Privacy policy

Who is responsible

Trefalke, Theodore Roosevelts vej 1, 2450 København SV, is the data controller. Contact us at trefalke@trefalke.com about anything in this policy.

What we collect

• Order details: your name, email address, phone number, delivery address and what you ordered.
• Payment confirmation and amounts from Stripe. Card details are entered on Stripe and never reach us.
• Messages you send us.
• Basic technical logs, such as your IP address, kept by our hosting provider when you visit the site.

We do not use analytics, advertising or tracking cookies. The site itself does not set cookies. Stripe's payment page may set its own cookies under Stripe's privacy policy.

Why we use it, and on what basis

• To deliver your order and handle returns and complaints (contract).
• To keep accounts as the law requires (legal obligation).
• To keep the site secure and prevent fraud (legitimate interest).
• To answer your messages (legitimate interest, or steps before a contract).

Who we share it with

• Stripe, to take payment.
• Printful, our print and shipping partner, which receives your name, address, email, phone number and what you ordered, so it can make and send your order. Carriers receive what they need to deliver.
• Netlify, which hosts the site and keeps server logs.

We do not sell your data. Some of these providers process data outside the EU/EEA, including in the United States. They rely on safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Order and payment records are kept for five years after the end of the financial year, as the Danish Bookkeeping Act requires. Messages are kept as long as we need them to deal with your case. Hosting logs are kept for a short time by the provider.

Your rights

You can ask us for access to your data, to correct it, to delete it, to restrict how we use it, to receive it in a portable format, and to object to our use of it. Some data we must keep by law, so we cannot always delete it. Write to trefalke@trefalke.com.

You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.

Changes

We will update this page if what we do changes. The date at the top shows when it was last updated.