Privacy policy

PRIVACY POLICY β€” PickleGod.dk
Last updated: February 10, 2026
Effective Date: February 10, 2026


This Privacy Policy explains how PickleGod.dk ("we", "us", "our") collects, uses, and protects personal data when you access or use our website picklegod.dk and related services (the "Services").

This policy is designed to be compliant with GDPR, French law, CNIL doctrine, and EDPB guidance, and compatible with Shopify, Meta, and U.S. privacy requirements.


1. DATA CONTROLLER

Trading Name: PickleGod.dk
Operator: Sabrina Eddam β€” Maison Ancraje
Legal Form: Entrepreneur Individuel (EI)
SIREN: 521 530 527
SIRET: 521 530 527 00048
NAF Code: 47.91B β€” Vente Γ  distance sur catalogue spΓ©cialisΓ©
VAT Status: VAT-exempt β€” Article 293 B du CGI (franchise en base de TVA)
Registered Office: 78 Avenue des Champs-Γ‰lysΓ©es, Office 326, 75008 Paris, France
Email: dinksciple@picklegod.dk
Website: picklegod.dk

This information also constitutes our Legal Notices (Mentions LΓ©gales) in accordance with Article 6 of French Law nΒ° 2004-575 (LCEN).

Data Protection Officer (DPO):
We are not required to appoint a Data Protection Officer under Article 37 GDPR, as our processing activities do not involve large-scale processing of special categories of data or large-scale systematic monitoring of individuals.


2. PERSONAL DATA WE COLLECT

We collect only data that is adequate, relevant, and limited to what is necessary (GDPR Article 5).

2.1 Data You Provide

- Name
- Billing and shipping address
- Email address
- Phone number (if provided)
- Account credentials (if applicable)

Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

---

2.2 Order and Transaction Data

- Products purchased
- Order history
- Returns and refunds
- Transaction references

Payment card data is processed exclusively by third-party payment providers and is never stored by us.

Legal bases:
- Performance of a contract (Article 6(1)(b) GDPR)
- Legal obligation β€” accounting and tax law (Article 6(1)(c) GDPR)

---

2.3 Technical and Usage Data

- IP address
- Device and browser information
- Log files and timestamps
- Pages visited and interactions

Legal bases:
- Legitimate interest for security and technical operation (Article 6(1)(f) GDPR)
- Consent for analytics and advertising technologies (Article 6(1)(a) GDPR)

---

2.4 Communications

- Customer service requests
- Emails and messages you send us

Legal basis: Legitimate interest β€” service quality and support (Article 6(1)(f) GDPR)


3. PURPOSES OF PROCESSING

Personal data is processed for the following purposes:
- Order processing and delivery
- Customer account management
- Payment handling
- Customer support
- Fraud prevention and platform security
- Legal and accounting compliance
- Marketing and advertising (with consent only)
- Website analytics (with consent only)


4. COOKIES AND TRACKING TECHNOLOGIES

4.1 Cookie Categories

- Strictly necessary cookies: required for site functionality (exempt from consent under CNIL guidelines)
- Analytics cookies: audience measurement (prior consent required)
- Advertising cookies: marketing and retargeting (prior consent required)

4.2 Consent Management

Non-essential cookies are disabled by default and activated only after explicit consent via our cookie banner, implemented in accordance with CNIL Deliberation 2020-091.

Consent can be withdrawn at any time via:
- Cookie settings link on the Website
- Browser controls
- Email request to dinksciple@picklegod.dk

Cookies subject to consent are stored for a maximum of 13 months, in line with CNIL guidance.


5. DATA RECIPIENTS

Personal data may be shared with trusted service providers acting as processors, strictly for the purposes described above.

Key Service Providers:

- Shopify Inc. β€” e-commerce platform and hosting
Β  151 O'Connor Street, Ottawa, ON K2P 2L8, Canada
Β  (Data Processing Agreement in place)

- Shopify Payments / Stripe Inc. β€” payment processing

- PayPal β€” payment processing (where applicable)

- Shipping and logistics providers β€” order fulfillment

- Meta Platforms Ireland Ltd β€” advertising, with prior consent only (see Section 6)
Β  4 Grand Canal Square, Dublin 2, Ireland

- Google LLC β€” analytics and advertising, with prior consent only (where applicable)

An up-to-date list of all processors can be requested at any time by contacting dinksciple@picklegod.dk.


6. INTERNATIONAL DATA TRANSFERS

Some service providers may be located outside the European Economic Area, including in the United States and Canada.

Where required, transfers are governed by:
- European Commission Standard Contractual Clauses (Decision 2021/914)
- Supplementary contractual, technical, or organizational safeguards where appropriate

Canada benefits from an EU adequacy decision. Transfers to other jurisdictions are assessed on a case-by-case basis in line with EDPB guidance (EDPB Recommendations 01/2020).

---

6.1 Meta Technologies (Consent-Based Only)

With your prior explicit consent, we may use Meta advertising technologies (Meta Pixel and/or Conversions API) operated by:

Meta Platforms Ireland Limited
4 Grand Canal Square, Dublin 2, Ireland
(Parent company: Meta Platforms, Inc., USA)

Purpose:
- Personalized advertising
- Retargeting campaigns
- Conversion measurement
- Campaign performance analysis

Data Processed:
- Browsing behavior (pages viewed, products viewed)
- Purchase events
- Hashed email addresses (if provided)
- Device and browser information

Data Location and Transfer:
Data is initially processed in Ireland and may be transferred to the United States (Meta Platforms, Inc.) under Standard Contractual Clauses with supplementary safeguards, in accordance with CJEU Case C-311/18 (Schrems II, July 16, 2020).

Retention by Meta:
Personal data is retained by Meta for up to 13 months from collection.

Joint Controllership:
In accordance with CJEU Case C-40/17 (Fashion ID, July 29, 2019), Meta Platforms Ireland Ltd and PickleGod.dk act as joint controllers for the initial collection and transmission of data via advertising pixels embedded on this Website. PickleGod.dk is not responsible for subsequent processing operations carried out by Meta after data transmission.

Your Control:
You can withdraw consent at any time via:
- Our cookie settings on the Website
- Your Meta advertising preferences: https://www.facebook.com/adpreferences


7. DATA RETENTION

Personal data is retained only for as long as necessary and in accordance with legal obligations.

Category Β  Β  Β  Β  Β  Β  Β  Β  Β  Β  Β  Β | Retention Period
--------------------------------|------------------------------------------
Active customer account Β  Β  Β  Β  | Duration of the contractual relationship
Inactive account Β  Β  Β  Β  Β  Β  Β  Β | Up to 3 years from last activity
Order data (commercial) Β  Β  Β  Β  | Up to 3 years
Accounting records Β  Β  Β  Β  Β  Β  Β | 10 years (legal obligation)
Marketing contacts Β  Β  Β  Β  Β  Β  Β | Up to 3 years from last interaction
Cookies Β  Β  Β  Β  Β  Β  Β  Β  Β  Β  Β  Β  | Maximum 13 months
Customer support data Β  Β  Β  Β  Β  | Up to 3 years

Data is deleted or anonymized once retention periods expire.

Legal references:
- GDPR Article 5(1)(e)
- French Commercial Code Article L123-22 (10-year accounting obligation)
- French Civil Code Article 2224 (3-year commercial prescription)
- CNIL Deliberation 2020-091 (cookies β€” September 17, 2020)


8. YOUR RIGHTS β€” SUMMARY TABLE

| Regulation | Who it covers | Rights | Response deadline | Contact |
|------------|--------------|--------|-------------------|---------|
| GDPR | EU residents | Access, rectification, erasure, restriction, portability, objection, withdraw consent | 1 month (extendable to 3) | dinksciple@picklegod.dk |
| CCPA/CPRA | California residents (where thresholds met) | Know, access, delete, opt-out of sharing, non-discrimination | 45 days (extendable 45 days) | dinksciple@picklegod.dk subject: "CCPA Opt-Out" |
| PIPEDA | Canadian residents | Access, correction, withdrawal of consent | 30 days | dinksciple@picklegod.dk |

To exercise any of these rights, contact us at dinksciple@picklegod.dk with your name, country of residence, and the right you wish to exercise. We may request proof of identity to protect your data.

---

8.1 How to Exercise Your Rights

- Right of Access (Article 15) β€” know what data we hold about you
- Right to Rectification (Article 16) β€” correct inaccurate data
- Right to Erasure (Article 17) β€” request deletion of your data
- Right to Restriction of Processing (Article 18)
- Right to Object to Processing (Article 21)
- Right to Data Portability (Article 20)
- Right to Withdraw Consent at any time (Article 7(3))

How to Exercise Your Rights:
Send your request to: dinksciple@picklegod.dk

We respond within one month of receiving your request. This period may be extended by two additional months for complex or multiple requests, in which case we will inform you of the extension and the reasons within the first month (GDPR Article 12).

We may request verification of your identity to protect your personal data.

Right to Lodge a Complaint:
You may lodge a complaint with your supervisory authority at any time.

For France:
Commission Nationale de l'Informatique et des LibertΓ©s (CNIL)
3 Place de Fontenoy, TSA 80715
75334 Paris Cedex 07, France
Website: https://www.cnil.fr
Complaint form: https://www.cnil.fr/fr/plaintes

For other EU countries: Contact your local data protection authority.


9. SECURITY MEASURES

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or misuse, designed to ensure a level of security appropriate to the risk (GDPR Article 32).

Despite our efforts, no system can guarantee absolute security.

Data Breach Notification:
In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will:
- Notify the relevant supervisory authority (CNIL) within 72 hours (GDPR Article 33)
- Inform you directly if the risk to your rights is high (GDPR Article 34)


10. CHILDREN'S PRIVACY

Our Services are not intended for individuals under 18 years of age. For residents of the United States, our Services are not intended for individuals under 13 years of age, in accordance with the Children's Online Privacy Protection Act (COPPA).

We do not knowingly collect personal data from minors below the applicable age threshold in their jurisdiction.

If we become aware that we have collected data from a person below the applicable minimum age without appropriate consent, we will delete it promptly.

If you believe we have data concerning a minor, contact us immediately at dinksciple@picklegod.dk.


11. U.S. PRIVACY RIGHTS

California Residents (CCPA/CPRA):

The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA, effective January 1, 2023) may apply to California residents where applicable legal thresholds are met.

Where applicable, California residents may have the right to:
- Know what personal information we collect, use, and disclose
- Access their personal information
- Delete their personal information (subject to exceptions)
- Opt-out of the "sale" or "sharing" of personal information
- Non-discrimination for exercising their rights

"Sharing" Under CCPA:
We do not sell personal information. However, the use of advertising technologies (Meta Pixel, Google Ads) may constitute "sharing" under California law where applicable.

How to Opt-Out:
- Adjust your cookie settings on the Website
- Email us at dinksciple@picklegod.dk with subject: "CCPA Opt-Out"

We respond to verified requests within 45 days, extendable by 45 additional days if needed (with explanation).

---

11.1 Canadian Residents

Canadian residents may exercise their privacy rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

For privacy inquiries or complaints, Canadian residents may also contact:

Office of the Privacy Commissioner of Canada
Website: https://www.priv.gc.ca/en/

---

11.2 Customers Outside the EU, United States, and Canada

Customers residing outside the European Union, United States, and Canada are informed that local data protection laws may differ from those described in this Policy. We process all personal data in accordance with French law and GDPR principles, and international transfers are governed by appropriate safeguards as described in Section 6.

For inquiries about data protection rights in your jurisdiction, please contact us at dinksciple@picklegod.dk.


12. POLICY UPDATES

We may update this Privacy Policy to reflect changes in our practices, legal or regulatory requirements, or new features or services.

Notification of material changes will be made via:
- Email (if you have an account or previous order with us)
- Prominent notice on the Website

The "Last updated" date at the top will be revised with each update. Previous versions are available upon request.

Your continued use of our Services after changes constitutes acceptance of the updated policy.


13. CONTACT

For any questions, requests, or concerns about this Privacy Policy or our data practices:

Email: dinksciple@picklegod.dk

Postal Address:
PickleGod.dk
Sabrina Eddam β€” Maison Ancraje
78 Avenue des Champs-Γ‰lysΓ©es, Office 326
75008 Paris, France


14. LEGAL FRAMEWORK

This Privacy Policy is based on:

- Regulation (EU) 2016/679 (General Data Protection Regulation β€” GDPR)
- French Law nΒ° 78-17 of January 6, 1978 as amended (Loi Informatique et LibertΓ©s)
- French Law nΒ° 2004-575 (LCEN) β€” Digital Economy, Article 6
- French Commercial Code (Code de commerce) Articles L123-22, L110-4
- French Civil Code (Code civil) Article 2224
- CNIL Deliberation 2020-091 (September 17, 2020) β€” Cookies and trackers
- CNIL Guidelines on retention periods and consent
- EDPB Recommendations 01/2020 on supplementary measures for international transfers
- European Commission SCC Decision 2021/914
- CJEU Case C-311/18 (Schrems II, July 16, 2020)
- CJEU Case C-40/17 (Fashion ID, July 29, 2019) β€” Joint controllership
- California Consumer Privacy Act (CCPA) as amended by CPRA
- Children's Online Privacy Protection Act (COPPA) β€” United States
- Personal Information Protection and Electronic Documents Act (PIPEDA) β€” Canada


⚑ Blessed by PickleGodβ„’ β€” Dink responsibly.