Privacy Policy
Last updated: 10.10.26
Your privacy matters to us. This policy explains what personal data Clobys Shop collects when you visit [website address] or buy from us, why we collect it, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Danish data protection law.
1. Who Is Responsible for Your Data
The data controller is: Clobys.
Email: support@clobys.com
2. What Data We Collect• Order and customer data: name, delivery and billing address, email address, phone number, order history.• Payment data: payment is handled by our payment provider. We receive confirmation of payment but do not store your full card details.• Account data: if you create an account, your login details and saved preferences.• Communication data: messages you send us by email, contact form, or chat.• Technical data: IP address, browser type, device information, pages visited, and cookie data.• Marketing data: your email address and preferences if you sign up for our newsletter.
3. Why We Use Your Data and Our Legal Basis Purpose
Legal basis (GDPR)Processing and delivering your orders, handling returns and complaintsPerformance of a contract (Art. 6(1)(b))Keeping accounting records as required by Danish bookkeeping lawLegal obligation (Art. 6(1)(c))Customer service and replying to your enquiriesLegitimate interest (Art. 6(1)(f)) or contractFraud prevention and website securityLegitimate interest (Art. 6(1)(f))Sending newsletters and marketing emailsConsent (Art. 6(1)(a))Analytics and marketing cookiesConsent (Art. 6(1)(a))
4. Who We Share Your Data With
We only share data where necessary, with:• Wix.com, which hosts our website and online store• Payment providers [e.g. Stripe, Wix Payments]• Shipping carriers [e.g. PostNord, GLS, DAO, DHL, FED] to deliver your order• Email and marketing services [e.g. Wix Email Marketing, Mailchimp]• Accounting and IT service providers [e.g. e-conomic, Dinero]• Public authorities, where required by lawThese providers act on our instructions under data processing agreements or have their own legal basis for processing. We do not sell your personal data.
5. Transfers Outside the EU/EEASome providers (including Wix and analytics or marketing services) may process data outside the EU/EEA. In those cases, we make sure appropriate safeguards are in place, such as the EU–US Data Privacy Framework or EU Standard Contractual Clauses.
6. How Long We Keep Your Data• Order and invoice data: 5 years after the end of the financial year, as required by the Danish Bookkeeping Act.• Customer account data: until you delete your account or ask us to.• Newsletter data: until you unsubscribe or withdraw consent.• Customer service emails: [up to 2 years] after the case is closed.• Cookie data: according to the cookie lifetimes listed in our cookie banner.When the retention period ends, we delete or anonymise the data.
7. Cookies
Our website uses cookies. Necessary cookies keep the shop working (for example, your shopping cart). Analytics and marketing cookies are only set if you give consent through our cookie banner. You can change or withdraw your consent at any time via [cookie settings link] or in your browser settings.
8. Your RightsYou have the right to:• Access the personal data we hold about you• Correct inaccurate or incomplete data• Delete your data ("right to be forgotten"), where we have no legal reason to keep it• Restrict processing in certain cases• Object to processing based on legitimate interest, and to direct marketing at any time• Data portability: receive your data in a common, machine-readable format• Withdraw consent at any time, without affecting earlier processingTo use your rights, email [email address]. We will respond within one month.
9. SecurityWe use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, and trusted service providers. No system is completely secure, but we work to protect your information and will notify you and the authorities if a data breach affects your rights, as required by law.
10. Children
Our shop is not directed at children under 15, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
11. ComplaintsIf you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.
12. Changes to This PolicyWe may update this policy from time to time. The latest version is always available on this page with the date shown at the top.Clobys Email: support@clobys.com