Privacy policy – Wool2Fit
Menu
Search

Privacy policy

We take your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have under the General Data Protection Regulation (GDPR) and Danish data protection law.

If you have any questions after reading this, email info@wool2fit.com.

1. Who We Are (Data Controller)

Wool2fit is operated by dialogo.dk, a sole proprietorship owned by Thomas Glerup Kristensen.

For the purposes of the GDPR, we are the "data controller" of the personal data you provide or we collect through wool2fit.com.

Our contact details:

  • dialogo.dk, CVR 15854588, VAT DK15854588

  • Karlsbergvej 85, 8940 Randers SV, Denmark

  • Email: info@wool2fit.com


Data Protection Officer: Thomas Glerup Kristensen serves as the contact person for all data protection matters. You can reach him at the email above.

2. Quick Summary

For those who want the short version:

  • We collect information you provide (like your name, address, email) and information collected automatically (like your IP address and cookies) when you use our site or place an order

  • We use this data to process your order, communicate with you, improve our site, and — where you've opted in — send you marketing emails

  • We share data with the tools that run our business (Shopify, Klaviyo, carriers, payment providers, analytics) — we never sell your data

  • Some of those tools are in the US, which means your data is transferred there under EU-approved legal safeguards (Standard Contractual Clauses)

  • We keep order data for 5 years (Danish bookkeeping law requires it) and marketing data until you unsubscribe

  • You have the right to access, correct, delete, or export your data at any time, and to complain to Datatilsynet if we mishandle it

Full detail is in the sections below.

3. What Personal Data We Collect

We collect the following categories of personal data:

Identity and contact data

  • First and last name

  • Email address

  • Phone number (if you provide one)

  • Shipping address

  • Billing address

Transaction data

  • Products you view, add to cart, and purchase

  • Order history, including returns and exchanges

  • Payment information (processed by our payment providers — we do not store full card numbers on our servers)

Technical and usage data

  • IP address

  • Browser type and version, operating system, device type

  • Pages visited, time spent, referral source, clicks and interactions

  • Cookie identifiers (see Section 9)

Marketing and communications data

  • Newsletter subscription preferences and consent records

  • Engagement with our marketing emails (opens, clicks)

  • Support emails and any other correspondence you send us

  • Product reviews you submit

4. Where We Collect Data From

We collect personal data from three sources:

  • Directly from you — when you create an account, place an order, subscribe to our newsletter, take our fit quiz, contact customer service, or interact with the site in any other way.

  • Automatically — when you visit wool2fit.com, our systems and third-party tools (cookies, analytics, advertising pixels) collect technical and usage data.

  • From third parties — for example, payment providers confirm payment status, carriers confirm delivery, and Trustpilot collects reviews on our behalf.

5. How We Use Your Data and the Legal Basis

Under GDPR, we are required to have a lawful basis for each way we process your data. Here's a plain breakdown:

What we do with your data

Legal basis

Process your order, take payment, ship products, handle returns

Contract (Art. 6(1)(b) GDPR)

Respond to customer service inquiries and complaints

Contract (Art. 6(1)(b) GDPR)

Keep accounting and order records

Legal obligation — Danish bookkeeping law (Art. 6(1)(c) GDPR)

Send you marketing emails and newsletters

Your consent (Art. 6(1)(a) GDPR) — given when you subscribe; you can withdraw at any time

Show you targeted ads on Meta, Google, and other platforms

Your consent (Art. 6(1)(a) GDPR) — given via our cookie banner; you can withdraw at any time

Analyze site traffic and improve the site

Legitimate interest (Art. 6(1)(f) GDPR) where data is aggregated/anonymized, otherwise consent

Prevent fraud and secure our systems

Legitimate interest (Art. 6(1)(f) GDPR)

Display product reviews and ratings

Your consent + legitimate interest

Defend legal claims or comply with legal requests

Legal obligation / legitimate interest


Where we rely on consent, you can always withdraw it. Withdrawing consent does not affect the legality of processing we did before you withdrew.

6. Who We Share Your Data With

We share personal data only with trusted service providers ("data processors") who help us run our business. Each processor is bound by a written Data Processing Agreement (GDPR Article 28) and may only use your data on our instructions, not for their own purposes.

E-commerce platform and hosting

  • Shopify Inc. (Canada/US) — hosts the wool2fit.com store, processes checkout, and runs the built-in analytics. Subject to Shopify's Merchant DPA and EU Standard Contractual Clauses. See shopify.com/legal/privacy.

Email marketing

  • Klaviyo Inc. (US) — runs our newsletter, abandoned-cart emails, and transactional marketing. Subject to Klaviyo's DPA and EU Standard Contractual Clauses. See klaviyo.com/legal/privacy.

Payment processing

  • Shopify Payments / our payment gateway — processes card transactions. Only the last four digits of your card are stored for receipt purposes; full card details stay with the processor.

  • PayPal (Europe) S.à r.l. et Cie, S.C.A. — processes PayPal transactions when selected at checkout. Subject to PayPal's Privacy Statement.

  • MobilePay (Vipps MobilePay AS) — processes MobilePay transactions when selected at checkout.

Shipping and fulfillment

We share your name, address, and order details with carriers to deliver your order:

  • GLS (Denmark) — domestic and EU shipments

  • PostNord (Sweden / Denmark) — domestic and Nordic shipments

  • DHL (Germany) — EU and international shipments

  • Bring (Norway) — Nordic shipments

  • DAO (Denmark) — domestic shipments

  • UPS (US / international) — international shipments

  • Danske Fragtmænd (Denmark) — freight/oversized shipments

Analytics and advertising

  • Google LLC (US) — we use Google Analytics to understand site usage. Data is transferred to the US under EU Standard Contractual Clauses.

  • Meta Platforms, Inc. (US) — we use Meta Pixel (Facebook/Instagram) for advertising measurement and retargeting. Data is transferred to the US under EU Standard Contractual Clauses.

  • Google Ads — where active, used for advertising measurement.

Reviews and customer feedback

  • Trustpilot A/S (Denmark, EU) — after a purchase we share your name and email with Trustpilot so they can invite you to leave a review. If you leave a review, Trustpilot becomes the data controller for that review.

  • If you leave a public Google review, Google is the data controller for that review.

Accounting and operations

  • Dinero (Visma Dinero, Denmark) — accounting software we use to generate invoices and keep financial records.

  • peakwms (Denmark) — warehouse and inventory management software used to pick, pack, and dispatch your order.

Other situations

We may share your data in a few additional situations:

  • With professional advisors (lawyers, accountants) where needed and under confidentiality

  • With public authorities where required by law (e.g., tax authorities, law enforcement with a valid legal request)

  • In connection with a business transaction (merger, acquisition, sale of assets) — in which case we will notify you


We do not sell your personal data. We have never done so and have no plans to.

 

7. International Data Transfers

Some of the tools we use are based outside the European Economic Area — most notably in the United States. When personal data is transferred outside the EU/EEA, GDPR requires us to put legal safeguards in place to protect it.

For transfers to the US (Klaviyo, Google, Meta, PayPal, Shopify), we rely on the European Commission's Standard Contractual Clauses (SCCs). These are EU-approved contract terms that commit the recipient to GDPR-level data protection. Where available, we also rely on the EU-US Data Privacy Framework.

For transfers within the EU/EEA (Trustpilot, Dinero, peakwms, and EU carriers), no additional transfer mechanism is required — these countries are already covered by GDPR.

8. How Long We Keep Your Data

We keep personal data only as long as necessary for the purposes for which it was collected, plus any additional period required by law.

Type of data

How long we keep it

Order and purchase records, invoices, transaction data

5 years from the end of the financial year of the transaction (Danish Bookkeeping Act)

Customer service emails and support tickets

Up to 5 years (to align with warranty period and bookkeeping)

Newsletter subscribers (active)

Until you unsubscribe

Newsletter subscribers (after unsubscribe)

Retained on Klaviyo's suppression list to prevent accidental re-sending; deleted on request

Marketing engagement data (email opens, clicks)

Up to 2 years from last engagement

Analytics data (aggregated, non-identifiable)

Up to 26 months (Google Analytics default)

Cookie data

Varies by cookie — see Section 9


After these periods, we either delete the data or anonymize it so it can no longer be linked to you.

9. Cookies and Tracking

A cookie is a small file stored on your device when you visit a website. We use cookies — and similar technologies like pixels and local storage — to make the site work, analyze traffic, and (where you consent) serve you relevant advertising.

When you first visit wool2fit.com, you'll see a cookie banner. You can accept all cookies, reject non-essential cookies, or customize your choice. You can change your mind at any time by clicking the cookie settings link in the site footer.

Categories of cookies we use

  • Strictly necessary cookies — required for the site to work (e.g., keeping items in your cart, logging you in). These do not require consent under EU law.

  • Analytics cookies — help us understand how visitors use the site (Google Analytics, Shopify Analytics). Requires consent.

  • Marketing and advertising cookies — used by Meta Pixel, Google Ads, and similar tools to show you relevant ads and measure campaign performance. Requires consent.

  • Preference cookies — remember your language, currency, and other choices.

Cookie consent on wool2fit.com is managed through Shopify's Customer Privacy API.

10. Your Rights

Under GDPR, you have the following rights regarding your personal data. These rights are not absolute — they apply in most but not all circumstances.

  • Right of access (Art. 15). You can ask us to confirm whether we hold personal data about you and to give you a copy.

  • Right to rectification (Art. 16). You can ask us to correct inaccurate or incomplete data about you.

  • Right to erasure / "right to be forgotten" (Art. 17). You can ask us to delete your data. Note: we may need to retain some data to meet legal obligations (e.g., invoice records for 5 years).

  • Right to restrict processing (Art. 18). You can ask us to limit how we use your data while we resolve a dispute about it.

  • Right to data portability (Art. 20). You can ask us to provide your data in a structured, machine-readable format so you can transfer it to another provider.

  • Right to object (Art. 21). You can object to processing based on legitimate interest, or to direct marketing at any time.

  • Right to withdraw consent. Where we rely on your consent, you can withdraw it at any time — for marketing, click the unsubscribe link in any email; for cookies, use the cookie settings link in the footer.

  • Right not to be subject to automated decision-making (Art. 22). We do not make decisions about you based solely on automated processing or profiling.

How to exercise your rights

Email info@wool2fit.com with your request. We'll respond within 30 days (extendable to 90 days for complex cases, in which case we'll tell you and explain why). We may ask you to verify your identity before we act on your request, to protect your data from unauthorized access.

Exercising your rights is free. If a request is manifestly unfounded or excessive (for example, repetitive), we may charge a reasonable fee or refuse — in which case we'll explain why.

Right to complain

If you believe we are not handling your data in accordance with the law, you have the right to complain to the Danish Data Protection Agency:

  • Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark

  • Phone: +45 33 19 32 00

  • Email: dt@datatilsynet.dk

  • Website: datatilsynet.dk

We would appreciate the chance to resolve your concerns directly first — please email info@wool2fit.com before filing a complaint.

11. Security

We take reasonable technical and organizational measures to protect your data, including encrypted transmission (HTTPS), access controls, and using reputable service providers. However, no system is perfectly secure, and we cannot guarantee that data sent over the internet will never be intercepted. If a data breach occurs that risks your rights or freedoms, we will notify you and the Danish Data Protection Agency (Datatilsynet) within 72 hours as required by GDPR.

12. Children

wool2fit.com is not directed at children, and we do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please email info@wool2fit.com and we will delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, new tools we use, or updates to privacy law. The "Last updated" date at the top of this page shows when it was last revised. For material changes, we will notify you by email (if you have an account or have subscribed to our newsletter) or by prominent notice on the site before the changes take effect.

14. Contact

Questions about this Privacy Policy, or want to exercise your rights? Email info@wool2fit.com.

Wool2fit / dialogo.dk

Karlsbergvej 85

8940 Randers SV

Denmark

CVR 15854588 · VAT DK15854588

×