[NEW Aug 2026] Privacy & cookie policy

Privacy policy

Last updated: 6 August 2026

Data controller

Bjaf ApS, Bjørnkærvej 3, 8783 Hornsyld, Denmark
CVR: 39200864 — support@bjaf.com

We are the data controller for the personal data we process about you.

What we collect and why

When you buy something. Name, delivery and billing address, email, phone number, order details and payment status. We use this to process and deliver your order, handle returns and complaints, and to meet our legal obligations. Legal basis: performance of a contract (GDPR art. 6(1)(b)) and legal obligation (art. 6(1)(c)). We do not see or store your full card details; these are handled by our payment provider.

When you subscribe to our newsletter. Email address, and what you have browsed or bought so we can make our emails relevant. Legal basis: your consent (art. 6(1)(a)). You can unsubscribe at any time using the link in every email or by emailing us.

When you visit bjaf.com. IP address, device and browser information, pages viewed and interactions, through cookies and similar technologies. Strictly necessary cookies run on our legitimate interest in operating the site (art. 6(1)(f)). Everything else — analytics, marketing, personalisation — runs only on your consent (art. 6(1)(a)). See our Cookie policy.

When you contact us. Whatever you choose to send us, so we can answer. Legal basis: legitimate interest (art. 6(1)(f)) or contract.

When you leave a review. Your name or display name and the content of your review, published on our site. Legal basis: consent.

We do not carry out automated decision-making or profiling that produces legal effects for you. We do not personalise prices.

Who we share it with

We use service providers who process data on our behalf under data processing agreements: our webshop platform (Shopify), payment providers, shipping carriers, our email marketing platform, our review platform, and analytics and advertising providers including Google and Meta where you have consented.

Some of these providers are established in the United States or process data there. Where that happens, transfers are based on the EU-US Data Privacy Framework where the recipient is certified, or on the European Commission's Standard Contractual Clauses with supplementary safeguards. You can ask us for a copy of the safeguards in place.

We also disclose data where we are legally required to, for example to tax authorities.

We never sell your personal data.

How long we keep it

Order and accounting records: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act. Newsletter data: until you unsubscribe, plus a suppression record so we do not email you again. Customer service correspondence: up to 3 years. Cookie and tracking data: as set out in the cookie policy below.

Your rights

You have the right to access your data, to have inaccurate data corrected, to have data erased, to have processing restricted, to object to processing based on legitimate interests, and to receive your data in a portable format. Where processing is based on consent, you can withdraw it at any time; this does not affect processing carried out before you withdrew.

To exercise any of these, email support@bjaf.com. We will respond within one month.

If you are unhappy with how we handle your data you can complain to the Danish Data Protection Agency:

Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark — datatilsynet.dk — dt@datatilsynet.dk

You may also complain to the supervisory authority in your own country.

Children

Our website is not directed at children. We do not knowingly collect data from anyone under 15.

Changes

We may update this policy. The current version is always published here with the date it was last updated.

Cookie policy

What cookies are

Cookies are small text files stored on your device when you visit a website. They let the site remember your actions and preferences, and let us and our partners understand how the site is used.

Your consent

We only set strictly necessary cookies without asking you. Everything else — statistics, functional and marketing cookies — is set only after you have given consent through our cookie banner.

You can accept all, reject all, or choose individual categories. Rejecting is as easy as accepting. Nothing is pre-ticked.

You can change or withdraw your consent at any time by clicking "Cookie settings" in the footer of any page. Withdrawing consent does not affect cookies already set; to remove those, clear cookies in your browser settings.

We ask again after 12 months, or sooner if we make material changes to what we use.

What we use

Strictly necessary. Keep your basket, keep you logged in, remember your language and country, secure checkout and protect against fraud. These cannot be switched off. Typical lifetime: session to 12 months.

Functional. Remember preferences such as recently viewed products, and enable chat and review widgets. Typical lifetime: up to 12 months.

Statistics. Help us understand how visitors find and use bjaf.com so we can improve it. Includes Google Analytics. Typical lifetime: up to 24 months.

Marketing. Let us and our advertising partners show you relevant ads and measure whether they work. Includes Meta (Facebook and Instagram) and Google Ads. These may involve transfers to providers outside the EU/EEA; see the privacy policy above. Typical lifetime: up to 24 months.

A full, current list of the individual cookies we use, their purpose, provider and lifetime, is available in the cookie settings panel.

Personal data

Cookies may involve processing of personal data. How we handle that, and your rights, are described in the privacy policy above.

Questions

Email support@bjaf.com.