie that is not strictly necessary. You can change or withdraw that consent at any time through the cookie settings on the site.
Most browsers also let you block or delete cookies directly, or warn you before one is set. How you do that depends on your browser. Blocking cookies may stop parts of the site from working as intended.
Changes
We update this part of the policy when our use of cookies changes. The date of the last change is shown above.
Contact
Questions about cookies: hey@heybary.com.