1. Data We Collect
When you visit our website we may collect the following categories of data:
Technical data — IP address (anonymised after 24 hours), browser type and version, operating system, referring URL, pages visited, and time spent on each page. This data is collected automatically via server logs and analytics tools.
Cookie data — small text files stored in your browser. See Section 5 for a full list of cookies used.
Contact data — if you submit a contact form or send us an email, we collect your name, email address, and the content of your message.
Retailer enquiry data — if you submit a 'Become a Retailer' form, we collect your name, company name, country, and contact details.
We do not collect sensitive personal data (e.g. health, race, religion) and we do not knowingly collect data from children under 13.
2. How We Use Your Data
We use the data we collect for the following purposes:
Website operation — to deliver the website and ensure it functions correctly (legal basis: legitimate interest, Art. 6(1)(f) GDPR).
Analytics — to understand how visitors use our website so we can improve it. Analytics data is aggregated and anonymised where possible (legal basis: consent, Art. 6(1)(a) GDPR).
Responding to enquiries — to reply to contact and retailer enquiry forms (legal basis: contract / pre-contractual steps, Art. 6(1)(b) GDPR).
Legal compliance — to comply with applicable laws and regulations (legal basis: legal obligation, Art. 6(1)(c) GDPR).
We do not use your data for automated decision-making or profiling.
3. Sharing Your Data
We do not sell your personal data. We may share data with trusted third-party service providers who process data on our behalf, strictly for the purposes described above:
Hosting & infrastructure — our website is hosted on Manus (Butterfly Effect Inc., USA). Data is transferred under standard contractual clauses.
Analytics — we use privacy-friendly analytics that do not share individual data with third parties.
Email — enquiry emails are processed through our email provider.
All processors are bound by data processing agreements and may not use your data for their own purposes.
4. Data Retention
We retain personal data only for as long as necessary:
Technical / analytics data — maximum 14 months, then automatically deleted.
Contact & enquiry data — up to 3 years from the date of last contact, after which it is deleted.
Cookie consent records — stored locally in your browser until you clear your browser data or withdraw consent.
You may request deletion of your data at any time (see Section 7).
5. Cookies
We use the following categories of cookies:
Necessary cookies — essential for the website to function. These cannot be disabled. Examples: session token, language preference, cookie consent record.
Analytics cookies — help us understand how visitors interact with the website. Only set if you have given consent. Data is aggregated and does not identify you personally.
Preference cookies — remember your language choice and saved favourites between visits. Only set if you have given consent.
You can change your cookie preferences at any time using the Cookie Settings button at the bottom of this page.
6. International Transfers
Our website infrastructure is operated in the United States. When personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Your Rights
Under GDPR you have the following rights regarding your personal data. To exercise any right, contact us at [email protected] — we will respond within 30 days.
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Ask us to correct any inaccurate or incomplete data.
Right to Erasure
Request deletion of your data — the 'right to be forgotten'.
Right to Restriction
Ask us to pause processing of your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interest.
Right to Withdraw Consent
Withdraw consent at any time without affecting prior lawful processing.
Contact us: [email protected] · We respond within 30 days
You may also lodge a complaint with the Danish Data Protection Authority (Datatilsynet)
datatilsynet.dk8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Our website is served exclusively over HTTPS. Access to personal data is restricted to authorised personnel only.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the 'Last updated' date at the top of this page. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Email: [email protected]
Post: Kinder and Kids ApS, Greve Main 23, 2670 Greve, Denmark
Cookie settings