Privacy policy

Last updated: 09.07.2026

1. Introduction

This Privacy Policy explains how Myextensions ApS processes your personal data when you shop with us, use our website, or contact our customer service team.

Personal data means any information that can be used to identify you, such as your name, address, email address, browsing behaviour, gender, and age. This Privacy Policy applies to all processing of personal data carried out by us, both as part of our core business activities and through the online services we provide.

We are committed to being transparent about how we use your personal data and the rights you have in relation to it. This Policy applies throughout the European Union and has been adapted to meet national legal requirements where necessary.

2. Data Controller

Myextensions ApS

Managing Director: Cate Dina Klyvø

Kattesundet 45
9000 Aalborg
Denmark

Email: support@myextensions.dk

Phone: +45 23 23 23 09

3. What Personal Data We Collect

We collect different types of personal data depending on how you use our services:

  • Your name, address, telephone number, and email address when you place an order or contact us.

  • Information about your purchases and payments so we can process and deliver your order.

  • Information about how you use our website, such as the website you visited before ours and the pages or links you click on.

  • Any correspondence you have with our customer service team.

  • Your preferences regarding cookies and marketing communications.

We only collect personal data that is necessary to enable you to use our webshop and services.

4. How We Use Your Personal Data

We use your personal data to provide you with the best possible service and to fulfil our legal and contractual obligations. This means we use your information to:

  • Process your purchases and deliver your orders.

  • Provide customer support.

  • Send you relevant offers and news if you have given your consent.

  • Analyse how our website is used and improve its functionality.

  • Comply with applicable legislation, including accounting requirements and consumer protection laws.

5. When We Delete Your Personal Data

We delete your personal data when it is no longer needed for the purpose for which it was collected or when you ask us to do so. This may occur:

  • When the purpose of the processing has been fulfilled.

  • When the customer relationship has ended.

  • If you withdraw your consent.

  • If you object to the processing and we have no overriding legitimate grounds for retaining your data.

In some cases, we are legally required to retain certain personal data for a longer period. This may include statutory retention periods for tax or accounting purposes (typically six years for business correspondence or ten years for accounting records), to establish, exercise, or defend legal claims (up to four years), or where the data is required to protect the rights of another natural or legal person. In such cases, your personal data will be deleted once the applicable retention period has expired.

6. Legal Basis for Processing

Throughout the European Union, the processing of personal data is governed by the General Data Protection Regulation (GDPR). The GDPR applies directly in all EU Member States and is designed to protect your fundamental rights whenever your personal data is processed.

Among other things, the GDPR requires that:

  • Personal data may only be processed where there is a lawful basis.

  • Individuals have rights such as access, rectification, and erasure of their personal data.

  • Organisations must clearly explain the purposes of processing, recipients of the data, and retention periods.

  • Appropriate technical and organisational measures must be implemented to protect personal data.

Although the GDPR applies directly across the EU, each Member State also has national data protection legislation that supplements the Regulation in specific areas.

We process your personal data on the following legal bases:

Performance of a Contract

When you place an order through our website or contact our customer service team, we process your personal data in order to provide the products or services you have requested. This includes processing payments, shipping your order, handling returns, and responding to your enquiries. Without this information, we cannot process your order or provide effective customer support.

For more information about purchasing from our webshop, please refer to our Terms and Conditions.

Consent

In certain situations, we ask for your consent, for example when you subscribe to our newsletter or accept marketing cookies. Giving consent is entirely voluntary, and you may withdraw it at any time. If you withdraw your consent, we will stop processing your personal data on that basis unless we are legally required to retain it for another reason.

Legal Obligation

In some cases, we are legally required to process and retain certain personal data. This may include invoice information that must be retained under applicable accounting legislation, as well as information relating to consumer rights, warranties, or other statutory obligations.

Legitimate Interests

We may also process your personal data where it is necessary for our legitimate interests, provided that these interests are not overridden by your rights and freedoms. This may include improving the user experience on our website, preventing fraud or misuse, analysing purchasing behaviour, or preparing internal statistics.

Whenever we rely on legitimate interests as the legal basis for processing, we carefully assess whether our interests outweigh your rights and freedoms. If you believe that we should not process your personal data on this basis, you have the right to object, and we will carefully consider your request.

7. Who We Share Your Personal Data With

We only share your personal data where necessary to fulfil the purposes described in this Privacy Policy, and only with trusted partners.

Webshop and Order Processing

We use Shopify as our e-commerce platform. When you place an order, your personal data is processed and stored within Shopify. This includes your name, address, email address, IP address, and order details.

Payment Service Providers

We offer various payment methods, including Klarna, PayPal, credit card providers, and similar payment services. Only the information necessary to process your payment is shared. The payment methods available depend on your country and can be viewed on our website.

Delivery Partners

We share your name, delivery address, and contact details with the shipping carriers we work with in order to deliver your order. The carriers available in your country can be found on our website.

Marketing and Analytics

We process personal data for marketing purposes only where you have given your consent. We use, among others:

  • Google Ads and Google Analytics to analyse website usage and display personalised advertisements.

  • Facebook Pixel and Meta Custom Audiences to measure conversions and personalise advertising on Facebook and Instagram, including Advanced Matching, where your hashed email address may be shared with Meta.

  • LinkedIn Insight Tag to track conversions and optimise LinkedIn advertising.

  • Pinterest Tag to measure the effectiveness of Pinterest advertising.

  • Social media platforms such as Facebook, Instagram, LinkedIn, and Pinterest. When you interact with us on these platforms, the respective providers' privacy policies apply, and they may collect and process your personal data for their own advertising purposes.

  • Klaviyo for newsletters and automated email marketing.

  • YouTube, where embedded videos may result in your IP address being transmitted to Google's servers in third countries.

Legal and Professional Advisers

We may share your personal data where necessary for auditing, tax compliance, legal advice, or similar professional services.

Hosting Providers and IT Service Providers

We use external providers to host our IT infrastructure and maintain the security of our systems.

Cookies

Cookie consent is managed through Cookie Information, which records and manages your cookie preferences.

Some of the platforms and partners listed above may be located outside the EU/EEA. Where personal data is transferred to third countries, we ensure that appropriate safeguards are in place, including the European Commission's Standard Contractual Clauses where required.

8. Your Rights

Under the GDPR, you have several rights that give you control over your personal data. We want to make these rights easy to understand and exercise.

Right of Access

You have the right to know what personal data we hold about you, where we obtained it, why we process it, and with whom it has been shared. You may also request a copy of your personal data.

Right to Rectification

If any of the personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected.

Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal data, for example if you are no longer a customer or have withdrawn your consent. However, we cannot delete information that we are legally required to retain, such as accounting records.

Right to Restriction of Processing

In certain circumstances, you may request that we temporarily restrict the processing of your personal data, for example while we investigate whether the information we hold is accurate.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred directly to another organisation.

Right to Object

You have the right to object to the processing of your personal data for purposes such as direct marketing or processing based on our legitimate interests. If you object, we will stop the processing unless we have compelling legitimate grounds to continue.

Right to Withdraw Consent

If you have previously given consent, for example to receive newsletters or marketing cookies, you may withdraw your consent at any time. Withdrawal of consent does not affect processing carried out before the withdrawal.

If you wish to exercise any of your rights, please contact us at support@myextensions.dk.

We aim to respond as quickly as possible and always within one month. If your request is particularly complex, this period may be extended by up to two additional months, in which case we will inform you accordingly.

9. Complaints

If you believe that we have not respected your rights or you are dissatisfied with the way we process your personal data, we encourage you to contact us first. We take all enquiries seriously and will do our best to resolve any concerns promptly and fairly.

You also have the right to lodge a complaint with the relevant national data protection authority in the country where you live or where you believe your personal data has been processed unlawfully.

For Denmark, the competent supervisory authority is:

The Danish Data Protection Agency (Datatilsynet)

Website: www.datatilsynet.dk

Email: dt@datatilsynet.dk

We recommend contacting us first, as many issues can be resolved quickly and informally. However, you are always entitled to contact the relevant supervisory authority directly.

10. Cookies and Tracking Technologies

When you visit our website, we use cookies and similar technologies to provide a functional user experience, analyse website traffic, and display relevant marketing.

Cookies are small text files stored on your computer or device when you visit a website. They enable the website to remember your actions and preferences, such as your login details, language settings, and shopping cart contents, over a period of time.

Cookies may be:

  • First-party cookies (set by us) or third-party cookies (set by analytics and marketing partners).

  • Session cookies, which are deleted when you close your browser, or persistent cookies, which remain stored for a longer period.

Why We Use Cookies

We use cookies for the following purposes:

Strictly Necessary Cookies

These ensure that the webshop functions correctly, including features such as the shopping cart, login, and website security. These cookies cannot be disabled because they are essential for the operation of the website.

Preference Cookies

These remember your preferences, such as language and display settings.

Analytics Cookies

These help us understand how visitors use our website, for example through Google Analytics.

Marketing Cookies

These enable personalised advertising through platforms such as Google, Meta (Facebook and Instagram), Pinterest, and LinkedIn. They support remarketing, conversion tracking, and behavioural advertising, and are only activated with your consent.

Cookie Information – Managing Your Consent

We use Cookie Information as our Consent Management Platform (CMP) to obtain, record, and manage your cookie preferences and to ensure compliance with the GDPR and the ePrivacy rules.

When you first visit our website, you will be presented with a cookie banner allowing you to choose which categories of cookies you wish to accept.

You can change your preferences or withdraw your consent at any time by opening the cookie settings link at the bottom of our website. There you can also view the full list of cookies, including providers, purposes, and retention periods.

Cookie Information records and stores your consent in accordance with applicable legislation.

11. Changes to This Privacy Policy

The latest version of this Privacy Policy will always be available on this page.

We reserve the right to update, amend, or replace any part of this Privacy Policy at our discretion by publishing updates on our website. It is your responsibility to check our website regularly for any changes.