Privacy Policy

This policy explains what personal data ADUMI collects, why we collect it, and what rights you have.

Last updated: [DATE]

Who we are

The data controller for your personal data is:

[COMPANY NAME]
CVR: [CVR NUMBER]
[ADDRESS, POSTCODE, CITY], Denmark
Email: [EMAIL]

You can contact us at any time about how we handle your personal data.

What data we collect and why

When you place an order

We collect your name, delivery and billing address, email address, phone number (if you provide it), and the details of your order. We use this to process your payment, deliver your order, send order confirmations and tracking information, and handle returns and complaints.

Legal basis: performance of a contract with you (GDPR Article 6(1)(b)). We also keep accounting records because the law requires it (Article 6(1)(c)).

Payments

Payments are handled by our payment providers through Shopify. We do not see or store your full card details.

When you contact us

If you email us or use the contact form, we collect your name, email address and your message, and use them to answer your question.

Legal basis: our legitimate interest in answering your enquiry (Article 6(1)(f)), or performance of a contract if you are a customer (Article 6(1)(b)).

Newsletter and marketing emails

If you sign up for our newsletter, we collect your email address and use it to send news about ADUMI products and offers. We only do this with your consent. You can unsubscribe at any time using the link in every email.

Legal basis: your consent (Article 6(1)(a)). Our email service provider is Klaviyo.

Reviews

If you write a product review, we collect your name, your review and the order it relates to, so we can show it as a verified review. Review requests are sent by [REVIEW APP, e.g. Judge.me / Klaviyo Reviews / Shopify].

Legal basis: our legitimate interest in collecting honest customer feedback (Article 6(1)(f)).

Website visits and cookies

When you visit our website, we automatically collect technical data such as your IP address, device and browser type, pages viewed and time spent. We use cookies and similar technologies to make the shop work (for example your cart), and, if you accept, to understand how the site is used [and to measure advertising, delete if you do not use ads].

Necessary cookies do not need your consent. For all other cookies we ask for your consent in the cookie banner, and you can change your choice at any time [add: via the cookie settings link in the footer].

Legal basis: your consent for non-essential cookies (Article 6(1)(a)); our legitimate interest in running and securing the shop for necessary cookies (Article 6(1)(f)).

Fraud prevention and security

We and our service providers may process technical and order data to detect and prevent fraud and misuse of the shop.

Legal basis: our legitimate interest in protecting our business and customers (Article 6(1)(f)).

Who we share your data with

We only share your data with companies that help us run the shop, and only as much as they need. These include:

• Shopify, which hosts our online shop, orders and checkout.
• Payment providers, which process your payment.
• Delivery companies ([CARRIER, e.g. GLS / PostNord / DAO]), which deliver your order.
• Klaviyo, which sends our emails.
• Analytics and review providers ([LIST THE TOOLS YOU USE, e.g. Google Analytics, Judge.me]).
• Accounting and IT providers, which help us with bookkeeping and support.

We also share data with public authorities when the law requires it. We never sell your personal data.

Transfers outside the EU/EEA

Some of our providers, such as Shopify and Klaviyo, may process data in countries outside the EU/EEA, including the USA. When this happens, we make sure there is a valid legal basis for the transfer, such as the EU Commission's standard contractual clauses or the EU-US Data Privacy Framework.

How long we keep your data

• Order and accounting data: 5 years after the end of the financial year, as required by the Danish Bookkeeping Act.
• Customer service messages: [e.g. up to 24 months after the case is closed].
• Newsletter: until you unsubscribe or withdraw your consent.
• Reviews: as long as the review is shown on the website, or until you ask us to remove it.
• Cookie data: as described in the cookie banner.

When we no longer need your data, we delete or anonymise it.

Your rights

Under the GDPR, you have the right to:

• Get access to the personal data we hold about you.
• Have incorrect data corrected.
• Have your data deleted, where we have no legal reason to keep it.
• Restrict how we use your data.
• Object to processing based on our legitimate interests.
• Receive your data in a common format (data portability).
• Withdraw your consent at any time. This does not affect processing done before you withdrew it.

To use any of these rights, email us at [EMAIL]. We aim to reply within one month.

Complaints

If you are not happy with how we handle your data, please contact us first so we can try to fix it. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet): www.datatilsynet.dk.

Children

Our shop is meant for adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed. If we make important changes, we will tell you in a clear way.

Questions?

Email us at [EMAIL] or use our contact form.