Legal
Privacy policy.
This page explains what personal data Goder processes, why it is used, who receives it and the rights available to you.
Last updated 3 August 2026
1. Controller
Goder v/Simon Degn, CVR 35619429, Østbanetorvet 7, 4. tv., 8000 Aarhus C, Danmark, is the controller. Contact us at hello@goder.dk.
2. Data we process
For purchases, we process your name, contact, delivery and billing details, order data, payment status and correspondence. Full card details are handled by the payment provider through Shopify Checkout.
When you use the contact form, we process your name, email, subject, message and technical security information from the CAPTCHA check. The site also stores functional choices such as currency and your analytics preference locally in your browser.
If you consent to Google Analytics, information is recorded about visited pages, referring pages or campaigns, approximate geographic area, device type and actions such as product searches, product views, cart activity and starting checkout. Google uses the IP address at collection time to derive an approximate country, region and city and discards it before the data is logged in Analytics.
3. Purposes and legal bases
Order data is used to enter into and perform the sales contract, deliver the item and handle payment, returns and claims under Article 6(1)(b) GDPR.
Data needed for bookkeeping and other legal duties is processed under Article 6(1)(c). Enquiries, security and misuse prevention are processed on the basis of our legitimate interests in customer service and operations under Article 6(1)(f).
Google Analytics is used only with your consent under Article 6(1)(a). You can change or withdraw consent at any time through Cookies in the side menu; withdrawal does not affect the lawfulness of earlier processing.
4. Recipients and processors
We use relevant suppliers to run the webshop and process enquiries, including Shopify for the shop, checkout and orders, Vercel for hosting, Resend for delivering contact emails, Cloudflare Turnstile for bot protection and Google Analytics for consent-based visitor statistics.
Data is also shared with carriers, payment providers, advisers or authorities when necessary. Some suppliers may process data outside the EU/EEA; where this occurs, transfers must rely on a valid mechanism such as the European Commission's standard contractual clauses or an adequacy decision.
5. Retention
Ordinary enquiries are generally deleted no later than 12 months after the matter is closed unless relevant to an order, dispute or other legal duty.
Order and accounting material is retained for the current financial year and a further five years where required by Danish bookkeeping law. Other data is deleted or anonymised when no longer needed for its purpose.
Analytics information is retained according to the retention period configured in our GA4 property and is then deleted or aggregated under Google's applicable settings.
6. Cookies and local storage
Goder uses local storage for necessary and functional choices such as currency, cart contents and your consent preference. The contact CAPTCHA and Shopify Checkout may use necessary technologies for security, session handling and payment.
Google Analytics and its analytics cookies only load when you choose Allow all cookies. Advertising, advertising-data and personalisation storage remain disabled. If you choose Necessary only or later withdraw consent, Analytics does not load and available Google Analytics cookies are removed.
7. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, object to processing or receive data in a structured format. Rights may be limited by duties such as bookkeeping requirements or ongoing legal claims.
Email hello@goder.dk to exercise your rights. You may also complain to the Danish Data Protection Agency.
8. Changes
We update this policy when our processing or services change. The date above identifies the most recent material update.