Privacy Policy

Introduction

This Privacy Policy applies to the activities performed by Queue-it as a data controller. This Privacy Policy explains how Queue-it collects and uses your personal data. It also describes your rights towards us and how to exercise them. You may always reach out to us on matters of privacy and data protection by sending an email to privacy@queue-it.com.

We may amend this Privacy Policy from time to time. If we amend the Privacy Policy, we will revise the date and version number and publish the amended version on our website on its effective date. We encourage you to review the Privacy Policy to stay informed about our privacy practices.

Who are we

Queue-it ApS is a company incorporated and registered in Denmark with company number DK 33052901 whose registered office is at Skelbækgade 2-4, 1717 Copenhagen V, Denmark. We use “we”, “us”, “our”, etc. to describe our company.

For any processing of personal data according to this policy, you can contact us at: privacy@queue-it.com.

When referencing our “website,” we mean www.queue-it.com, and the other sites and services we own and operate.

Representative in the UK

We have appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

United Kingdom (UK)

Prighter gives you an easy way to exercise your privacy-related rights (e.g., requests to access or erase personal data). If you want to contact us via our representative Prighter regarding processing of personal data relating to UK, or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/19240183051.

Links to other websites

Our website may contain links to other websites or to integrated sites. We are not responsible for the contents of the websites of other companies or for the practices of such companies regarding the collection of personal data. When you visit other websites, you should read the owners' policies on the protection of personal data and other relevant policies.

What information do we collect?

You may directly or indirectly give us information about yourself in a variety of ways.

Typical examples are:

Create a customer profile on our platform or website.
When you visit our website.
Purchase or use our Services.
Complete a survey or provide comments, opinions or feedback.
Request digital resources.
Participate in events, webinars, and promotions.
Communicate with us via third-party social media sites.
Request customer support.
Request email notifications about our sub-processors.
Send us emails, chat messages or otherwise interact with us.

This is an overview of where we collect your personal data from:

Directly from you
Online sources, e.g., publicly available social media (LinkedIn)
Public authorities

Job-candidate data

This Privacy Policy does not apply to information about you collected as part of the recruitment process for employment at Queue-it. For our Privacy Policy for recruitment, follow this link. In some instances, we use third-party recruitment partners to support us in our hiring process. In these instances, a separate privacy notice will be sent to the candidate by the third-party.

What do we do with your information?

The data you give us, or we collect, is used to offer, provide, operate, and improve Queue-it’s services.

We process your data for marketing-related purposes, incl. sending you offers and newsletters, doing demos and webinars, tailoring our communication with you to accommodate your areas of interest, and send you relevant products and promotions, and offers.

Here is some of the data we process for marketing purposes:

Your contact details, such as name, email, title, and telephone/mobile number
The company you work for, incl. their domain, address, and country
Purchase history, interest areas, and use of our digital services

What we DO NOT do with your data

We do not sell your personal details to any third parties.

Legal basis for processing personal data

We process personal data for the purposes described in this Privacy Policy based on the legal bases set out in the matrix below. Where more than one legal basis could apply, we will rely on the basis that is most appropriate for the specific processing activity.

Purpose of processing	Processing activity	Legal basis (GDPR)	Example of processors (sub-processors) used for this purpose	Third-country transfer (if relevant)
Provide, operate and deliver our Services and website	Create and manage customer profiles; provide access to and operate our Services; administer accounts; provide requested resources; manage purchases and billing.	Art. 6(1)(b) – performance of a contract	Microsoft Azure (hosting and analytics platform provider)	N/A
Customer support and business communications	Respond to questions and requests; provide customer support; handle feedback; facilitate communications with you.	Art. 6(1)(f) – legitimate interests (customer service and business communications)	Zendesk (customer support)	USA
Service and operational messages	Send service announcements, security and maintenance notices, and other messages necessary to operate the Services.	Art. 6(1)(f) – legitimate interests; and where applicable Art. 6(1)(c) – legal obligation	Twilio SendGrid (service emails)	USA
Marketing, demos, webinars, events and promotions	Send newsletters and offers; invite you to demos/webinars/events; tailor marketing communications to your interests; measure campaign effectiveness.	Art. 6(1)(a) – consent (where we ask you to sign up); otherwise Art. 6(1)(f) – legitimate interests (direct marketing, subject to opt-out)	HubSpot (host & collect data from web forms, email marketing to customers & prospects)	USA
Analytics, statistics, surveys, and service improvement	Compile statistics; conduct surveys; analyze use of our website and digital services; improve and develop our products and Services.	Art. 6(1)(f) – legitimate interests; where required for non-essential cookies/trackers, Art. 6(1)(a) – consent	Hotjar (website analytics); Typeform (surveys)	USA
Personalisation and enhanced user experience	Personalise content, features and communications; remember preferences; provide tailored content on our website where applicable.	Art. 6(1)(f) – legitimate interests; where required for non-essential cookies/trackers, Art. 6(1)(a) – consent	Google Analytics and related cookies/trackers (as applicable)	N/A
Security, fraud prevention and abuse monitoring	Protect the website and Services, including against spam requests and bots; detect and prevent misuse; maintain network and information security.	Art. 6(1)(f) – legitimate interests (security and fraud prevention)	Microsoft Azure (hosting/security tooling)	N/A
Compliance with law and regulatory requests	Keep records required by law; respond to lawful requests from public authorities; comply with accounting, tax and other statutory requirements.	Art. 6(1)(c) – legal obligation	Dropbox (record keeping)	USA
Establish, exercise or defend legal claims	Handle disputes; enforce agreements; protect our legal rights, including in connection with litigation or regulatory matters.	Art. 6(1)(f) – legitimate interests; and where special category data is involved, Art. 9(2)(f)	Dropbox (record keeping); customer support tooling (e.g. Zendesk) (as applicable)	USA

Where do we store your personal data?

We always strive to process your data within the region it is collected or within the EU/EEA area. The data is, however, in certain situations, transferred to and processed in the USA by a sub-processor. Queue-it has taken all reasonable legal, technical, and organizational measures to ensure that your data is treated securely and with an adequate level of protection. This includes the lawful mechanisms Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. If you want additional information about our transfer of personal data outside the EU and EEA, including a copy of the relevant security measures, etc., you can make a request for such additional information by contacting us at privacy@queue-it.com.

How long do we keep your personal data?

We keep your data only as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. We apply the following general principles to determine how long data is kept:

The nature and sensitivity of the personal data.
The potential risk of harm from unauthorized use or disclosure.
The purposes for which we process your personal data and whether those purposes can be achieved through other means.
Any applicable legal or regulatory requirements.

We may anonymize data to process and store for a longer period for analytical and reporting purposes.

Your rights and choices related to the information we collect

If you represent a customer, you can review and change your personal information by logging into your account profile page.

If you are not a customer representative or cannot access your personal information through an account profile, you may also send us an email at privacy@queue-it.com to request access to, request correction of incorrect data, or erasure of any personal information.

Please be aware that in some situations, we cannot delete your personal information except by also deleting your user account.

Right to access your data. You may request a transcript of records if you would like to know and verify your personal information that we process.
Right to rectification. You have the right to correct inaccurate or incomplete information about yourself.
Right to deletion (“right to be forgotten”). You have the right to request the deletion of your personal data insofar as this personal data is no longer necessary for the purpose it was collected. For Californian citizens, the information will be deleted upon request.
Right to restrict processing. In certain circumstances, you have the right to request that we restrict the processing of your personal data.
Right to data portability. You have the right to receive information about you that you have provided to us, and the right to have this information transmitted to another data controller.
Right to object to the processing. You have the right to object to the collection and further processing of your personal data.
Right to object to direct marketing. If personal data is processed for direct marketing, you have the right at any time to object to the processing of your personal data for such marketing.

Providing personal data is voluntary; however, if you do not provide certain data, we may be unable to supply the requested service/content.

We will make sure to answer any reasonable and relevant request without undue delay and in any event within one month of receiving your request at privacy@queue-it.com. In certain instances, the period will be extended by two months if your request is complex.

Withdrawal of consent

You may, at any time, withdraw any consent given, and we will, accordingly, cease processing your personal data. For the avoidance of doubt, withdrawal of your consent may limit or exclude your access to our services. If you withdraw your consent, the withdrawal will not affect the lawfulness of processing that has already been carried out based on your consent.

Contact

For issues relating to your rights to access, rectification, and deletion, please contact us at privacy@queue-it.com.

Sharing of personal data

We may share information about you as follows or as otherwise described in this Privacy Policy:

In response to a request for information from public authorities or other third parties, if we believe disclosure is in accordance with applicable legal requirements.
In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
With your consent or at your direction if required by applicable laws.
In connection with provision of services by a third-party that needs access to your personal information to perform services for us (“sub-processors“). For more information on sub-processors, please refer to "Third parties and sub-processors".
Between and among Queue-it and our current and future parents, subsidiaries, and other companies under common control and ownership.
Anonymized data may be processed and shared for a longer period for statistical purposes.

Third parties and sub-processors

We use external companies and suppliers (sub-processors) to assist us in delivering our services. We may share your data:

To contractors, service providers, and other third parties, which we may use to support our business, and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of the Queue-it company group’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Queue-it about the Website and Service users is among the assets transferred.
For any other purpose disclosed by us when you provide the information.
To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our terms of use and other agreements, including for billing and debt collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Queue-it or others. This might include exchanging information with other companies and organizations for fraud protection and credit risk reduction.

When we use a sub-processor, we make sure that there is a data processing agreement (DPA) in place regarding how they will be handling data on our behalf. The sub-processors may only process your personal data in accordance with the instructions given by Queue-it. The sub-processors will not share, sell, or otherwise distribute any personal information governed by the DPA. All sub-processors have implemented security measures to protect against unauthorized access, loss, use, or alteration of the information we share.

What about cookies and similar tracking technologies?

We use cookies and similar technologies to deliver a tailored and smooth online experience. For detailed information about how Queue-it uses cookies and similar technologies, please read our cookie statement: https://queue-it.com/cookie-statement/

Security

We have implemented security measures to ensure that our internal procedures meet our high security policy standards. Accordingly, we strive to protect the quality and integrity of your information. Our security measures include:

Encryption: We may encrypt your data where appropriate to protect it. Encryption transforms data into an unreadable format.
Data Backup: We maintain regular backups of our systems and data to help prevent data loss.
Monitoring: We continuously monitor our systems for potential security breaches.

Furthermore, we adhere to the ISO 27001 security standard and are independently certified. Our certificate is subject to annual surveillance audits, and a copy of the certificate and scope is available on request.

You can read more about our security measures at Queue-it’s trust center here: https://queue-it.com/trust-center/

Complaints

If you wish to appeal against the processing of your personal data, please contact us at privacy@queue-it.com. You may exercise your right to complain by contacting the Danish Data Protection Agency, Carl Jacobsens Vej 35, 2500 Valby, Denmark.

Visit https://queue-it.com/ for further information on Queue-it.

This Privacy Policy was last updated on 23rd January 2026.

Download the Privacy Policy