Privacy policy.

Goder v/Simon Degn, CVR 35619429, Østbanetorvet 7, 4. tv., 8000 Aarhus C, Danmark, is the controller. Contact us at hello@goder.dk.

For purchases, we process your name, contact, delivery and billing details, order data, payment status and correspondence. Full card details are handled by the payment provider through Shopify Checkout.

When you use the contact form, we process your name, email, subject, message and technical security information from the CAPTCHA check. If you subscribe to the newsletter, we process your email address, consent and information about subscribing and unsubscribing. The site also stores functional choices such as currency, whether the newsletter popup has been closed, and your analytics and marketing cookie preference locally in your browser.

If you consent, Google Analytics, Meta Pixel and Meta Conversions API record information about visited pages, referring pages or campaigns, approximate geographic area, device type and actions such as product searches, product views, cart activity, starting checkout and completed purchases. Google uses the IP address at collection time to derive an approximate country, region and city and discards it before the data is logged in Analytics. Meta receives catalogue product IDs plus technical browser identifiers, IP address and browser information for relevant events. For a completed purchase, contact and address details are sent directly from the server to Meta only after normalization and SHA-256 hashing. With consent, Partner-ads stores a unique click ID used to connect an affiliate click to a possible order.

Order data is used to enter into and perform the sales contract, deliver the item and handle payment, returns and claims under Article 6(1)(b) GDPR.

Data needed for bookkeeping and other legal duties is processed under Article 6(1)(c). Enquiries, security and misuse prevention are processed on the basis of our legitimate interests in customer service and operations under Article 6(1)(f).

We send newsletters and other email marketing only with your consent under Article 6(1)(a). You confirm the subscription through a link in an email and can withdraw consent at any time through the unsubscribe link in our emails or by contacting us.

Google Analytics, Meta Pixel, Meta Conversions API and the Partner-ads click ID are used only with your consent under Article 6(1)(a). Their purposes are visitor statistics, ad measurement, catalogue matching and affiliate attribution. The Partner-ads partner ID is used without consent for simple conversion statistics on the basis of our legitimate interest in crediting sales to the correct affiliate under Article 6(1)(f); the ID cannot by itself be linked to personal data. You can change or withdraw consent at any time through Cookies in the side menu; withdrawal does not affect the lawfulness of earlier processing.

We use relevant suppliers to run the webshop and process enquiries, including Shopify for the shop, checkout and orders, Vercel for hosting, Resend for delivering contact emails and managing and sending newsletters, Cloudflare Turnstile for bot protection, Google Analytics for consent-based visitor statistics, Meta Platforms Ireland for consent-based ad and catalogue measurement through Meta Pixel and Meta Conversions API, and Partner-ads ApS for affiliate attribution and commission settlement.

Data is also shared with carriers, payment providers, advisers or authorities when necessary. Some suppliers may process data outside the EU/EEA; where this occurs, transfers must rely on a valid mechanism such as the European Commission's standard contractual clauses or an adequacy decision.

Ordinary enquiries are generally deleted no later than 12 months after the matter is closed unless relevant to an order, dispute or other legal duty.

Order and accounting material is retained for the current financial year and a further five years where required by Danish bookkeeping law. Other data is deleted or anonymised when no longer needed for its purpose.

Newsletter subscription information is retained while the consent is used. After unsubscribing, we retain the necessary record of consent and withdrawal for up to two years after its last use, after which it is deleted or anonymised unless other law requires longer retention.

Analytics and marketing information is retained according to the periods configured in our GA4 and Meta properties and is then deleted or aggregated under the suppliers' applicable settings. Partner-ads cookies expire after 40 days.

Goder uses local storage for necessary and functional choices such as currency, cart contents, your consent preference and remembering when you close the newsletter popup so it is not shown again in the same browser. The contact CAPTCHA and Shopify Checkout may use necessary technologies for security, session handling and payment. The Partner-ads cookie paid stores the affiliate partner ID for 40 days and is necessary for simple conversion measurement.

Google Analytics, Meta Pixel, Meta Conversions API and the Partner-ads cookie pacid are activated only when you choose Allow all cookies. pacid stores a unique click ID for up to 40 days for detailed affiliate attribution. Google's advertising, advertising-data and personalisation storage remain disabled. If you choose Necessary only or later withdraw consent, the optional tools are not activated and available first-party Google Analytics, Meta and Partner-ads click-ID cookies are removed.

Depending on the circumstances, you may request access, correction, erasure, restriction, object to processing or receive data in a structured format. Rights may be limited by duties such as bookkeeping requirements or ongoing legal claims.

Email hello@goder.dk to exercise your rights. You may also complain to the Danish Data Protection Agency.

We update this policy when our processing or services change. The date above identifies the most recent material update.