Privacy Policy

1. Data controller

The data controller for the processing of your personal data is:

Thomas Hansen
(Premium Black Bible — trading name)
Tulipanhaven 142, 8200 Aarhus N
Denmark
Email: contact@premiumblackbible.com

Sales and operation of the website are carried out by Thomas Hansen as a private individual in an establishment phase. No CVR number has been assigned yet. CVR registration will be completed when business activity and turnover require it under applicable Danish law.

If you have questions about our processing of personal data, you may contact us at the email address above.

2. Purpose of processing

We process personal data for the following purposes:

Processing and delivery of your orders (physical and digital products)
Payment and order confirmation
Customer service and responding to enquiries
Compliance with legal obligations (including bookkeeping and accounting)
Exercise of the right of withdrawal and handling of returns
Statistics and improvement of website functionality (anonymised IP where possible)

3. Categories of personal data

We typically collect and process the following information when you shop with us:

Identity data: Name
Contact data: Email address, shipping address, and phone number (when required for physical delivery)
Transaction data: Order details, purchased products, amounts, and currency
Technical data: IP address, browser type, and visit data (via cookies/analytics, see Section 9)

We do not store payment card details. Payment is handled securely by Stripe, which is an independent data controller for payment processing.

4. Legal basis

We process your personal data on the following legal bases under Article 6 of the GDPR:

Contract performance (Art. 6(1)(b)): Processing is necessary to enter into and perform the purchase contract with you, including delivery and customer service.
Legal obligation (Art. 6(1)(c)): Retention of order data for bookkeeping and tax purposes.
Legitimate interest (Art. 6(1)(f)): Operation and security of the website and anonymised analysis of use to improve the user experience.
Consent (Art. 6(1)(a)): Where required, e.g. for non-essential cookies or marketing.

5. Recipients and processors

We only disclose personal data when necessary to deliver our services. Our data processors include:

Stripe, Inc.: Payment processing (USA/EU — Standard Contractual Clauses)
Lulu Press: Print-on-demand and shipping of the physical Black Bible
Printful: Print-on-demand and shipping of apparel
Resend: Sending of order confirmations and transactional emails
Google Firebase / Google Cloud: Hosting, database, and file storage
Google Analytics: Web analytics (anonymised IP enabled)

Data processors only process information on our instructions and are subject to data processing agreements where required.

6. Transfers to third countries

Some of our suppliers process data outside the EU/EEA (including the USA). Transfers are made on the basis of the European Commission's Standard Contractual Clauses (SCC) or other approved transfer mechanisms under GDPR Chapter V.

7. Retention period

We retain your personal data for as long as necessary for the purposes for which it was collected:

Order data: Up to 5 years after the end of the financial year (Danish Bookkeeping Act)
Customer service enquiries: Typically 2 years after the case is closed
Withdrawal declarations: 3 years after receipt (evidence of compliance with consumer rights)
Analytics data: In accordance with Google's default settings (typically 14 months)

When the retention period expires, the data is deleted or anonymised.

8. Your rights

Under the GDPR, you have the following rights:

Right of access: You may request a copy of the information we process about you.
Rectification: You may have inaccurate information corrected.
Erasure: You may request deletion when the conditions in Article 17 are met.
Restriction: You may request restriction of processing under certain circumstances.
Data portability: You may receive information in a structured, commonly used format.
Objection: You may object to processing based on legitimate interest.
Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at contact@premiumblackbible.com. We respond to requests without undue delay and no later than one month.

9. Complaint to the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we process your personal data in breach of the rules:

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk
Web: www.datatilsynet.dk

10. Cookies

Our website uses:

Essential cookies: Required for basic functionality (e.g. session data).
Analytics cookies: Google Analytics (G-4EX9XYCYYJ) for aggregated statistics. IP addresses are anonymised.

You may delete or block cookies in your browser at any time. Some features may then be limited.

11. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse, including encrypted payment via Stripe and access controls on our systems.

12. Changes

We may update this Privacy Policy. Material changes are published on this page with an updated date. For material changes affecting existing customers, we will inform you where required.

Shop