Privacy policy

 

The Tuftista — Privacy Policy

Last updated: 14 May 2025

This notice explains how we collect and handle personal data when you visit thetuftista.myshopify.com or purchase from us.

1  What data we collect

  • Identity & contact – name, e-mail address, shipping and billing address
  • Order & payment – order details and payment confirmation (card data handled securely by our payment partner, never stored by us)
  • Technical data – IP address, device/browser details, and usage information gathered via cookies
  • Communication history – any messages or e-mails you send us

2  How we use your data

  • To fulfil your order and keep you updated
  • To run, secure and improve our website and services
  • To send newsletters and offers (only if you’ve opted in)
  • To meet legal obligations and prevent fraud or misuse

3  Who sees your data

We share information only with trusted partners who process it securely on our behalf:

Purpose Partner
Store platform Shopify
Payments Stripe / other PCI-compliant processors
Shipping Our courier partners

We also use cookies and similar tools. For details see the Shopify Cookie Policy.

4  Keeping your data safe

We apply industry-standard safeguards and never sell or rent your personal data for marketing.

5  Your rights (EU/EEA)

You can at any time:

  • Access, correct or delete the data we hold about you
  • Object to certain processing activities
  • Opt out of marketing e-mails via the unsubscribe link

Just e-mail us at thetuftista@gmail.com and we’ll handle your request promptly.

6  Children

Our services are not directed to anyone under 16, and we do not knowingly collect their data.

7  Updates

We may revise this notice from time to time. The latest version is always posted here.

8  Legal basics & retention

Data controller: The Tuftista v/ Pusztai Oliver, Richard Mortensens Vej 39, 2300 København S, Denmark.

We process data to perform a contract (Art. 6 (1)(b) GDPR), on our legitimate interests (Art. 6 (1)(f)), and- where you opt-in - for marketing on the basis of consent (Art. 6 (1)(a)).

Order records are stored 5 years to meet Danish bookkeeping rules; marketing data is kept until you unsubscribe.

You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet).