Privacy policy

Who is responsible for your information

Hygge by Scandinavia is operated by Brainzeeder.
Business registration number (Danish CVR): 44721074
Business address: Nylandsvej 7, 9000 Aalborg, Denmark
Email: info@hyggebyscandinavia.com
Telephone: +45 22 33 82 86

Brainzeeder is the controller for the personal information used to operate this store, fulfil orders and communicate with you. This policy covers our website and related customer service and marketing. Last updated: 10 October 2026.

Information we collect

We collect information you provide when you order, contact us, create an account or subscribe, including your name, email, telephone number, billing and delivery addresses, order details and messages. We receive payment status and limited transaction information from payment providers; full card details are handled by those providers.

When you visit the website, technical information may include your IP address, device and browser details, pages viewed and cookie identifiers. Information can come from you, from Shopify and payment or delivery providers, and from cookies or similar tools when enabled. If someone orders a gift for you, we may receive your delivery details from that person.

Purposes and legal bases

We use order and contact details to enter into and perform your purchase contract, take payment, arrange production and delivery, and handle returns and complaints. We retain required transaction records to comply with legal obligations, including bookkeeping.

We may use information to secure the store, prevent fraud, answer enquiries and establish or defend legal claims on the basis of our legitimate interests, balanced against your rights. Where appropriate, an enquiry is also processed to take steps at your request before a contract.

We send marketing communications with your consent where required, or under another basis expressly permitted by the applicable marketing rules. You can unsubscribe in each marketing email or contact us. We use optional analytics and advertising cookies only with consent where required. Withdrawing consent does not affect processing already lawfully carried out.

Who receives information

We share only the information needed for the relevant service with Shopify for store hosting and checkout, payment providers, production and fulfilment partners, carriers, customer communication and review providers, and professional advisers. Depending on the product, fulfilment may involve Gelato, Prodigi or ShineOn. Customer communication may involve Klaviyo, and review services may involve Trustpilot. Analytics tools, including Microsoft Clarity when enabled, process technical and usage information subject to applicable consent requirements.

Providers may act as processors or independent controllers depending on their service. We may disclose information to authorities when legally required or where necessary to protect lawful rights. We do not give marketing partners unrestricted access to your order information.

Cookies and privacy choices

Necessary cookies support functions such as checkout and security. Optional analytics or advertising tools may use cookies and similar identifiers to understand visits or measure and personalise advertising. Where consent is required, you can choose whether to allow these tools and later change your choice through the site's cookie controls.

Depending on the tools enabled and the law that applies to you, disclosing identifiers or activity information for advertising can qualify as a sale or sharing of personal information, including for cross-context behavioural advertising. Use this policy and our Your Privacy Choices page to learn about and exercise available opt-outs. You may also contact us to opt out. Where applicable law requires it, we honour recognised opt-out preference signals such as Global Privacy Control.

Storage and international transfers

We keep personal information only as long as needed for the stated purpose or a legal requirement. Danish bookkeeping records are generally retained for five years from the end of the financial year they concern. Not all customer information is kept for that period: enquiries, technical information and account data are retained according to the need to provide support, maintain an active account, keep the site secure or handle an outstanding claim.

Marketing information is kept while the subscription remains active or another lawful marketing basis applies. After an opt-out, we may retain the minimum information needed to respect it. Claims or legal obligations can require longer retention of relevant records.

Some providers process information outside the EU/EEA. Where GDPR transfer rules apply, transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and any required supplementary measures. Contact us for information about safeguards relevant to your data.

Your rights

Under the GDPR, you may request access, correction, erasure, restriction and, where applicable, data portability. You may object to processing based on legitimate interests and always object to direct marketing. You may withdraw consent at any time.

Depending on your US state or other applicable law, you may also have rights to know the categories and specific information collected, correct or delete information, receive a copy, and opt out of sale, sharing or targeted advertising. Where applicable, you may appeal our response by replying to it and asking for a review. We do not discriminate against you for exercising your rights.

Send requests to info@hyggebyscandinavia.com. We may ask for information reasonably necessary to verify your identity, or an authorised agent's authority, and respond within the applicable legal deadline. Legal exceptions may require us to retain some records even after a deletion request.

Complaints and security

You may complain to the Danish supervisory authority, Datatilsynet, or the competent privacy authority where you live or work. Please also contact us if you have concerns so we can investigate.

We use appropriate technical and organisational measures to protect information. The store is not directed at children, and we do not knowingly collect children's information for marketing. Contact us if you believe a child has supplied information requiring special protection.

We update this policy when our processing changes. Material changes requiring a new consent will not take effect for that processing without the necessary consent.