Privacy policy

Last updated: 12 August 2026

1. Who is responsible for your data?

North Minimal is the data controller responsible for your personal data.

North Minimal CVR no. DK41742305, Copenhagen, Denmark
Email: hello@northminimal.com

North Minimal is not required to appoint a Data Protection Officer under Article 37 GDPR, given the nature and scale of our processing. For any data protection question or request, contact us at the email above.

2. Personal data we collect

We may collect contact and identity information, including your name, email address, telephone number, billing and delivery addresses; order and transaction information; account and customer-service correspondence; marketing preferences; device and usage data such as IP address, browser, device identifiers, pages viewed and interactions; and information you choose to provide through forms, reviews, social features or other communications.

Payment information is handled directly by our payment providers  — via Shopify's checkout. North Minimal does not receive or store your complete payment-card number.

3. How and why we use personal data

To process orders, payments, delivery, returns and refunds, and to provide requested customer service. The legal basis is performance of our contract with you and steps requested before entering into a contract.

To operate, secure, troubleshoot and improve the store, prevent fraud, keep business and tax records, and protect legal claims. The legal basis is our legitimate interests and, where applicable, compliance with legal obligations.

To send newsletters and promotional messages where you have consented, or where otherwise permitted by law. You may unsubscribe at any time. The legal basis is consent or our legitimate interests, as applicable.

To measure store performance, personalize experiences and advertising, and understand campaign effectiveness through non-essential cookies, pixels and similar technologies. In the EEA, UK and other opt-in regions, the legal basis is consent. You can change your choices through Cookie preferences, and full detail on individual cookies, providers, and retention periods is available in our Cookie Policy.

4. Shopify and Network Intelligence

Our store is hosted by Shopify. Shopify processes customer, order, device and usage data to provide the storefront, checkout, payments, security, analytics and related services.

Shopify Network Intelligence is enabled. Shopify may combine data from interactions with our store with data from other Shopify merchants to provide enhanced services such as fraud prevention, analytics, personalization and advertising measurement. Shopify must respect applicable consent and opt-out signals. For details and rights relating to Shopify's own processing, see the Shopify Consumer Privacy Policy and the Your privacy choices page linked in our footer.

5. Who receives personal data

We disclose personal data only as needed to run the store, comply with law, or with your consent. Recipients can include Shopify and our payment providers; Gelato and Printful for on-demand production and order fulfilment; postal, courier and logistics providers; cloud, IT, security, localization, image-management and customer-support providers; professional advisers (including our accountant) and public authorities where required; and marketing or analytics partners when you consent.

Active marketing and customer-event integrations may include Google & YouTube, Meta/Facebook and Instagram, Pinterest and Shopify Collabs. Shopify Collective, Shop, Shopify Inbox and Marketplace Connect may process data when you use the relevant feature or sales channel. Instafeed displays Instagram content. Administrative apps are not treated as cookie providers merely because they are installed.

6. International transfers

Some providers operate outside Denmark or the EEA — for example Google, Meta, and Pinterest are based in the United States. Where personal data is transferred to a country without an EU adequacy decision, the transfer is based on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with supplementary measures where required. Providers may also rely on an applicable adequacy framework (such as the EU-U.S. Data Privacy Framework, where the recipient is certified).

7. How long we keep data

We retain personal data only as long as necessary for the purposes described above:

• Order, accounting, and transaction records are retained for 5 years from the end of the relevant financial year, as required by the Danish Bookkeeping Act (bogføringsloven).
• Customer-service and legal records are kept while needed to handle the matter, or to establish, exercise, or defend legal claims.
• Marketing data is kept until you withdraw consent or object, subject to a limited suppression record so we can continue to respect your choice.
• Cookie and pixel retention varies by provider and is described in our Cookie Policy or the relevant provider's current documentation.

8. Your rights

Depending on applicable law, you may request access to, correction of, deletion of, or restriction of your personal data; object to processing based on legitimate interests or to direct marketing; request data portability; and withdraw consent at any time without affecting earlier lawful processing.

To exercise a right, email hello@northminimal.com. We may need to verify your identity before responding. We will respond within one month, as required by GDPR.

You may also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, dt@datatilsynet.dk, www.datatilsynet.dk — or, if you live or work in another EEA country, to your local supervisory authority instead.

9. Automated decisions, children and security

North Minimal does not make decisions producing legal or similarly significant effects about you solely by automated means. The store is not directed to children, and we do not knowingly collect children's data without an appropriate legal basis.

We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security.

10. Changes and contact

We may update this policy when our services, providers or legal obligations change. The current version and update date will appear on this page. Material changes will be communicated where required.

Questions or privacy requests: hello@northminimal.com.