Privacy Policy

Last Updated: October 2025

Welcome to hyggebites.shop (“we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or make a purchase from hyggebites.shop (the “Site”).

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Danish data protection law, including the Danish Data Protection Act (Databeskyttelsesloven).

1. Data Controller

The data controller responsible for the processing of your personal data is:

hyggebites.shop
Frederikssundsvej 148, st th
2700 København
Denmark

Email: info@hyggebites.shop

2. Information We Collect

We may collect the following types of personal data:

Personal Information:
Your name, billing and delivery address, email address, and phone number when you place an order, contact us, or create an account.

Payment Information:
Billing and payment-related information necessary to process your order. Payment card details are processed securely by our payment provider. We do not store full card details on our systems.

Order Information:
Information about your purchases, delivery preferences, order history, returns, refunds, and customer service requests.

Account Information:
If you create an account, we may process your login details, account preferences, and saved order information.

Communication Information:
Messages, emails, or other communications you send to us, including customer support enquiries.

Cookies and Usage Data:
Technical information such as IP address, browser type, device information, pages visited, referral source, session activity, and cookie identifiers.

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

To process and deliver your orders.
Legal basis: Performance of a contract.

To manage payments, refunds, and fraud prevention.
Legal basis: Performance of a contract and our legitimate interests.

To communicate with you about your order or customer service enquiries.
Legal basis: Performance of a contract or our legitimate interests.

To create and manage your customer account.
Legal basis: Performance of a contract or your consent, depending on the account function.

To improve our website, products, and customer experience.
Legal basis: Our legitimate interests or your consent where required.

To send marketing emails, offers, or promotions.
Legal basis: Your consent. You may withdraw your consent at any time.

To comply with accounting, tax, consumer protection, and other legal obligations.
Legal basis: Compliance with legal obligations.

4. Cookies

Our Site uses cookies and similar technologies to make the website function properly, improve your browsing experience, analyse website traffic, and, where applicable, personalise content or marketing.

Some cookies are necessary for the Site to function and cannot be disabled through our cookie tools. Non-essential cookies, such as analytics or marketing cookies, will only be used where required after you have given your consent.

You can change or withdraw your cookie consent at any time through the cookie settings on our Site, where available. You can also disable cookies in your browser settings, but some features of the Site may not work properly without them.

For general information about cookies, you may visit:
https://www.aboutcookies.org

5. How We Share Your Information

We only share your personal data where necessary and with trusted third parties that help us operate our business, including:

Payment Processors — to handle secure transactions.
Delivery and Shipping Partners — to deliver your orders.
IT, Hosting, and Website Service Providers — to operate and maintain our Site.
Analytics Providers — to help us understand how our Site is used, where you have consented where required.
Professional Advisers — such as accountants or legal advisers, where necessary.
Public Authorities — where required by law.

We do not sell or rent your personal data to third parties.

6. International Transfers

Some of our service providers may process personal data outside Denmark or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will ensure that appropriate safeguards are in place, such as an adequacy decision by the European Commission or Standard Contractual Clauses approved by the European Commission, where required by applicable law.

7. Data Retention

We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy.

Order, payment, and accounting information may be retained for the period required under applicable Danish bookkeeping, tax, and legal obligations.

Marketing data will be kept until you withdraw your consent or unsubscribe.

Customer service communications may be retained for as long as necessary to handle your enquiry, resolve disputes, and document our communication.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights:

The right to access the personal data we hold about you.
The right to request correction of inaccurate or incomplete data.
The right to request deletion of your personal data.
The right to request restriction of processing.
The right to object to certain types of processing, including direct marketing.
The right to data portability, where applicable.
The right to withdraw consent at any time, where processing is based on consent.
The right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us at:

info@hyggebites.shop

We may need to verify your identity before responding to your request.

9. Marketing Communications

We will only send you marketing emails, offers, or promotions if you have given your consent, where required by law.

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in our emails or by contacting us at:

info@hyggebites.shop

Withdrawing consent will not affect the lawfulness of processing carried out before the withdrawal.

10. Security

We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We therefore cannot guarantee absolute security.

11. Children’s Privacy

Our Site is not intended for children, and we do not knowingly collect personal data from children without appropriate parental or guardian consent where required by law.

If you believe that a child has provided us with personal data, please contact us at info@hyggebites.shop so that we can take appropriate action.

12. Complaints

If you are unhappy with how we process your personal data, please contact us first so we can try to resolve the matter.

You also have the right to lodge a complaint with the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark

Website: https://www.datatilsynet.dk

13. Updates to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our Site, with the “Last Updated” date shown at the top.

14. Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please contact us:

Email: info@hyggebites.shop

Address:
hyggebites.shop
Frederikssundsvej 148, st th
2700 København
Denmark