PRIVACY NOTICE

PRIVACY POLICY

Last updated: November 2026

1. WHO WE ARE

Small Wonder ApS (“Small Wonder”, “we”, “us” or “our”) is responsible for processing your personal data when you use www.small-wonder.dk (the “Website”) and buy our Products.

Small Wonder ApS

CVR: 43 34 70 71

Email: contact@small-wonder.dk

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at contact@small-wonder.dk.

2. WHAT DATA WE COLLECT

We only collect the personal data we need. Depending on how you use the Website, this may include:

  • Order information: your name, email address, delivery and billing address, phone number (if provided), the Products you buy, and order and payment history.
  • Account information: if you create an account, your name, email address, saved addresses and order history.
  • Contact information: your name, email address and the content of your message when you contact us via the contact form or email.
  • Newsletter information: your email address when you sign up for our newsletter.
  • Technical information: your IP address, browser type, device information and how you use the Website, collected through cookies (see section 7).

We do not receive or store your full card details. Payments are processed securely by Shopify Payments.

3. WHY WE PROCESS YOUR DATA AND OUR LEGAL BASIS

  • To process and deliver your order, handle returns and withdrawals, and provide customer service. Legal basis: performance of a contract (GDPR Article 6(1)(b)).
  • To manage your customer account, if you choose to create one. Legal basis: performance of a contract (GDPR Article 6(1)(b)).
  • To answer your enquiries sent through the contact form or by email. Legal basis: our legitimate interest in responding to you (GDPR Article 6(1)(f)).
  • To send you our newsletter, with news about releases and editions. Legal basis: your consent (GDPR Article 6(1)(a)). You can unsubscribe at any time using the link in every email.
  • To comply with legal obligations, including bookkeeping and tax rules. Legal basis: legal obligation (GDPR Article 6(1)(c)).
  • To keep the Website secure and prevent fraud. Legal basis: our legitimate interest in protecting our business and customers (GDPR Article 6(1)(f)).

4. WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We only share it with partners who help us run the Website and fulfil your orders:

  • Shopify, which hosts our Website, stores order and customer data, and sends our newsletter.
  • Shopify Payments, which processes your payment.
  • Shipping carriers (FedEx, USPS and DHL), which receive your name, address and contact details to deliver your order.
  • Public authorities, such as the Danish Tax Agency, where we are required to share data by law.

These partners process data on our behalf under data processing agreements, or as independent controllers where required for their services.

5. TRANSFERS OUTSIDE THE EU/EEA

Some of our partners, including Shopify, may process data outside the EU/EEA, for example in Canada or the United States. When this happens, the transfer is protected by an EU adequacy decision, the EU-US Data Privacy Framework, or the European Commission’s Standard Contractual Clauses.

6. HOW LONG WE KEEP YOUR DATA

  • Order and payment information is kept for 5 years from the end of the financial year in which the purchase was made, as required by the Danish Bookkeeping Act.
  • Account information is kept until you delete your account or ask us to delete it, subject to the bookkeeping rules above.
  • Enquiries are kept for as long as needed to handle your request, and no longer than 12 months after the matter is closed.
  • Newsletter data is kept until you unsubscribe.

7. COOKIES

The Website uses cookies that are necessary for it to work, such as remembering your cart and keeping checkout secure. These do not require your consent.

Shopify may also set cookies for statistics and to improve the Website. These are only used if you accept them in our cookie banner. You can change or withdraw your consent at any time through the cookie settings on the Website or in your browser.

8. YOUR RIGHTS

Under the GDPR, you have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data deleted, unless we are required to keep it by law
  • restrict our processing of your data
  • receive your data in a portable format
  • object to processing based on our legitimate interests
  • withdraw your consent at any time, without affecting processing carried out before withdrawal

To exercise any of these rights, email us at contact@small-wonder.dk. We will respond within one month.

9. COMPLAINTS

If you believe we are processing your personal data unlawfully, you can file a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, dt@datatilsynet.dk, www.datatilsynet.dk. We would appreciate the chance to resolve your concern first, so please feel free to contact us directly.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The latest version will always be available on the Website, with the date of the last update shown at the top.

To publish it, add it in Shopify under Settings > Policies > Privacy policy. Shopify then links it automatically at checkout, and you can add it to your footer menu. Also check that the cookie banner is switched on under Settings > Customer privacy, since section 7 relies on it.