Privacy & Data Protection
Privacy Policy
Booze Bag
1. Our Privacy Promise
At Booze Bag, we believe that trust is the foundation of every relationship with our customers.
Whenever you visit our website or place an order, you entrust us with your personal information. We take that responsibility seriously.
We only collect personal data that is necessary to provide our products and services, process your orders, communicate with you when needed, and comply with our legal obligations. We process your personal data with care, transparency, and in accordance with the General Data Protection Regulation (GDPR) and applicable Danish legislation.
We are committed to the following principles:
- We only use your personal data for the purposes for which it was collected.
- We never sell your personal data to third parties.
- We never use your personal data for unsolicited marketing.
- We protect your personal data through appropriate technical and organisational security measures.
- We do not retain your personal data longer than necessary.
For us, privacy is about more than legal compliance. It is about treating your personal information with the same care, respect, and integrity that we put into every product we create.
2. Who We Are
Booze Bag is a Danish online store specialising in handcrafted gift products and accessories.
Throughout this Privacy Policy, the terms “Booze Bag”, “we”, “our”, and “us” refer to:
Booze Bag
Ammendrup Park 91
3200 Helsinge
Capital Region of Denmark
Denmark
Email: info@booze-bag.dk
Telephone: +45 42 46 88 39
Support: https://booze-bag.dk/support
For the purposes described in this Privacy Policy, Booze Bag acts as the Data Controller, meaning we determine how and why your personal data is processed.
3. Scope of This Privacy Policy
This Privacy Policy applies to all personal data processed by Booze Bag through:
- our website
- our online store
- customer accounts
- product orders
- contact forms
- customer support
- email correspondence
- newsletter subscriptions and email marketing
- product reviews.
- This Privacy Policy applies to every visitor, customer, and user of our website and services.
4. Definitions
To make this Privacy Policy easier to understand, the following definitions apply throughout this document.
Personal Data
Personal Data means any information relating to an identified or identifiable natural person.
Examples include, but are not limited to:
- name
- postal address
- email address
- telephone number
- IP address
- payment information.
Processing
Processing means any operation performed on Personal Data.
Examples include:
- collecting
- recording
- storing
- organising
- using
- sharing
- updating
- deleting.
Data Controller
The organisation that determines the purposes and means of processing Personal Data.
For the purposes of this Privacy Policy, Booze Bag is the Data Controller.
Data Processor
A third party that processes Personal Data on behalf of the Data Controller.
Examples include:
- hosting providers
- payment providers
- shipping platforms.
GDPR
The General Data Protection Regulation (EU) 2016/679, which governs the protection of personal data throughout the European Economic Area (EEA).
5. What Personal Data We Collect
We only collect Personal Data that is necessary to provide our products and services.
Depending on how you interact with our website, we may process the following categories of Personal Data.
Information You Provide Directly
When you place an order or contact us, we may collect:
- first and last name
- billing address
- shipping address
- email address
- telephone number
- company name (where applicable)
- the content of your message
- any additional information you voluntarily provide.
Order Information
When you place an order, we may process:
- purchased products
- order number
- payment method
- order value
- shipping method
- order status
- invoice information.
- We do not store complete payment card information.
- All payment transactions are securely processed by specialised payment providers.
Customer Account Information
If you choose to create a customer account, we may store:
- username
- email address
- encrypted password
- order history
- saved billing and shipping addresses.
- You are responsible for keeping your password confidential.
Contact Form Information
When you contact us through our online contact form, we may process:
- your name
- your email address
- the subject of your message
- the content of your message.
- We use this information solely to respond to your enquiry or request.
Newsletter Subscription Information
When you voluntarily subscribe to our newsletter, we may process:
- your email address
- your subscription status
- the date and time of registration, confirmation, and withdrawal
- the version of the consent information presented to you
- an anonymised IP address where technically recorded by our newsletter system.
Product Reviews
If you submit a product review, we may process:
- your name or chosen display name
- your review
- your rating
- the date your review was submitted.
Technical Information
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- browser type
- device information
- operating system
- date and time of your visit
- pages visited
- technical error reports.
We use this information exclusively for:
- maintaining website security
- ensuring proper website functionality
- diagnosing technical issues
- preventing abuse or fraud.
- We do not use this information for profiling or marketing purposes.
Children’s Personal Data
Our website, products, and services are not specifically intended for children under the age of 16.
We do not knowingly collect Personal Data from children without the consent of a parent or legal guardian.
If we become aware that Personal Data relating to a child has been collected unintentionally, we will delete that information as soon as reasonably possible.
6. Why We Process Your Personal Data
We only process Personal Data when there is a clear and lawful purpose for doing so. We are committed to collecting only the information that is necessary for each specific purpose.
Depending on how you interact with Booze Bag, we may process your Personal Data for the following purposes.
6.1 Processing Your Order
When you place an order with Booze Bag, we require certain Personal Data to fulfil our contractual obligations.
This includes processing your Personal Data in order to:
- receive and process your order
- confirm your purchase
- prepare and ship your order
- keep you informed about the status of your order
- process payments
- issue invoices
- respond to questions regarding your purchase.
Without this information, we would be unable to fulfil the contract we have entered into with you.
6.2 Customer Support
If you contact us with a question, request or complaint, we use your Personal Data solely to provide the assistance you require.
This may include:
- responding to your enquiries
- providing customer support
- resolving technical or order-related issues
- handling complaints
- providing information about our products or services.
- We do not use your contact details to send unsolicited marketing communications.
6.3 Customer Accounts
If you choose to create a customer account, we process your Personal Data to enable you to:
- complete future purchases more quickly
- view your previous orders
- manage multiple delivery addresses
- update your personal information
- manage your account preferences.
Creating a customer account is entirely optional.
You may also place orders as a guest without creating an account.
6.4 Newsletter and Email Marketing
When you voluntarily subscribe to the Booze Bag newsletter, we process your email address to:
- send Booze Bag news, handmade inspiration, gift ideas and atelier stories
- send occasional information about our products and online store
- administer your subscription and record your consent
- process confirmation, preference, and unsubscribe requests.
Newsletter subscription is voluntary and is not required to place an order. We use a double opt-in process, and you will not become an active subscriber until you confirm your email address using the link sent to you.
We do not use individual newsletter open tracking, click tracking, or behavioural profiling for marketing purposes.
6.5 Compliance with Legal Obligations
In certain situations, we are legally required to process and retain Personal Data.
This includes complying with obligations relating to:
- accounting and bookkeeping
- tax legislation
- consumer protection laws
- fraud prevention
- requests from competent public authorities where required by law.
- We only retain the information necessary to meet these legal obligations.
6.6 Website Security
To maintain the security and reliability of our website, we process certain technical information.
This allows us to:
- protect our website against cyber threats
- detect and prevent fraudulent activity
- prevent spam and abuse
- investigate technical problems
- maintain the availability and security of our online services.
Technical information collected for security purposes is never used to create marketing profiles or monitor your browsing behaviour for commercial purposes.
6.7 Improving Our Services
From time to time, we may analyse general technical information to improve the quality and performance of our website.
This enables us to:
identify and resolve technical issues;
improve website performance;
optimise the user experience;
enhance the stability and reliability of our online store.
These analyses are carried out without creating individual customer profiles or using your Personal Data for advertising purposes.
7. Legal Bases for Processing
The General Data Protection Regulation (GDPR) requires that every processing activity is based on a valid legal basis.
Depending on the circumstances, Booze Bag processes Personal Data on one or more of the following legal grounds.
Performance of a Contract
Most of the Personal Data we process is necessary for the performance of a contract between you and Booze Bag.
This applies, for example, when you:
place an order;
make a payment;
create or use a customer account;
request a return or refund;
contact us regarding an existing order.
Without this information, we cannot fulfil our contractual obligations.
Compliance with Legal Obligations
Certain Personal Data must be processed to comply with legal requirements.
Examples include obligations arising from:
- Danish bookkeeping legislation
- tax legislation
- consumer protection legislation
- legal obligations imposed by public authorities.
Legitimate Interests
In some situations, we process Personal Data based on our legitimate interests.
Examples include:
- maintaining website security
- preventing fraud
- providing technical support
- improving our services
- protecting our business against misuse.
Whenever we rely on legitimate interests, we carefully balance our interests against your rights and freedoms to ensure that your privacy remains protected.
Consent
Where processing is based on your consent, we will request that consent before processing begins whenever required by law.
You are free to withdraw your consent at any time.
We rely on your consent to manage your subscription and send the Booze Bag newsletter and related email marketing. We use a double opt-in process to confirm your email address and record your subscription.
Booze Bag does not use Personal Data for:
- personalised advertising
- behavioural profiling
- advertising-related tracking
- individual newsletter open or click tracking.
If these practices change in the future, we will update this Privacy Policy and request additional consent where required by law.
8. Orders and Customer Accounts
Orders
When you place an order through our online store, we process only the Personal Data necessary to complete your purchase and deliver your products.
This may include:
- your name
- billing address
- shipping address
- email address
- telephone number
- selected payment method
- selected shipping method
- products ordered.
This information is used exclusively for:
- processing your order
- delivering your purchase
- providing customer support
- fulfilling our legal and administrative obligations.
Order Confirmations
After placing an order, you will automatically receive an order confirmation by email.
We may also contact you regarding:
- payment confirmation
- shipping updates
- delivery notifications
- delays affecting your order
- returns and refunds.
These communications are considered essential service communications and are not marketing messages.
Guest Checkout
Creating a customer account is not required to place an order.
If you choose Guest Checkout, we process only the Personal Data necessary to complete your purchase and comply with our legal obligations.
Customer Accounts
If you choose to create a customer account, we may store:
- your name
- email address
- saved addresses
- order history
- account preferences.
- You may update your account information at any time.
- If you wish to delete your customer account, you can contact our customer support team.
We will delete your account unless we are legally required to retain certain information.
Password Security
For your security, Booze Bag never has access to your password in plain text.
Passwords are securely encrypted before being stored.
We recommend that you:
- choose a strong and unique password
- avoid reusing passwords across multiple websites
- never share your password with anyone.
9. Payments
To ensure secure payment processing, Booze Bag works with specialised payment service providers.
We do not process or store complete payment card details ourselves.
We currently offer the following payment methods:
- Stripe
- Klarna
- Apple Pay
- Google Pay
- Visa
- Mastercard
- Direct Bank Transfer
When you make a payment, the relevant payment provider may process Personal Data such as:
your name;
payment amount;
order number;
payment status;
billing information.
The processing of payment information is also subject to the privacy policies of the respective payment providers.
Booze Bag receives only the information required to confirm your payment and process your order.
We never store complete credit card numbers, CVC/CVV security codes, or similar sensitive payment credentials.
10. Shipping
To deliver your order, we work with trusted logistics providers.
We currently use Shipmondo as our shipping management platform.
Shipmondo enables us to generate shipping labels and securely exchange the information required for delivery with the selected carrier.
Depending on the shipping method chosen, the following Personal Data may be shared:
- your name
- delivery address
- email address
- telephone number
- order number
- shipping information.
This information is used solely to:
- create shipping labels
- deliver your order
- provide shipment tracking where available
- resolve delivery-related issues.
- We only share the Personal Data that is necessary to complete the delivery of your order.
11. Contact Form
You can contact Booze Bag through the contact form available on our Support page.
When you submit a message through this form, we may process the following Personal Data:
- your name
- your email address
- the subject of your enquiry
- the content of your message
- the date and time your message was submitted.
We use this information exclusively to:
respond to your enquiry;
provide customer support;
answer questions about our products or services;
handle complaints or requests.
Information submitted through our contact form is never used for marketing purposes, nor will you be added to a mailing list as a result of contacting us.
Our website uses Contact Form 7 to process contact requests.
13. Product Reviews
We value honest and genuine customer feedback.
Customers may have the opportunity to leave product reviews for items they have purchased.
When you submit a review, we may process:
your name or chosen display name;
the content of your review;
your rating;
the date your review was submitted.
Reviews may be published publicly on our website.
To maintain a respectful and trustworthy environment, Booze Bag reserves the right not to publish or to remove reviews that:
- violate applicable laws or regulations
- contain offensive, discriminatory or abusive language
- consist of spam or promotional content
- disclose Personal Data relating to third parties
- are unrelated to the product being reviewed.
We never alter the substance of customer reviews. However, we may remove or redact confidential or personal information where necessary to protect privacy or comply with legal obligations.
14. Website Hosting and Security
Our website is hosted by Simply.com.
To ensure the secure and reliable operation of our website, certain technical information may be processed automatically, including:
- IP address
- browser information
- device information
- server log files
- date and time of your visit
- technical error reports.
This information is processed exclusively for the following purposes:
- providing and maintaining our website
- protecting the security of our systems
- detecting and resolving technical issues
- preventing abuse or unauthorised access
- ensuring the continuity and stability of our online services.
Server log files are not used to personally identify visitors or to create commercial customer profiles.
Protecting Your Personal Data
Booze Bag takes appropriate technical and organisational measures to protect your Personal Data against:
- accidental loss
- unauthorised access
- misuse
- alteration
- disclosure
- destruction.
Our security measures include, among others:
- encrypted SSL/TLS connections
- secure payment processing
- restricted access to Personal Data
- strong authentication and access controls
- regular software updates
- ongoing security monitoring and maintenance.
While we continuously strive to protect your Personal Data, no method of transmitting information over the internet or storing electronic data can be guaranteed to be completely secure.
For this reason, although we implement industry-standard security measures, absolute security can never be guaranteed.
15. Data Retention
We retain Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Retention periods vary depending on the type of information involved.
| Category of Personal Data | Standard Retention Period |
|---|---|
| Orders and invoices | At least the minimum period required under applicable Danish bookkeeping and tax legislation |
| Customer accounts | Until the account is deleted or remains inactive for an extended period, unless legal obligations require longer retention |
| Customer enquiries | Up to two years after the enquiry has been resolved |
| Newsletter subscriptions | For as long as the subscription remains active; after withdrawal, a limited opt-out record may be retained for as long as reasonably necessary to honour the withdrawal and demonstrate compliance |
| Product reviews | Until removed by the customer or Booze Bag |
| Technical server logs | Only for as long as necessary for security, maintenance and operational purposes |
Once Personal Data is no longer required, it will be securely deleted or anonymised where appropriate.
16. Sharing Personal Data with Third Parties
Booze Bag does not sell your Personal Data to third parties.
We only share Personal Data where this is necessary to:
- perform our contract with you
- provide our products and services
- comply with legal obligations
- protect our legitimate business interests where permitted by law.
- Depending on the nature of your order, your Personal Data may be shared with carefully selected service providers.
Our current service providers include:
| Service Provider | Purpose |
|---|---|
| Simply.com | Website hosting |
| Apple iCloud Mail | Delivery of newsletter and service emails |
| Stripe | Payment processing |
| Klarna | Payment processing |
| Shipmondo | Shipping management platform |
| Shipping carriers used through Shipmondo | Delivery of orders |
These organisations may process Personal Data only to the extent necessary to provide their services on behalf of Booze Bag.
Where required by law, appropriate contractual safeguards have been established to protect your Personal Data.
17. International Data Transfers
Booze Bag aims to process Personal Data within the European Economic Area (EEA) whenever possible.
However, some of our service providers may process or store Personal Data outside the EEA.
Where Personal Data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with the GDPR.
These safeguards may include:
- an adequacy decision issued by the European Commission
- the European Commission’s Standard Contractual Clauses (SCCs)
- other legally recognised transfer mechanisms.
Whenever international transfers occur, we take reasonable steps to ensure that your Personal Data continues to receive an equivalent level of protection.
18. Your Rights
Under the General Data Protection Regulation (GDPR), you have several rights regarding your Personal Data.
Booze Bag is committed to respecting these rights and handling all requests fairly, transparently and within the applicable legal timeframes.
Depending on your circumstances, you have the right to:
Access Your Personal Data
You may request confirmation of whether we process your Personal Data and obtain access to that information.
Correct Inaccurate Information
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
Request Erasure
In certain circumstances, you may request that we delete your Personal Data.
Please note that this right does not apply where we are legally required to retain certain information.
Restrict Processing
You may request that we temporarily restrict the processing of your Personal Data if:
you contest the accuracy of the information;
the processing is unlawful;
you require the information for legal claims;
an objection to processing is under consideration.
Object to Processing
You have the right to object to certain types of processing where these are based on our legitimate interests.
We will carefully assess your request and stop processing unless compelling legitimate grounds exist.
Data Portability
Where technically feasible and legally applicable, you may request a copy of your Personal Data in a structured, commonly used and machine-readable format.
You may also request that we transfer this information directly to another organisation where technically possible.
Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Exercising Your Rights
If you wish to exercise any of the rights described above, please contact us using the details provided below.
Email:
We aim to respond to all requests within one month, as required under the GDPR.
If your request is particularly complex or involves multiple requests, this period may be extended where permitted by law. If an extension is necessary, we will inform you accordingly.
20. Automated Decision-Making and Profiling
Booze Bag does not make decisions based solely on automated processing of Personal Data where such decisions would produce legal effects or similarly significant consequences for you.
We do not use automated systems for:
- credit scoring
- automated customer profiling
- behavioural advertising profiles
- algorithmic decision-making regarding customers.
Any decisions relating to customer service or order processing are reviewed by people rather than being made solely by automated systems.
21. Children’s Privacy
Our website, products and services are not specifically intended for children under the age of 16.
We do not knowingly collect Personal Data from children without the consent of a parent or legal guardian.
If we become aware that Personal Data relating to a child has been collected unintentionally, we will delete that information as soon as reasonably practicable.
If you believe that a child has provided us with Personal Data without appropriate consent, please contact us so that we can investigate and, where appropriate, remove the information.
22. Links to Third-Party Websites
Our website may contain links to external websites operated by third parties.
Although we carefully select the websites we link to, Booze Bag is not responsible for the privacy practices, security, or content of those external websites.
We encourage you to read the privacy policies of any third-party websites before providing them with your Personal Data.
23. Changes to This Privacy Policy
Privacy legislation, technology, and our services may evolve over time.
For this reason, Booze Bag may update this Privacy Policy from time to time.
Whenever significant changes are made, the updated version will be published on our website.
The beginning of this Privacy Policy will always indicate:
- the current version number
- the date of the latest revision
- the date on which the Privacy Policy becomes effective.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your Personal Data.
24. Contact Details
If you have any questions about this Privacy Policy or about how Booze Bag processes your Personal Data, please do not hesitate to contact us.
Booze Bag
Ammendrup Park 91
3200 Helsinge
Capital Region of Denmark
Denmark
Email:
Telephone:
+45 42 46 88 39
Support:
We aim to respond to all privacy-related enquiries as quickly as possible and within the time limits required by applicable data protection legislation.
25. Complaints
We sincerely hope that any concerns regarding your Personal Data can be resolved directly with us.
If you are dissatisfied with the way we process your Personal Data, we encourage you to contact us first so that we have the opportunity to resolve the matter together.
You also have the right to lodge a complaint with the competent supervisory authority responsible for data protection.
For Booze Bag, the competent supervisory authority is:
Datatilsynet (Danish Data Protection Agency)
Carl Jacobsens Vej 35
2500 Valby
Denmark
Website:
If you reside in another country within the European Economic Area (EEA), you may also have the right to lodge a complaint with your local supervisory authority.
26. Final Statement
At Booze Bag, trust, transparency and respect are at the heart of everything we do.
We treat your Personal Data with the same care, craftsmanship and attention to detail that we dedicate to creating and delivering our products.
We collect only the information necessary to provide our products and services, protect it using appropriate security measures, and never use it for purposes that are inconsistent with this Privacy Policy.
If you have any questions about your privacy or how we process your Personal Data, we are always happy to help.
Thank you for placing your trust in Booze Bag.
Document Information
Document Title: Privacy Policy
Version: 1.1
Document Owner: Booze Bag
Language: English
Applicable Law: Danish law and the General Data Protection Regulation (GDPR)
Document Status: Final