Privacy
What we collect, why we collect it, who else sees it, how long we keep it, and what you can require of us.
We are, and here is how to reach us.
POSHPOSH Living ApS is the data controller for the personal data described on this page. That means we decide what is collected and why, and we are the ones answerable for it.
POSHPOSH Living ApS
Mosevej 47C, 6760 Ribe, Denmark
CVR 44262274
hello@poshposh.dk
+45 27 89 08 22
We are a small company and there is no data protection officer to route your question through. Write to the address above and a person reads it.
This page explains what we collect when you buy from us, write to us, subscribe to our emails or simply read the site, what we do with it, who else sees it, how long we keep it and what you can require of us.
It applies to poshposh.dk and to the emails we send. It does not apply to other companies' websites that we link to, which run their own policies.
To sell you a case and get it to you we need your name, delivery address, email address, telephone number, the contents and value of the order, and the parcel shop you chose.
We do not see or store your card number. Payment is handled by the payment provider, which passes back only whether the payment succeeded and the last four digits, so that we can match a refund to the right card.
Why: to perform the contract you entered into when you ordered. Without this data there is no order.
Our shop platform records the usual technical information: IP address, browser and device type, the pages visited and the site that sent you here. Where you have agreed to analytics cookies, this is used to count visits and understand which pages work.
Why: our legitimate interest in keeping the site secure and working, for the strictly necessary part, and your consent for anything beyond that. The Cookie Policy sets out the detail.
If you email us, or start a return or a guarantee claim, we keep the correspondence along with whatever you chose to tell us in it, and any photographs you sent.
Why: to answer you and to keep a record of what was agreed, which is our legitimate interest and, where the exchange concerns an order, part of performing the contract.
If you sign up for our emails we keep your email address, the date you signed up, and afterwards whether our emails are opened and which links are followed.
Why: your consent, which you gave when you signed up and can withdraw at the bottom of every email we send. Withdrawing it stops the emails and does not affect anything else.
Worth saying plainly.
We do not ask for and do not want your date of birth, your civil registration number, your income, or anything about your health, beliefs or politics. If you send us something of that sort in an email, we will not enter it into any system.
We do not buy personal data from anyone, and we do not sell yours to anyone.
Named, rather than described as trusted partners.
We use a small number of companies to run the shop. Each processes data on our instructions under a data processing agreement, and none may use it for their own purposes.
Beyond that, we disclose personal data only where the law requires it.
Our suppliers are based in the EU or in countries that process EU data. Where a supplier processes data outside the EU or the EEA, that transfer is covered by the European Commission's standard contractual clauses, or by an adequacy decision, together with whatever additional safeguards the supplier applies.
You may ask us for a copy of the safeguards that apply to a particular transfer, and we will send it.
Not indefinitely, and not arbitrarily.
Under the General Data Protection Regulation you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict what we do with it, or hand it to another company in a portable form. You may object to processing we base on legitimate interests, and you may withdraw consent at any time.
Write to hello@poshposh.dk. We answer within one month and there is no charge. We may need to confirm who you are first, which is a protection for you rather than an obstacle.
Some of it we cannot delete on request. An invoice is one of them, because the law requires us to keep it. We will tell you which parts those are and why.
We send emails only to people who asked for them. Every email carries an unsubscribe link that works immediately and requires no explanation.
Unsubscribing does not stop the emails that belong to an order, such as the confirmation and the tracking notice. Those are part of the purchase rather than marketing.
The site runs over an encrypted connection throughout. Access to order data is limited to the people who need it to do their job, and protected by individual accounts with two-factor authentication.
If a breach ever occurred that was likely to put your rights at risk, we would tell you and the supervisory authority, within the deadlines the regulation sets, and we would tell you what actually happened rather than a sentence of public relations.
The shop is not aimed at children and we do not knowingly collect data from them. If you believe a child has given us personal data, write to us and we will remove it.
When we add a supplier or change what we collect, this page is updated before the change takes effect, and the date at the top moves with it. Where a change is significant and you are a subscriber, we tell you by email rather than hoping you notice.
Write to us first at hello@poshposh.dk. If you are not satisfied with the answer, you may complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark.
If you live elsewhere in the EU you may instead complain to the supervisory authority in your own country.