Privacy policy

This website (the “Store”) is an internal employee gift shop made available to employees. The Store is operated via the Shopify platform, which provides the technical e-commerce infrastructure. COP does not operate a public webshop through this Store, and the Store is not used for commercial sales to customers.

This Privacy Policy explains how personal information is collected, used, and disclosed in connection with your use of the Store.

By accessing or using the Store, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Information We Collect
   We collect only the personal information necessary to operate the employee gift shop and fulfill orders. This may include:
   Contact details such as name, work or home address, shipping address, phone number, and email address.
   Order and transaction information including selected items, order history, delivery status, and returns.
   Account information, where applicable, such as login credentials and preferences.
   Communications you provide when contacting support.
   Technical information such as IP address, device and browser information necessary for secure operation of the Store.
   We do not collect personal data for marketing or advertising purposes.

2. Sources of Personal Information
   Personal information is collected directly from you when you place an order or communicate with us, automatically through the Store for technical and security purposes, and through Shopify and other service providers acting on our behalf.

3. How We Use Personal Information
   Personal information is used solely to operate the employee gift shop, process and fulfill orders including shipping and returns, provide customer support, ensure security, and prevent fraud, and comply with legal and regulatory obligations. Personal information is not used for marketing, profiling, or advertising.

4. Disclosure of Personal Information
   Personal information may be shared only where necessary and limited to Shopify as the platform provider and data processor, service providers involved in order fulfillment, IT operations, and shipping, and public authorities where required by law. Personal information is not shared with marketing or advertising partners.

5. Relationship with Shopify
   The Store is hosted by Shopify. Shopify processes personal information as a data processor in order to provide and maintain the Store’s functionality. Shopify may transfer and process personal information outside your country of residence in accordance with applicable data protection laws. More information about Shopify’s data processing can be found in the Shopify Consumer Privacy Policy.

6. Data Retention
   Personal information is retained only for as long as necessary to fulfill orders and meet legal, accounting, or compliance requirements. Data is securely deleted or anonymized when no longer required.

7. Your Rights
   Depending on applicable data protection laws, you may have the right to access your personal information, request correction of inaccurate data, request deletion of your personal information, and restrict or object to certain processing activities. Requests can be made using the contact details below. Identity verification may be required.

8. Security
   We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, data minimization, secure system configurations, and the use of trusted service providers with documented security and data protection standards. Personal information is processed only by authorized personnel and in accordance with applicable data protection laws. Security measures are regularly reviewed to ensure continued protection of personal information.

9. International Transfers
   If personal data is transferred outside the EU/EEA or the UK, such transfers are safeguarded using recognized legal mechanisms, including Standard Contractual Clauses.

10. Changes to This Privacy Policy
    This Privacy Policy may be updated from time to time. Any changes will be posted on the Store with an updated revision date.

11. Contact
    If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
    Email: joachim@kontendo.dk
    Address: Borupvang 3, 2750 Ballerup, Denmark
    For the purposes of applicable data protection laws, the relevant entity acts as the data controller for personal information processed through this Store.