Privatlivspolitik
What we hold, and for how long
We collect what an order or a reply actually requires and nothing else. No profiling, no advertising networks, no data sold or shared for marketing. This page says exactly what is held, why, and how to get it back or get rid of it.
Last updated 13 August 2026 · Governing law: Denmark
Who is responsible
The data controller is Ancher Studio ApS, Godthåbsvej 24, st., 2000 Frederiksberg, Denmark. Contact for any data question: support@ancherstudio.shop, or +45 26 83 51 47 during monday to friday, 09:00–16:00 (europe/copenhagen). Registration identifiers are on the terms of sale.
We are not required to appoint a data protection officer and have not appointed one. Data questions go to the address above and are answered by a person.
What we collect, and why
| When | What | Why, and on what basis | Kept for |
|---|---|---|---|
| You place an order | Name, email, telephone, delivery address, what you ordered, delivery notes | To fulfil the contract you entered into (GDPR Art. 6(1)(b)), and to meet Danish bookkeeping law (Art. 6(1)(c)) | 5 years from the end of the financial year, as bogføringsloven requires |
| You use the contact form | Name, email, telephone if given, subject, message | To answer you, with your consent (Art. 6(1)(a)) or in preparation for a contract (Art. 6(1)(b)) | 24 months, then deleted |
| You send a volume enquiry | The above plus business name, setting, seats, piece count, timing | To prepare a written quote (Art. 6(1)(b)) | 24 months, then deleted |
| You browse the shop | Basket contents and the service view you chose, in your own browser | To run the shop you asked for. See the storage page | Your browser, until you clear it or close the tab |
| Any page request | Standard server log: IP address, time, page, user agent | Security and fault diagnosis, our legitimate interest in a working site (Art. 6(1)(f)) | 30 days, then rotated out |
What we deliberately do not collect
- Card details. They are entered on the payment provider’s own page and never reach us. See payment and security.
- Date of birth, identity numbers, or any special category data. A tableware order does not need them and holding them would be a liability.
- Behavioural analytics. There is no analytics script, no advertising pixel and no tracker of any kind on this site.
- An account. There is nothing to register for, so there is no password to lose.
Who else sees it
Only the processors an order physically requires, each under a data processing agreement, and each hosting inside the EU or under an adequacy decision:
- Our hosting and database provider, which stores order and enquiry records.
- Our payment provider, which handles the payment step and holds the card data we never see.
- The carrier, which receives the delivery address and telephone number and nothing else.
- Our accountant, for the records bookkeeping law requires us to keep.
We do not sell personal data, and we do not share it for anyone’s marketing, including our own. We will disclose data to a public authority only where the law obliges us to.
Your rights
Under the GDPR and the Danish Databeskyttelsesloven you may ask us to give you a copy of what we hold about you, correct anything wrong, delete it, restrict what we do with it, object to processing based on legitimate interest, or send it to another provider in a portable format. Where processing rests on consent you may withdraw it at any time, which does not affect what was done before you did.
Email support@ancherstudio.shop. We reply within 30 days and there is no charge. We may ask you to confirm the email address an order was placed from, so that we do not hand your data to somebody else.
Note that order records covered by bookkeeping law cannot be deleted before the retention period ends. Everything not covered by that obligation can be, on request.
Complaining
If you are not satisfied with how we have handled your data you can complain to Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark — datatilsynet.dk. You do not have to come to us first, though we would rather you did.
Security
Data is transmitted over HTTPS, stored on infrastructure inside the EU, and reachable only by the people who need it to fill an order or answer a message. Access is individually authenticated. If a breach ever put your rights at risk we would tell Datatilsynet within 72 hours and tell you without undue delay.
Children
This shop is for adults. We do not knowingly collect data from anyone under 18 and we have no reason to ask about age. If you believe a child has given us data, email us and we will delete it.
Changes
If this policy changes materially we will say so on the site. The date at the top of this page is the date of the current version.