Privacy policy

Privacy Policy

This privacy policy explains how we collect, use, and protect your personal data when you purchase our products or use our services. We respect your privacy and comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant laws and regulations.

What personal data do we collect and why?

We collect personal information that you provide to us when you register on our online platforms, place an order, subscribe to our newsletter, contact us, or participate in our surveys or campaigns. This may include your name, email address, phone number, postal address, payment details, and preferences.

Additionally, if you opt in to our SMS service, you will receive marketing via SMS. You can read more about our message terms and privacy policy.

We use your personal data for the following purposes:

  • To process and deliver your order and assist you with any issues.
  • To communicate with you about our products, services, offers, and events.
  • To improve and personalize our products and services for you.
  • To conduct market research and analyze the effectiveness of our marketing.
  • To detect and prevent fraud, abuse, or illegal activities and protect our rights and property.
  • To comply with legal and tax obligations and maintain accurate and up-to-date records of our financial transactions and reporting.
  • To use the data for accounting purposes, such as recording, reporting, analyzing, and auditing our income, expenses, assets, liabilities, and cash flow.

We may also use your data for targeted marketing, but only if you have consented to this.

Apps and Data Processing

We use the following apps, which collect and process data to improve your experience and optimize our services. These apps comply with GDPR and CCPA, and we use the Pandectes GDPR solution to ensure cookie management and legal compliance:

  • Pandectes GDPR Compliance: Manages cookie banners and user consent in line with GDPR and CCPA. Read more
  • TinyIMG: SEO & Speed: Optimizes image performance and loading speed, potentially collecting anonymous usage data. Read more
  • Klaviyo: Email Marketing & SMS: Collects data like name, email, and behavior for marketing services. Read more
  • Vipps/MobilePay: Used for payment processing, collecting payment details and transaction data. Read more
  • Google & YouTube: Used for analytics, advertising, and Google service integration. Collects IP addresses and interaction data. Read more
  • AfterShip Order Tracking: Collects name and email to send shipment tracking updates. Read more
  • Matrixify: Handles import/export of order and customer data in CSV/Excel. All data is processed securely and used internally. Read more

How do we protect your personal data?

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. This includes encryption, firewalls, password protection, and other security tools and procedures. Access to personal data is restricted to staff, partners, and service providers who need it to perform their work and are obligated to maintain confidentiality.

How long do we retain your personal data?

We retain your personal data as long as necessary to fulfill the purposes we collected it for, or as required by law. We delete or anonymize your data when no longer needed, or when you request us to do so.

Your rights and choices

You have the following rights and choices regarding your personal data:

  • View, update, or correct your personal data anytime via your account or by contacting us.
  • Request a copy of your personal data or have it transferred to another provider.
  • Withdraw your consent or object to our data processing by contacting us or updating your preferences.
  • Unsubscribe from marketing emails or newsletters via the unsubscribe link or by contacting us.
  • Delete your account or request that we delete your personal data by contacting us.
  • Lodge a complaint with your local data protection authority if you're unsatisfied with our handling of your data.

Additional Information for California Residents (CCPA)

This section applies to residents of California under the California Consumer Privacy Act (CCPA).

  • Right to know: You have the right to know what personal data we collect, use, share, or sell.
  • Right to delete: You may request the deletion of your personal data, subject to certain exceptions.
  • Right to opt-out: You may opt out of the sale of your personal information.
  • Non-discrimination: We do not discriminate against users exercising their rights under CCPA.

We do not sell your personal data to third parties.

You can exercise your rights by contacting us at contact@collexylux.dk or using our opt-out page here.

Request access, export, or deletion of your data (GDPR & CCPA)

In accordance with GDPR and CCPA, you have the right to request access to, export of, or deletion of any personal data we hold about you.

You can easily submit your request through our customer data request page. Once submitted, we will process your request as quickly as possible.

If you have questions or encounter issues, feel free to contact us directly at contact@collexylux.dk.

How do we update our privacy policy?

We may update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. We will notify you of any significant changes.