Privacy policy

Last updated: 12 September 2026

1. Who is responsible for your data

Seven Oceans ApS, CVR DK44647273, Udsigtsbakken 19, 4700 Næstved, Denmark, is the data controller for personal data processed through sevenoceans.dk.

You can contact us at +45 50 30 70 00 or info@sevenoceans.dk.

2. Information we collect

Depending on how you use our website, we may collect:

• contact and delivery details, such as name, address, phone number and email address;
• order, payment-confirmation, return and customer-account information;
• information you provide when contacting customer support, subscribing to our newsletter or making a B2B enquiry;
• technical and usage information, such as device and browser data, IP address, pages visited and interactions with our website, where cookies or similar technologies are permitted.

Payment-card information is handled by our payment providers; we do not store complete payment-card details ourselves.

3. Why we use your information and our legal basis

Purpose	Examples	Legal basis
Orders and customer accounts	Payment confirmation, delivery, returns, account administration and transactional messages	Performance of a contract, GDPR Article 6(1)(b)
Bookkeeping and legal obligations	Accounting records, tax and statutory documentation	Legal obligation, GDPR Article 6(1)(c)
Customer support and B2B enquiries	Answering questions, handling claims and following up on a business enquiry	Contract steps where applicable, otherwise our legitimate interest in responding to and administering enquiries, GDPR Article 6(1)(f)
Security and fraud prevention	Preventing misuse, protecting our website and investigating fraud	Our legitimate interest in security and fraud prevention, GDPR Article 6(1)(f)
Newsletter and direct marketing	Sending marketing emails when you have subscribed	Consent, GDPR Article 6(1)(a); you can unsubscribe at any time
Analytics, advertising and non-essential preferences	Website analytics, advertising measurement, retargeting and non-essential preference cookies	Consent, GDPR Article 6(1)(a)

We do not rely on legitimate interests for analytics or marketing cookies. Those cookies and similar tracking technologies are used only after your consent.

4. Cookies and similar technologies

We use necessary cookies to operate the store. We use non-essential preference, analytics and marketing cookies only when you consent through our cookie banner.

Category	Purpose and examples	Providers	Consent
Necessary	Security, fraud prevention, login, cart, checkout, language and essential store functions	Shopify and payment/checkout providers	Not optional where necessary to provide the service
Preferences	Remember non-essential choices and improve the experience	Shopify and relevant website services	Consent
Analytics	Understand visits and website performance	Shopify, Stape, Google Tag Manager and Google Analytics (Google tag GT-T5PQQ35V), and PageFly where active	Consent
Marketing	Measure ads, build audiences and show relevant advertising	Stape, Google Tag Manager/Google services, and advertising partners where active	Consent

We also set one first-party functional cookie, so_lang_choice, which remembers the language you selected so the site opens in that language next time. It is stored for 365 days and is only set when you choose a language or close the language prompt. It contains no personal data beyond your language choice and is necessary to provide the setting you asked for, so it does not require consent.

For information about Shopify cookies, see Shopify’s cookie policy.

You can withdraw or change non-essential cookie consent at any time by selecting Cookie preferences in the footer. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

5. Who receives your information

We share personal data only where necessary with:

• Shopify, which provides our ecommerce platform;
• payment providers, to process payments;
• shipping and fulfilment providers, to deliver orders and process returns;
• Stape, Google (including Google Tag Manager and Google Analytics) and PageFly, where enabled and consented to, for the purposes described above;
• newsletter, customer-support, IT and professional service providers where used; and
• public authorities or advisers when required by law or needed to establish, exercise or defend legal claims.

These recipients act as processors or independent controllers according to their role and their own privacy information.

6. International transfers

Some providers, including Shopify and Google, may process personal data in the United States or other countries outside the EU/EEA. Where required, we use appropriate safeguards, including the European Commission’s Standard Contractual Clauses and any supplementary measures required by law. Learn more about Shopify’s privacy practices at privacy.shopify.com.

7. Retention

We retain personal data only for as long as needed for the relevant purpose:

• order, invoice and accounting records: generally five years after the end of the relevant financial year, or longer if required by law;
• customer accounts: while the account is active, then normally up to 24 months unless a longer period is necessary for a legal claim or legal obligation;
• customer-support and B2B enquiries: normally up to 24 months after the matter is closed;
• newsletter information and records of consent: while you remain subscribed and normally up to two years after withdrawal, where needed to document compliance;
• cookie-consent records: normally up to 12 months, after which we may request renewed consent or sooner if purposes or partners materially change; and
• security and fraud-prevention logs: normally up to 12 months, unless longer retention is necessary for an investigation.

8. Your rights

Subject to the conditions and limits in applicable law, you have the right to:

• access your personal data (GDPR Article 15);
• have inaccurate data corrected (Article 16);
• have data erased (Article 17);
• restrict processing (Article 18);
• receive data you have provided in a portable format (Article 20);
• object to processing based on legitimate interests, including direct marketing (Article 21);
• not be subject to a decision based solely on automated processing where Article 22 applies; and
• withdraw consent at any time where processing is based on consent.

To exercise your rights, contact info@sevenoceans.dk. We may request information necessary to verify your identity. We normally respond within one month.

9. Complaints

Please contact us first if you have a concern. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet):

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
datatilsynet.dk/borger/klage

10. Shopify Network Intelligence

Our store is hosted by Shopify. Shopify collects and processes your personal data, including information about your activity on our store, for purposes including providing Enhanced Services, which enable us and Shopify to (i) give you a more customized experience, (ii) show you more relevant ads and (iii) understand how you interact with our store and our ads. This information is shared with Shopify and with third parties that may be located in other countries. Read more in Shopify’s Consumer Privacy Policy. You can object to or opt out of certain processing by Shopify at privacy.shopify.com.

11. Changes to this policy

We may update this policy when our processing practices, legal obligations or service providers change. We will publish the updated policy at /policies/privacy-policy and update the date above.