Privacy policy

Last updated 9 September 2026

We process as little information about you as possible. There are no customer accounts, no analytics, no tracking, no advertising, no third-party scripts and no newsletters. The information we hold is what an order cannot be completed without.

Data controller

The controller of the processing is the business behind the shop:

Legal name
annor v/ Annika Nordmark Hoffmann
CVR number
not published yet
Address
Mejlgade 32-34, 1.10
8000 Aarhus C
Danmark
Email
not published yet

What we process, and where it comes from

You fill in no form with personal data on this website. You enter your name and your delivery address at our payment provider Stripe during payment, and we receive them from there once the payment has gone through.

Order details
Your email address, your name, your delivery address, what you bought, the prices, the timestamps and Stripe’s session and payment IDs. They are stored in the shop’s own database on the shop’s own server.
Order confirmation
The recipient address, the subject and the message itself are kept in the shop’s outbox until the email has been sent and delivery confirmed.
Card details
We never see or store them. They are entered at Stripe and do not leave Stripe.

Why we process it, and on what basis

To complete your order
We cannot send an item without an address or confirm an order without an email address. The basis is performance of the contract with you.
Bookkeeping
An order is an accounting record. The basis is a legal obligation under the Danish Bookkeeping Act.
To answer you and keep the shop running
Being able to find your order when you write about it, and being able to operate and secure the shop. The basis is our legitimate interest.

How long we keep it

An order is an immutable record that we keep for accounting purposes. The Bookkeeping Act requires accounting material — and therefore order records — to be kept for 5 years from the end of the financial year the material concerns.

An order confirmation stays in the outbox until it has been sent and delivery confirmed.

Who the information is shared with

We do not sell information and do not pass it on for marketing. We use these processors, each for one thing:

Stripe
Payment processing. Stripe receives your payment and address details directly from you and is the party that completes the payment.
Resend
Sending the shop’s order emails. Resend receives the recipient address and the message itself.
Cloudflare R2
Storage of product images. Contains no personal data.
Server hosting
The shop runs on its own virtual server, and the database with the orders lives there.

Transfer outside the EU/EEA

Stripe and Resend are US-affiliated suppliers, and the processing may therefore involve transferring information to countries outside the EU/EEA. The transfer takes place under the suppliers’ own standard contractual clauses (SCC).

No tracking, no profiling, no marketing

There are no customer accounts and no customer log-in — only the shop’s owner signs in, to the administration. There are no analytics tools, no tracking, no advertising, no third-party scripts, no marketing emails and no newsletter. We do no profiling and make no automated decisions about you. What the shop puts in your browser is described in our cookie policy — in short: no cookies.

Your rights

Under the data protection rules you have the right to:

The rights have exceptions. We cannot, for example, delete an order for as long as the Bookkeeping Act requires us to keep it.

You exercise the rights by writing to not published yet. Do include your order number if the enquiry concerns an order. See also the contact page.

Complaining to the Danish Data Protection Agency

If you are unhappy with how we process your information, you can complain to Datatilsynet, the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Web
www.datatilsynet.dk

See also