Privatlivspolitik
Privacy policy
Last updated 13 August 2026
We collect the least we can get away with, keep it only as long as we have a reason to, and never sell it. This page says exactly what that means in practice.
1. Who is responsible
The data controller is unika:k ApS, Søllerødgårdsvej 19 B, 2840 Holte, Denmark. Write to support@unikakceramics.shop or call +45 23 76 94 18 about anything on this page. We are not required to appoint a data protection officer and have not appointed one; the email above reaches the person who deals with this.
We process personal data under the General Data Protection Regulation (EU) 2016/679 and the Danish Databeskyttelsesloven. The supervisory authority is Datatilsynet.
2. What we collect, why, and on what basis
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, email, telephone, delivery address | To pack, send and track your order and to answer questions about it | Performance of a contract, Art. 6(1)(b) | 5 years from the end of the financial year |
| Order contents, prices, moms, order reference | The record of the sale, and the basis of any later complaint | Legal obligation, Art. 6(1)(c) — Danish Bogføringsloven | 5 years from the end of the financial year |
| Payment confirmation, card brand and last four digits | To match a payment to an order and to process refunds | Performance of a contract, Art. 6(1)(b) | 5 years from the end of the financial year |
| Messages you send us | To answer you, and to have a record if the matter comes back | Legitimate interest, Art. 6(1)(f) | 2 years from the last message |
| Gift advice enquiry | To suggest cups for the person you are buying for | Consent, Art. 6(1)(a) | 12 months |
| Email address on our list | To send a few emails a year about new glazes and care | Consent, Art. 6(1)(a) | Until you unsubscribe |
| Basket contents | To remember what you put in your basket between visits | Strictly necessary for a service you asked for | In your own browser only, until you clear it |
3. What we do not collect
- Card numbers. They never reach our servers — see payment security.
- Accounts and passwords. There is no customer login on this site, so there is no password of yours for anyone to steal.
- Special category data. Nothing we ask about concerns health, beliefs, ethnicity or anything else in Article 9. Cup Match runs entirely in your browser and its answers are never sent to us.
- Profiles and automated decisions. We do not profile you, we do not score you, and nothing here decides anything about you automatically.
- Data about children. This shop is for adults. We do not knowingly collect data from anyone under 16.
4. Who else sees it
- Our carrier gets your name, address, telephone and email so it can deliver and notify you. Nothing else.
- Our payment provider processes the payment and holds the card data we never see. It is a controller in its own right for that data.
- Our hosting and database providers store this site and the order records on our instructions as processors, under a data processing agreement.
- Our accountant and the Danish tax authorities, to the extent the bookkeeping rules require.
- Nobody else. We do not sell, rent, trade or share personal data for anyone’s marketing, including our own partners, because we do not have any.
5. Transfers outside the EU/EEA
Our infrastructure is hosted in the EU where the provider offers it. Where a processor operates outside the EEA, the transfer is covered by the European Commission’s Standard Contractual Clauses together with the provider’s supplementary technical measures. Ask us and we will tell you which providers are involved and where they sit.
6. Your rights
You can ask us, at any time, to:
- Tell you what we hold about you, and give you a copy (Art. 15).
- Correct anything wrong (Art. 16).
- Delete it (Art. 17) — though we must keep order records for the statutory bookkeeping period even if you ask us to delete them, and we will say so rather than quietly ignoring the request.
- Restrict or object to processing based on legitimate interest (Arts. 18 and 21).
- Receive it in a portable format (Art. 20).
- Withdraw consent at any time, where consent was the basis. That does not affect what was done before you withdrew it.
Email support@unikakceramics.shop. We answer within one month, free of charge. We may ask you to confirm your identity first — usually by writing from the address on the order — so that we are not handing your data to someone else.
7. Complaining to the regulator
If you think we have handled your data badly, tell us first — we would rather fix it. You do not have to, though, and you can complain directly to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark; datatilsynet.dk.
8. Security
- The whole site is served over TLS, with HSTS.
- Order records sit behind server-side credentials that are never exposed to a browser.
- Access is limited to the people who need it to pack orders and answer email.
- Forms are rate-limited and bot-checked to keep automated abuse out of the inbox.
- If a breach ever put your rights at risk, we would notify Datatilsynet within 72 hours and tell you directly.
9. Cookies
Cookies and similar storage have their own page, including how to refuse them: cookie policy.
10. Changes
If this policy changes materially we will say so on the site. The date at the top tells you which version you are reading.