We only process the personal data needed to fulfil your order, and we never pass it on for marketing.
Data controller
Galleri Pilehøj I/S (trading as Under The Elderflower), Rødvigvej 33, 4640 Lille Torøje, CVR 41856378. Questions about your data can be sent to info@undertheelderflower.com.
What data we process
When you buy, we process your name, email address, delivery address, phone number (if you provide it) and details about your order. The payment itself is handled by Stripe; we never receive or store your card details.
Purposes and legal basis
- Fulfilling and delivering your order — the processing is necessary to perform the purchase contract (GDPR art. 6(1)(b)).
- Bookkeeping — we are required to keep accounting records (art. 6(1)(c), cf. the Danish Bookkeeping Act).
Recipients
We only share data with the processors and partners needed to run the shop: Stripe (payments), Resend (order emails), Supabase (hosting and database) and the carrier in connection with delivery.
Retention
Accounting records are kept for 5 years from the end of the financial year, cf. the Danish Bookkeeping Act. Other data is deleted when no longer needed.
Cookies
We only use necessary cookies that make the shopping cart and administration work. For statistics we use a cookieless, privacy-friendly solution that does not collect personally identifiable data and does not require consent.
Your rights
You have the right to access, rectify and erase your data, as well as the right to object and to data portability. Write to info@undertheelderflower.com. If you are unhappy with our processing, you can complain to the Danish Data Protection Agency (datatilsynet.dk).