Privacy policy

Privacy Policy

This Privacy Policy explains how ELARA CPH collects, uses, and protects your personal data when you visit elaracph.com or place an order with us. We take your privacy seriously and only collect what we need to deliver a great experience.

Data controller

ELARA CPH is the data controller for the personal data collected through this website.

  • Company: ELARA CPH
  • CVR: 46385322
  • Address: Kløvermarksvej 2.2.1, 8200 Aarhus N, Denmark
  • Email: hello@elaracph.com

What data we collect

When you place an order:

  • Name, email, phone number
  • Shipping and billing address
  • Order details and order history
  • Payment confirmation (full payment data is handled by our payment providers and never stored on our servers)

When you create an account:

  • Email and password
  • Saved shipping addresses and order history

When you sign up for marketing:

  • Email address (for newsletters)
  • Phone number (for SMS, only if explicitly consented)
  • Engagement data (which emails you open, what you click)

When you browse our site:

  • IP address, browser type, device information
  • Pages visited, time spent, products viewed
  • Referral source (how you found us)

Why we collect it (legal basis)

Purpose Legal basis
Processing and fulfilling your order Contract (GDPR Art. 6(1)(b))
Sending order confirmations and shipping updates Contract (GDPR Art. 6(1)(b))
Bookkeeping and accounting records Legal obligation (Danish Bookkeeping Act)
Sending newsletters and marketing Consent (GDPR Art. 6(1)(a))
Sending SMS marketing Consent (GDPR Art. 6(1)(a))
Improving our website and product range Legitimate interest (GDPR Art. 6(1)(f))
Fraud prevention Legitimate interest (GDPR Art. 6(1)(f))

How long we store your data

  • Order and customer data: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act (Bogføringsloven)
  • Marketing data (email/SMS): Until you withdraw your consent or unsubscribe
  • Account data: Until you delete your account
  • Browsing and analytics data: Up to 26 months

Who we share your data with

We never sell your personal data. We share data only with the trusted providers we use to run our business:

  • Shopify — our e-commerce platform (order processing, customer accounts)
  • Klaviyo — email and SMS marketing
  • Payment providers (Shopify Payments, MobilePay, Klarna, etc.) — payment processing
  • Shipping providers (GLS, PostNord, DHL, Shipmondo) — order delivery
  • Analytics providers (Google Analytics, Meta Pixel) — website performance and marketing measurement

All providers act as data processors and are contractually bound to handle your data in line with GDPR. Some providers are based outside the EU/EEA — in those cases, we rely on the EU Standard Contractual Clauses or equivalent safeguards to protect your data.

Cookies

We use cookies to improve your experience, remember your preferences, and measure how our site performs. You can manage your cookie preferences at any time via the cookie banner on our site or your browser settings. Disabling cookies may affect parts of the site's functionality.

Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data ("right to be forgotten")
  • Restrict how we process your data
  • Port your data to another provider in a machine-readable format
  • Object to processing based on legitimate interest
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email us at hello@elaracph.com. We will respond within 30 days.

Marketing opt-out

You can unsubscribe from email marketing at any time via the unsubscribe link in any of our emails. To stop SMS marketing, reply STOP to any SMS we send you.

Security

We take appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse. All data transmitted to and from our website is encrypted using SSL.

Complaints

If you believe we have handled your personal data improperly, please contact us first at hello@elaracph.com. You also have the right to lodge a complaint with the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
www.datatilsynet.dk

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the date of the most recent update.

ELARA CPH
CVR: 46385322
Kløvermarksvej 2.2.1
8200 Aarhus N, Denmark
hello@elaracph.com