Privacy & cookies

Last updated: 4 September 2026

This privacy and cookie notice explains how Whimsy Doodlings ApS handles personal data when you visit our website, contact us or buy from us. It also explains your choices and rights.

1. The information we handle

Depending on how you interact with us, we may handle:

• contact details, such as name, email address, phone number, billing address and delivery address;
• order details, such as products, price, order number, delivery choice and order history;
• payment-related status and references supplied by the checkout or payment service. We do not need to receive your full card details;
• messages, support requests, returns, complaints and other correspondence;
• technical and usage data, such as IP address, device and browser information, pages visited, referring page, approximate location, consent choices and security logs;
• marketing preferences and engagement, if you choose to receive communications from us; and
• information you voluntarily provide in reviews, surveys or social interactions.

2. Why we use it and our legal bases

We use personal data only where we have a lawful reason. The main purposes and legal bases are:

• Orders and delivery: to accept, fulfil and support your order, based on our contract with you.
• Customer service, returns and complaints: to respond, administer your rights and keep an appropriate record, based on our contract, legal obligations and legitimate interests in providing good service.
• Accounting, tax and compliance: to meet legal record-keeping and regulatory obligations.
• Website operation, security and fraud prevention: based on our legitimate interests in providing a secure and reliable service and, where applicable, legal obligations.
• Optional analytics, personalisation and advertising cookies: based on your consent where consent is required.
• Direct marketing: based on consent or another lawful basis permitted by applicable marketing rules. You can opt out at any time.
• Establishing or defending legal claims: based on our legitimate interests and applicable law.

3. Cookies and similar technologies

Cookies are small files or similar technologies stored or read on your device. Strictly necessary technologies may be used to provide requested functions, keep the site secure, remember a basket or retain your privacy choices. Other categories, such as analytics, personalisation or advertising, should be used only in line with the consent choices available on the site.

Google Analytics 4 operates through Google’s Advanced Consent Mode. While statistics consent is absent or denied, analytics storage remains denied and Google Analytics does not set or read analytics cookies. Google tags may still send limited cookieless consent and measurement signals to Google for aggregate measurement and modelling. Analytics storage and full measurement are enabled only after you choose Statistics in the consent panel.

You can review or change available choices through the Cookie settings link in the footer. The link opens the site’s privacy preference panel when it is available; if the panel is temporarily unavailable, the same link returns you to this cookie section. You can also change browser settings or contact us. Blocking necessary technologies may prevent parts of the website or checkout from working.

See our Cookie Policy for the current cookies, providers, purposes and lifetimes identified by our live scan. Because these can change when the website is updated, the synchronized Cookie Policy is the most specific source for the technologies currently used on this website.

4. Checkout and service providers

We use service providers where needed to run the website and fulfil orders—for example hosting, ecommerce, payment, delivery, email, support, security, analytics or professional advisers. The specific payment and delivery choices available for an order are shown at checkout. Providers process only the information needed for their role and may also act as independent controllers where their own notice says so.

We may disclose information where required by law, to protect legal rights or in connection with a business reorganisation. We do not sell personal data as a standalone product.

5. International transfers

Some service providers may process data outside Denmark or the European Economic Area. Where required, we use a recognised transfer mechanism and appropriate safeguards, such as an adequacy decision or approved contractual clauses. You may contact us for information about safeguards relevant to your data.

6. How long we keep information

We keep information only for as long as needed for the purpose for which it was collected, including service, warranty, complaint, accounting, tax, security and legal-claim requirements. Danish accounting records are normally retained for the period required by applicable bookkeeping law. Consent records and security logs are kept only as long as reasonably necessary to demonstrate choices or protect the service. When information is no longer needed, it is deleted or anonymised.

7. Your rights

Subject to the conditions in applicable data-protection law, you may ask us to:

• confirm whether we process your personal data and provide access to it;
• correct inaccurate or incomplete information;
• delete information;
• restrict or object to processing, including direct marketing;
• provide certain information in a portable format; or
• withdraw consent at any time, without affecting earlier lawful processing.

To exercise a right, email hello@whimsydoodlings.com. We may need to verify your identity and may retain information where the law requires or permits it. You may complain to the Danish Data Protection Agency (Datatilsynet) or the competent supervisory authority where you live or work.

8. Security and children

We use reasonable organisational and technical measures designed to protect personal data. No online service is completely risk-free, so please avoid sending sensitive information unless it is necessary. Our shop is intended for adults making purchases. If you believe a child has provided personal data without appropriate authority, please contact us.

9. Changes and contact

We may update this notice when our services, providers or legal obligations change. The date above shows the latest revision. Material changes will be communicated where required.

Questions about privacy or cookies can be sent to hello@whimsydoodlings.com or to the postal address above.