Privacy policy
Privacy Policy
Last updated: June 2026
1. Who we are
This privacy policy describes how Elyo collects, uses, and protects your personal data when you visit elyo.dk or make a purchase with us.
Elyo CVR:46527518 Email: sales@elyo.dk Website: elyo.dk
We are the data controller for the personal information collected through this website.
2. What personal data we collect
When you use our website or place an order, we may collect:
- Contact details — name, email address, phone number, billing and shipping address
- Payment information — processed securely through Shopify Payments, MobilePay, or Klarna. We never store your card details
- Order information — products purchased, order history, transaction details
- Account information — if you create an account, your username and preferences
- Device and usage data — IP address, browser type, pages visited, how you interact with the website
- Communications — messages you send us via email or contact form
3. Why we collect your data and our legal basis
Under GDPR we are required to have a legal basis for processing your personal data.
| Purpose | Legal basis |
|---|---|
| Processing your order and payment | Performance of a contract |
| Sending order confirmations and shipping updates | Performance of a contract |
| Responding to customer service enquiries | Legitimate interest |
| Preventing fraud and securing our store | Legitimate interest |
| Sending marketing emails (newsletter) | Your consent |
| Complying with Danish tax and accounting law | Legal obligation |
4. Who we share your data with
We only share your data when necessary:
- Shopify — our store platform processes your data to run the store. Shopify is GDPR compliant. See Shopify's Privacy Policy
- PostNord / GLS / DAO — your name and address are shared with our delivery carrier to fulfil your order
- Klarna — if you pay with Klarna, your data is shared with Klarna for payment processing and credit assessment
- MobilePay — if you pay with MobilePay, your data is processed by MobilePay/Vipps MobilePay
- Accounting software — order and financial data may be shared with our accounting provider for legal compliance
We do not sell your personal data to third parties. Ever.
5. Cookies
Our website uses cookies to make your experience work correctly. These include:
- Essential cookies — required for the website and checkout to function
- Analytics cookies — help us understand how visitors use the site (only with your consent)
- Marketing cookies — used for advertising (only with your consent)
You can manage your cookie preferences at any time via the cookie banner on our website.
6. Newsletter and marketing
If you sign up for our newsletter, we will send you updates about new collections, products, and stories from Elyo. We use your email address for this purpose only.
You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly. Unsubscribing does not affect the processing of data related to your orders.
7. How long we keep your data
| Data type | Retention period |
|---|---|
| Order data | 5 years (required by Danish Bookkeeping Act) |
| Customer account data | Until you delete your account |
| Newsletter subscriptions | Until you unsubscribe |
| Cookie and analytics data | As set by each cookie provider |
8. Where your data is stored
Your data is processed and stored by Shopify, whose servers are located in the United States and other countries. Shopify transfers data from the EU under Standard Contractual Clauses approved by the European Commission, ensuring your data is protected to EU standards.
9. Your rights under GDPR
As a person in Denmark and the EU you have the following rights:
- Right to access — request a copy of the data we hold about you
- Right to correction — ask us to correct inaccurate data
- Right to deletion — ask us to delete your personal data
- Right to restriction — ask us to limit how we use your data
- Right to portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interest
- Right to withdraw consent — withdraw consent for marketing at any time
To exercise any of these rights, contact us at sales@elyo.dk. We will respond within 30 days as required by GDPR.
10. Complaints
If you believe we are handling your data incorrectly, you have the right to lodge a complaint with the Danish data protection authority:
Datatilsynet Carl Jacobsens Vej 35 2500 Valby, Denmark datatilsynet.dk
11. Children
Our website is not intended for children under 18. We do not knowingly collect personal data from children.
12. Changes to this policy
We may update this policy from time to time. The date at the top of the page always reflects the most recent version. For significant changes we will notify you by email or a notice on our website.
13. Contact
For any questions about this privacy policy or your personal data:
Elyo Email: sales@elyo.dk Website: elyo.dk