Privacy policy
Last updated: September 2026
How Footfolk handles your personal data when you shop, create an account, join the newsletter, or visit the webshop.
1. Data controller
Footfolk ApS is the controller of your personal data.
2. What we collect
What we hold depends on how you use the shop.
When you order
- Name, delivery and billing address, email and phone number.
- Order contents, amount, payment method and shipping choice.
- Card details go to the payment provider. We do not store your full card number.
When you create an account
- Email, password (stored hashed) and saved addresses.
- Order history linked to the account.
When you join the newsletter
- Email address and the time you consented.
- Unsubscribe any time via the link in the email.
When you browse
- Technical data such as IP address, browser, device and pages you view.
- Cookies — see section 7 and the cookie banner.
3. Purposes and legal bases
We only process data where GDPR gives us a legal basis.
- Contract (Art. 6(1)(b)): taking, shipping and if needed returning your order.
- Legal obligation (Art. 6(1)(c)): bookkeeping, VAT and consumer law.
- Consent (Art. 6(1)(a)): newsletter and non-essential cookies.
- Legitimate interest (Art. 6(1)(f)): running the shop securely, preventing fraud and improving the site — without overriding your rights.
4. Who we share data with
We do not sell your data. We only share what is needed to run the shop:
- Carriers (GLS, DHL, PostNord and similar) — name, address and phone so the parcel can be delivered.
- Payment providers (cards, Apple Pay, MobilePay, Klarna, Vipps and similar) — to take payment.
- IT and hosting partners who run the shop and email.
- Authorities, auditors or debt collection where the law requires it.
How we keep data safe with those partners is in data protection.
5. Retention
We keep data only as long as the purpose requires, then delete or anonymise it.
- Order and invoice data: typically 5 years after the end of the financial year (Danish bookkeeping rules).
- Customer account: until you delete it, plus any linked orders we still have to keep.
- Newsletter: until you unsubscribe.
- Cookies: for the period shown in the cookie banner — typically a session up to 24 months.
6. Your rights
Under GDPR you can access, correct, erase, restrict, object and request portability. You can also withdraw consent — that does not affect processing already carried out.
Email [email protected] or use the contact form. We reply within one month.
You may also complain to your national data protection authority, or in Denmark to the Danish Data Protection Agency — www.datatilsynet.dk.
7. Cookies
Essential cookies make the shop work (basket, login, security). Analytics and marketing cookies are set only if you accept them in the banner.
You can change that choice in the banner or delete cookies in your browser. Blocking essential cookies may break checkout and your account.
8. Children
We sell kids’ shoes, but the webshop is aimed at adults. We do not knowingly collect personal data about children under 13 without parental consent.
9. Changes
We may update this policy. The current version always sits on this page with the date at the top.