Privacy Policy

Last updated: 3 August 2026

Veldora Haven respects your privacy and is committed to protecting your personal data. This policy explains what data we collect, why we collect it, how we use it, and the rights you have over it under the EU General Data Protection Regulation (GDPR).

1. Who We Are

Data Controller:
Veldora Haven
CVR: 46499190
Lundby Hovedgade 93
4750 Lundby
Denmark
Email: info@veldorahaven.com
Phone: +45 60 14 37 57

If you have any question about this policy or about how we handle your data, contact us at the address above.

2. What Data We Collect

Data you give us directly:

• Name, email address, telephone number and delivery address when you place an order or make an enquiry
• Billing address and company details where applicable
• Any information you provide during a consultation call or in written correspondence
• Your email address if you subscribe to our newsletter

Data collected automatically:

• IP address, browser type, device type and operating system
• Pages visited, time spent on the site, and referring website
• Cookie data (see section 7)

Data we do not collect: We do not store your full payment card details. Payment processing is handled entirely by Shopify Payments and its associated processors, who are PCI-DSS compliant. We never see or store your card number.

3. Why We Process Your Data

4. Who We Share Your Data With

We share your data only where necessary to fulfil your order or meet a legal obligation. Recipients include:

• Shopify Inc. — our e-commerce platform provider, which hosts the store and processes orders. Shopify's privacy policy is available at shopify.com/legal/privacy.
• Manufacturers and suppliers — we pass your name, delivery address and telephone number to the manufacturer fulfilling your order so they can arrange delivery.
• Freight and delivery partners — your name, address and telephone number are shared so they can schedule and complete your delivery.
• Payment processors — Shopify Payments and, where applicable, PayPal.
• Email service providers — where you have consented to marketing communications.
• Our accountant — order records are retained for statutory accounting purposes.

We do not sell your personal data to anyone, ever. We do not share your data with advertisers or data brokers.

5. International Transfers

Some of our service providers, including Shopify, process data outside the European Economic Area. Where this occurs, transfers are governed by Standard Contractual Clauses approved by the European Commission or an adequacy decision, ensuring your data receives equivalent protection.

6. How Long We Keep Your Data

• Order records: 5 years from the date of purchase, as required by Danish accounting law (Bogføringsloven)
• Enquiries that do not result in an order: 12 months
• Marketing consent records: until you withdraw consent, plus 2 years
• Website analytics: 26 months

7. Cookies

We use cookies to operate the website and, with your consent, to understand how it is used.

• Strictly necessary cookies — required for the site to function (shopping cart, checkout, session security). These cannot be disabled.
• Analytics cookies — help us understand which pages are visited and how the site performs. Set only with your consent.
• Marketing cookies — used to measure the effectiveness of advertising. Set only with your consent.

You can change your cookie preferences at any time via the cookie banner or your browser settings.

8. Your Rights Under GDPR

You have the following rights over your personal data:

• Right of access — request a copy of the data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion of your data, subject to our legal retention obligations
• Right to restriction — limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw marketing consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, email info@veldorahaven.com. We will respond within one month.

9. Complaints

If you believe we have handled your data improperly, you have the right to lodge a complaint with the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
datatilsynet.dk

10. Changes to This Policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be communicated by email to customers where we hold a valid address.