Privacy Policy

Last updated September 1, 2025

1. Introduction

This privacy policy explains how Myextensions ApS processes your personal data when you shop with us, use our website, or contact our customer service.

Personal data is any data that can personally be related to you, such as name, address, email addresses, user habits, gender, and age. This privacy policy applies to all data processing carried out by us, both as part of our core activities and the online media we offer.

We want to be transparent about how we use your information – and what rights you have. The policy applies throughout the EU, and we have adapted it to national requirements where necessary.

2. Data Controller

Myextensions ApS

Director Cate Dina Klyvø

Kattesundet 45, 9000 Aalborg, Denmark

Email: support@myextensions.dk

Phone: +45 23 23 23 09

3. What Personal Data is Collected

We collect various information depending on how you use our services:

  • Your name, address, phone number, and email when you shop or contact us
  • Your purchases and payments – so we can ship your items and process your order
  • How you use our website – e.g., which page you came from and what you click on
  • Any correspondence with customer service
  • Your choices regarding cookies and marketing

All collected information solely serves the purpose of ensuring you can use our webshop and services.

4. What We Use Your Information For

We use your information to serve you as best as possible and to fulfill our obligations as a company. This means we use your information for:

  • ensuring you can complete your purchases and we can ensure delivery of your orders,
  • being able to assist you via customer service,
  • sending you relevant offers and news, if you have consented,
  • analyzing website usage and improving functionality, and
  • complying with legislation – including accounting obligations and the consumer rights you are guaranteed by law.

5. When We Delete Your Data

We delete your data when we no longer need it or when you ask us to. This may be:

  • when the purpose of processing has been fulfilled,
  • when the customer relationship has ended,
  • if you withdraw your consent, or
  • if you object, and we have no compelling grounds to retain the information

As a company, we are required to retain certain parts of your data for other reasons. This may be due to tax retention periods (usually 6 years for business correspondence or 10 years for accounting records), or for asserting, exercising, or defending legal claims (up to four years), or because the data is necessary to protect the rights of another natural or legal person. We will only delete your data after these periods have expired.

6. What is the Legal Basis

For all EU countries, the processing of personal data is regulated by GDPR – the General Data Protection Regulation, often called the data protection regulation. GDPR applies directly in all EU countries and aims to protect your fundamental rights when your personal data is processed.

GDPR requires, among other things, that:

  • companies may only process personal data if they have a lawful basis (legal basis),
  • individuals have the right to access, rectification, erasure, etc.,
  • companies clearly inform about purposes, recipients, and retention periods,
  • technical and organizational measures are taken to protect data.

Although GDPR applies directly in all countries, each country still has its own national data protection law, which supplements the regulation in selected areas.

We process your personal data on the following specific grounds:

  1. Performance of our agreement (contractual basis)
    When you make a purchase on our website or contact us for customer service, we process your information to deliver what you have requested. This may include shipping your items, processing payment, handling returns, or responding to your inquiries. Without this information, we cannot complete your order or assist you effectively. Read more about the terms of trading on our webshop in the Terms and Conditions on the website.

  2. Consent
    In certain cases, we ask for your consent – for example, if you sign up for our newsletter or accept cookies for marketing. You decide whether to give consent, and you can withdraw it at any time. If you withdraw your consent, we will stop the processing based on it, and your data will be deleted unless we are legally obliged to store it for other reasons.

  3. Legal obligation
    In some cases, we are legally obliged to process and store certain information. This may include invoice information that we must retain for up to 5 or 10 years under the accounting act, or information related to consumer law claims and warranty obligations.

  4. Legitimate interests
    We may also process your information if we have a so-called legitimate interest – meaning when it is necessary for our company and services to function effectively and securely. This may include improving the user experience on the website, protecting against misuse (e.g., fraud), tracking purchase behavior, or preparing internal statistics.

When we use this basis, we always assess whether our interest outweighs your rights and freedoms. If you believe we should not use your data in this way, you can always object – and we will take it seriously and assess the situation on a case-by-case basis.

7. Who We Share Your Data With

We only disclose your personal data when necessary to fulfill the purpose of processing, and we do so exclusively to trusted partners. This applies to the following categories:

  1. Webshop and Order Processing
    We use Shopify as our webshop platform. When you place an order, your data is processed and stored here. This includes name, address, email, IP address, and order information.

  2. Payment Services
    We offer various payment services such as Klarna, PayPal, credit card companies, or similar. Only the necessary information is transferred here to process a payment. You can see which services are available in your country on the website.

  3. Delivery
    We share your name, delivery address, and contact details with the shipping companies we work with. You can see which carriers we cooperate with on the website.

  4. Marketing and Analysis
    We use data for targeted marketing – but only if you have given consent. We use, among others, the following platforms and methods:
    1. Google Ads / Google Analytics, used to analyze behavior and show targeted ads.
    2. Facebook Pixel & Meta Custom Audiences, used to measure conversions and target ads on Facebook and Instagram – including advanced matching, where your email address (hashed) is transferred to Meta).
    3. LinkedIn Insight Tag, used to track conversions and optimize ads on LinkedIn.
    4. Pinterest Tag, used to measure the effectiveness of ads on Pinterest,
    5. Social media platforms such as Facebook, Instagram, LinkedIn, and Pinterest. When you interact with us on these platforms, the providers' own privacy policies apply. They may also collect and analyze your behavior for targeted advertising.
    6. Klaviyo, used for sending newsletters and automated email flows, and
    7. YouTube, where embedding videos may transfer IP addresses to Google servers in third countries.

  5. Legal or Technical Providers
    We may share your data if required for audits, tax matters, or legal advice.

  6. Hosting Partners and System Providers
    We use external partners for the operation of IT infrastructure and security measures.

  7. Cookies
    Cookies are managed through the company Cookie Information, which registers and manages your consent.

Some of the mentioned platforms and partners may be located outside the EU/EEA, and your data may therefore be transferred to third countries where the level of data protection does not necessarily correspond to the European level. In such cases, we ensure that the platform's contracts comply with the EU Commission's standard contractual clauses.

8. What Are Your Rights

You have a number of rights under GDPR that give you control over your own information. We want to make it as easy as possible for you to understand and exercise these rights. Below, we outline your options:

  1. Right of Access
    You have the right to be informed about what personal data we have about you, where we got it from, why we have it, and who we may have shared it with. You can also get a copy of your data.
  2. Right to Rectification
    If you find that we have incorrect or incomplete information about you, you have the right to have it corrected. This could be, for example, a wrong phone number or a changed address.
  3. Right to Erasure ("Right to be Forgotten")
    You can ask us to delete your information – for example, if you are no longer a customer or if you have withdrawn your consent. However, we will not be able to delete information that we are legally obliged to retain – for example, invoices.
  4. Right to Restriction of Processing
    In certain cases, you can ask us to temporarily stop processing your information – for example, if you believe it is incorrect and want it investigated before further use.
  5. Right to Data Portability
    You have the right to receive your information in a structured, commonly used, and machine-readable format – and in certain cases, have it transferred directly to another company.
  6. Right to Object
    You have the right to object to us using your information for, for example, direct marketing or analysis purposes based on our legitimate interests. In such cases, we will stop processing unless we have compelling grounds to continue.
  7. Right to Withdraw Consent
    If you have previously given consent for, for example, newsletters or cookies, you can withdraw it at any time. Withdrawal does not affect previous processing, but going forward, we will cease that specific processing.

If you wish to exercise your rights, you can contact us at support@myextensions.dk. We will typically respond as quickly as possible – and always within one month. If your request is extensive, the deadline may be extended by an additional two months, but we will notify you in such cases.

9. Complaint Options

If you believe we are not complying with your rights, or if you are dissatisfied with how we process your personal data, you always have the option to contact us directly. We take all inquiries seriously and will do our best to find a solution quickly and respectfully.

You also have the right to complain to the relevant national data protection authority – which is an independent public authority that supervises compliance with data protection rules in the country where you live or where you believe your data has been processed incorrectly.

Below you will find contact information for the relevant supervisory authorities in Denmark:

Denmark
Datatilsynet (Danish Data Protection Agency)
Web: www.datatilsynet.dk
Email: dt@datatilsynet.dk

We recommend that you contact us in the first instance – many issues can be resolved quickly and informally. However, it is your right to complain directly to the authority if you wish.

10. Cookies and Tracking Technologies

When you visit our website, we use cookies and similar technologies to provide you with a good and functional user experience, analyze traffic, and display relevant marketing.

Cookies are small text files that are stored on your computer or device when you visit a website. They enable the website to remember your actions and preferences – such as login, language selection, or items in your shopping cart – for a period of time.

Cookies can be:

  • First-party cookies (set by us) or third-party cookies (set by, for example, analytics and marketing partners),
  • Session cookies, which are deleted when you close your browser, or persistent cookies, which are stored for longer periods.

Why Do We Use Cookies?

We use cookies for the following purposes:

  • Necessary Cookies
    Make the webshop technically functional (e.g., shopping cart, login, security). Cannot be declined as they are essential for the site to work.
  • Preference Cookies
    Remember your choices (e.g., language, display settings)
  • Statistics Cookies
    Help us understand how the site is used (e.g., through Google Analytics)
  • Marketing Cookies
    Used to target ads on, for example, Google, Meta (Facebook/Instagram), Pinterest, and LinkedIn. They support remarketing, conversion tracking, and behavior-based advertising. They are only activated if you give consent.

Cookie Information – Your Control Over Consent

We use Cookie Information as our Consent Management Platform (CMP) to obtain, register, and document your choices regarding cookies, and to ensure we comply with GDPR and ePrivacy regulations:

  • On your first visit, you will be presented with a cookie banner where you can actively choose which types of cookies you wish to accept.
  • You can change your cookie preferences or withdraw your consent at any time by opening the cookie settings link at the bottom of our website. Here you can also see the full cookie overview, view providers, purposes, and duration of individual cookies.
  • Cookie Information logs and documents your consent and stores it in accordance with legislation.

11. Changes to the Privacy Policy

You can always view the latest version of the privacy policy on this page.

We reserve the right to update, change, or replace parts of our privacy policy at our discretion by posting updates and changes on our website. It is your responsibility to regularly check our website for changes.