Privacy policy
Draft, last updated 10 November 2026. Fill in the bracketed parts and have it checked before launch.
This policy explains what personal data we collect through this website, why, and what your rights are.
Who we are
[COMPANY NAME] ApS, CVR [NUMBER], [ADDRESS], Aarhus, Denmark, is the data controller. You can reach us at [YOUR EMAIL].
What we collect and why
Waitlist signups
When you join the first batch list we collect your email address. We use it for one purpose: to tell you when the first batch is available to order, and to send the related reminders about that batch.
- Legal basis: your consent (GDPR article 6(1)(a)). You give it by submitting the form.
- You can withdraw consent at any time by using the unsubscribe link in any email or by writing to [YOUR EMAIL]. We then delete your address.
- We do not use your address for anything else, and we do not sell or share it for marketing.
Enquiries from bakeries, restaurants and shops
If you email us about samples or prices, we keep your name, business name, email and the content of your message so that we can reply and follow up.
- Legal basis: our legitimate interest in answering business enquiries (GDPR article 6(1)(f)), and steps taken before entering a contract (article 6(1)(b)).
Orders
This applies once the shop is open. When you place an order we collect your name, delivery address, email, phone number if you give one, and what you ordered. Payment details are handled by our payment provider and we never see your full card number.
- Legal basis: performing our contract with you (GDPR article 6(1)(b)).
- We must keep accounting records, including invoices, for five years after the end of the financial year, as required by the Danish Bookkeeping Act (GDPR article 6(1)(c)).
Technical data
Our hosting provider records standard technical information when you visit, such as your IP address, browser type and the pages requested. This is used to deliver the site and keep it secure. We do not use it to identify you.
Cookies and tracking
This website sets no cookies of its own and uses no advertising or analytics trackers. If that changes, we will update this policy and ask for your consent where the law requires it.
The site loads its fonts from Google Fonts. Your browser therefore contacts Google’s servers, which means Google receives your IP address.
Who processes data for us
We use a small number of service providers who process data on our instructions:
- [EMAIL TOOL NAME] stores the waitlist and sends our emails.
- Cloudflare, Inc. hosts this website.
- Google Ireland Ltd. delivers the fonts.
- Once the shop is open: [SHOP PLATFORM], [PAYMENT PROVIDER] and [CARRIER], so that we can take payment and deliver your order.
Some of these providers are based outside the EU or use systems outside the EU. Where that is the case, the transfer relies on the EU Commission’s adequacy decisions or on standard contractual clauses.
How long we keep data
- Waitlist email addresses: until you unsubscribe, and no longer than 12 months after the first batch has been sold.
- Business enquiries: up to 24 months after our last contact.
- Order and accounting records: five years after the end of the financial year.
Your rights
You have the right to ask us for access to your data, to have it corrected or deleted, to restrict or object to our use of it, and to receive it in a portable format. You can withdraw consent at any time. Write to [YOUR EMAIL] and we will answer within one month.
Complaints
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Danish Data Protection Agency, Datatilsynet, at datatilsynet.dk.
Changes
We will update this page if our practices change. The date at the top shows the latest version.