Privacy Policy

Effective Date: 2025/05/01

This Privacy Policy explains how Rice and Spice (“we,” “us,” or “our”) collects, uses, and protects your personal data when you use our website riceandspice.dk.

⸻

1. Data Controller

Rice and Spice
Address: Herlev Hovedgade 138 C,st.
Herlev, 2730
Email: riceandspice2@gmail.com
Phone: 53857300

We are the data controller responsible for processing your personal data.

⸻

2. Personal Data We Collect

We collect the following types of personal data:
• Contact Information: name, address, email address, phone number.
• Order Information: products ordered, delivery address, payment details (processed securely by third-party payment providers).
• Website Usage Data: IP address, browser type, device type, pages visited, and usage logs via cookies.

⸻

3. Purpose of Processing

We use your personal data for the following purposes:
• To process and fulfill your orders.
• To manage your customer account.
• To provide customer service and support.
• To send order confirmations and updates.
• To improve our website and services.
• To comply with applicable legal obligations.

⸻

4. Legal Basis for Processing

We process your personal data on the following legal bases:
• Performance of a contract (Article 6(1)(b) GDPR).
• Compliance with a legal obligation (Article 6(1)(c) GDPR).
• Our legitimate interests, such as improving our services and marketing (Article 6(1)(f) GDPR).
• Your consent, where applicable (Article 6(1)(a) GDPR).

⸻

5. Data Sharing

We may share your data with:
• Third-party payment providers (e.g. MobilePay, Visa/Mastercard).
• Delivery partners (e.g. PostNord).
• IT service providers and website hosting partners.
• Public authorities if required by law.

We do not sell your personal data.

⸻

6. Data Transfers

We primarily store your data within the EU/EEA. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

⸻

7. Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined above or as required by applicable law (e.g. bookkeeping requirements).

⸻

8. Your Rights

You have the right to:
• Access your data.
• Request correction of inaccurate data.
• Request erasure of your data.
• Restrict processing.
• Object to processing.
• Data portability.
• Lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

To exercise your rights, contact us at [email address].

⸻

9. Cookies

We use cookies to improve your user experience and analyze website usage. You can manage your cookie preferences in your browser settings.

⸻

10. Changes to this Policy

We may update this policy occasionally. The latest version will always be available on our website.