Privacy Policy

Private ad attribution

If you enable Private ad attribution in Cookie settings, this shop stores a fixed campaign and ad-version label with a timestamp in your browser (pbb-ad-attribution-v1) for up to 7 days. At checkout that label is attached to the Stripe checkout and paid-order record in Firebase for our own sales comparison. It is not sent to Meta. It contains no contact details or payment details.

You may uncheck this choice or select Reject optional to stop future attribution and remove the browser label. A label already attached to an order follows the order-record retention below.

Meta Purchase measurement

Meta Purchase measurement is a separate optional choice; older consent records that do not contain this choice are treated as off. If you enable it, the site may load Meta Pixel only after our server verifies a paid Black Edition order whose checkout began after you enabled this choice. The Purchase event contains net merchandise value, currency and a pseudonymous event ID. Meta Pixel may also receive technical browser and connection information. We do not send names, email addresses, phone numbers, shipping addresses, book titles, item IDs, private ad-attribution labels or checkout session IDs. This site does not send PageView or other Meta events and does not replay purchases from before activation. You may withdraw consent using Cookie settings; this prevents future events and clears accessible Meta cookies, but cannot retract data Meta already received. See Meta's privacy information for its processing and retention details.

1. Data controller

The data controller for the processing of your personal data is:

Hansen Venture Studio
Kenneth Christoffer Hansen
(Premium Black Bible — trading name)
Tulipanhaven 142, 8200 Aarhus N
Denmark
Email: contact@premiumblackbible.com

Premium Black Bible is operated by Hansen Venture Studio / Kenneth Christoffer Hansen, CVR 43933485, VAT DK43933485.

If you have questions about our processing of personal data, you may contact us at the email address above.

2. Purpose of processing

We process personal data for the following purposes:

Processing and delivery of your orders (physical and digital products)
Payment and order confirmation
Customer service and responding to enquiries
Compliance with legal obligations (including bookkeeping and accounting)
Exercise of the right of withdrawal and handling of returns
Website usage statistics and improvement, only with analytics consent
Telling you when an upcoming illustrated book is available, if you join its waitlist

3. Categories of personal data

We typically collect and process the following information when you shop with us:

Identity data: Name
Contact data: Email address, shipping address, and phone number (when required for physical delivery)
Transaction data: Order details, purchased products, amounts, and currency
Waitlist data: Your email address, the book or books you asked about, the page you signed up on, and the date
Technical data: IP address, browser type, and visit data (via cookies/analytics, see Section 9)

We do not store payment card details. Payment is handled securely by Stripe, which is an independent data controller for payment processing.

4. Legal basis

We process your personal data on the following legal bases under Article 6 of the GDPR:

Contract performance (Art. 6(1)(b)): Processing is necessary to enter into and perform the purchase contract with you, including delivery and customer service.
Legal obligation (Art. 6(1)(c)): Retention of order data for bookkeeping and tax purposes.
Consent (Art. 6(1)(a)): Waitlist for upcoming books. You choose to give your email address so we can email you once when the book is available. You can withdraw at any time by emailing contact@premiumblackbible.com, and we will delete your entry.
Legitimate interest (Art. 6(1)(f)): Operation, fraud prevention and security of the website. Optional analytics is not based on legitimate interest.
Consent (Art. 6(1)(a)): Optional Google Analytics cookies and associated usage statistics. Consent is requested before the analytics script loads and can be withdrawn using Cookie settings.
Consent (Art. 6(1)(a)): Optional Meta Purchase measurement, only after a distinct opt-in and server verification of a paid Black Edition order whose checkout began after the opt-in. Existing consent records default to off. Consent can be withdrawn using Cookie settings.
Consent (Art. 6(1)(a)): Optional Google Ads conversion measurement, only after a separate opt-in and server verification of a paid Black Edition order whose checkout began after the opt-in. Google receives merchandise value, currency, a provider-specific pseudonymous transaction reference, and technical/browser and eligible advertising click information. This choice allows ad storage and advertising-related user data for conversion measurement only; personalised advertising remains disabled, and no enhanced conversions or customer contact fields are configured. Existing consent records default to off. Consent can be withdrawn using Cookie settings.

5. Recipients and processors

We only disclose personal data when necessary to deliver our services. Our data processors include:

Stripe, Inc.: Payment processing (USA/EU — Standard Contractual Clauses)
Lulu Press: Printing and shipping of the physical Black and White Editions
Printify: Used to prepare clothing designs. The clothing collection is currently a preview; no clothing customer orders are sent to Printify.
Resend: Sending of order confirmations, waitlist notices and other transactional emails
Google Firebase / Google Cloud: Hosting, database, and file storage
Google Analytics: Optional usage statistics after consent. We do not intentionally send names, emails, addresses, form contents or checkout session IDs to Analytics. No advertising audiences or session recordings are enabled by our website code.
Meta Platforms: Receives the limited Purchase event and technical/browser data through Meta Pixel only after the separate Meta Purchase consent and a server-verified paid Black Edition order whose checkout began after the opt-in. No name, contact details, address, book title, item IDs, private ad label or checkout session ID is intentionally sent in the event. Meta processes data under its own privacy terms.

Data processors only process information on our instructions and are subject to data processing agreements where required.

6. Transfers to third countries

Some of our suppliers process data outside the EU/EEA (including the USA). Transfers are made on the basis of the European Commission's Standard Contractual Clauses (SCC) or other approved transfer mechanisms under GDPR Chapter V.

7. Retention period

We retain your personal data for as long as necessary for the purposes for which it was collected:

Order data: Up to 5 years after the end of the financial year (Danish Bookkeeping Act)
Customer service enquiries: Typically 2 years after the case is closed
Withdrawal declarations: 3 years after receipt (evidence of compliance with consumer rights)
Waitlist: Until we have emailed you that the book is available, after which the entry is deleted, or earlier if you ask us to remove it
Analytics data: User and event-level retention is set to two months, without resetting the user retention period on each new visit. Aggregated reports may be retained longer by Google. Browser analytics cookies expire after no more than 180 days under this website configuration. Withdrawing consent stops future collection and removes accessible analytics cookies; contact us regarding previously collected data.
Meta Purchase measurement: The browser stores only a short-lived session-storage deduplication list of pseudonymous event IDs. Meta controls retention of data it receives under its own policies. Withdrawing consent prevents future events but cannot delete an event already delivered to Meta; you may also exercise rights directly with Meta.

When the retention period expires, the data is deleted or anonymised.

8. Your rights

Under the GDPR, you have the following rights:

Right of access: You may request a copy of the information we process about you.
Rectification: You may have inaccurate information corrected.
Erasure: You may request deletion when the conditions in Article 17 are met.
Restriction: You may request restriction of processing under certain circumstances.
Data portability: You may receive information in a structured, commonly used format.
Objection: You may object to processing based on legitimate interest.
Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at contact@premiumblackbible.com. We respond to requests without undue delay and no later than one month.

9. Complaint to the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we process your personal data in breach of the rules:

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk
Web: www.datatilsynet.dk

10. Cookies and similar storage

With analytics consent, we may compare product descriptions. A random browser identifier in local storage (pbb-description-test-v1) keeps your version consistent during the test. New participation ends on 9 October 2026, with seven additional days for existing participants to complete a purchase. We record which version was displayed and checkout clicks in Firebase, and attach that identifier to the order to measure completed purchases. No customer contact or payment details are sent to Google Analytics for this test. Rejecting analytics stops participation and clears this browser identifier. Previously recorded experiment data is not automatically erased when consent is withdrawn; contact us for deletion requests.

Optional Google Analytics loads only after you select Usage analytics and Save choices. Google Ads conversion measurement is a separate optional purpose; its tag loads sitewide only after you select that purpose and save. On an eligible post-consent paid Black Edition order, Google Ads receives the merchandise value, currency and a provider-specific pseudonymous transaction reference. Google may also process technical/browser information and eligible ad-click identifiers through its tag. The tag enables ad_storage and ad_user_data only for the separate conversion-measurement choice; ad_personalization remains denied. We do not enable enhanced conversions or send customer identifiers, item details, checkout session IDs, or arbitrary URL query strings in our conversion event. The sitewide tag may process only eligible Google click parameters (gclid, gbraid, wbraid or dclid); it does not receive checkout-session query values or referrer URLs. No conversion is sent for a return page alone or a checkout begun before the opt-in. Rejecting or withdrawing consent does not prevent shopping; it stops future events and clears accessible Google Ads cookies, but cannot retract information already received by Google. Use Cookie settings to change your choice. See the Cookie Policy for storage names, purposes, providers and durations.

11. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse, including encrypted payment via Stripe and access controls on our systems.

12. Changes

We may update this Privacy Policy. Material changes are published on this page with an updated date. For material changes affecting existing customers, we will inform you where required.

Shop