Privacy Policy

Polymer Workshop Webshop - Privacy Policy

Effective Date: 14 April 2026

Protecting your privacy is important to us. This Privacy Policy explains how Polymer Workshop ("we", "us", "our", or the "Seller") collects, uses, discloses, and safeguards your personal information when you visit, register, or make purchases on the Polymer Workshop Webshop ("Webshop").

By accessing or using the Webshop, you agree to the practices described in this policy. If you do not agree, please do not use the Webshop. We encourage you to read this policy carefully.

1. Who We Are (Data Controller)

Polymer Workshop ApS, Øster Farimagsgade 32, 2100 København Denmark

Email: info@polymerworkshop.com

We are the data controller responsible for your personal data under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA).

2. Information We Collect

We collect the following categories of personal data:

  • Contact and identification information: name, email address, shipping/billing address, phone number.
  • Account information: username, order history.
  • Payment and transaction data: payment card details (processed by third-party providers), order value, payment status.
  • Communications: inquiries, customer support messages, reviews, or feedback.
  • Technical and usage data: IP address, browser type, device information, pages visited, referral sources, and interaction data collected via cookies and similar technologies.

We do not knowingly collect sensitive personal data (special categories under GDPR) unless required for a specific order (e.g., health-related information for custom products — in which case we will obtain explicit consent).

3. How We Use Your Information and Lawful Bases (GDPR)

We process your personal data only when we have a valid lawful basis.

Marketing emails are sent only with your prior opt-in consent, and we never make marketing a condition of purchase.

4. Sharing Your Information

We may share your personal data with the following categories of recipients:

  • Service providers: Payment processors (e.g., list yours, e.g. Stripe, PayPal), shipping carriers (e.g., FedEx, UPS, etc.), hosting providers, email service providers, and analytics tools. These providers act as data processors and are bound by data processing agreements.
  • Legal and regulatory authorities: When required to comply with laws, court orders, or lawful government requests.
  • Business transfers: In the event of a merger, acquisition, sale of assets, or similar transaction, your data may be transferred as part of the business (with appropriate protections).
  • Other third parties: Only with your consent or where necessary to protect rights, safety, or property.

We do not sell your personal data to third parties for monetary compensation.

5. Cookies and Tracking Technologies

The Webshop uses cookies, pixels, and similar tracking technologies to enable essential functions (e.g., cart, login), analyze usage, and support marketing (where consented).

  • Essential cookies: Necessary for the Webshop to function; no consent required.
  • Analytics and performance cookies: Help us understand how users interact with the site.
  • Marketing and targeting cookies: Used for personalized ads and promotions.

You can manage or withdraw consent for non-essential cookies at any time on your browser settings.

We use a consent management platform to record your choices.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined above or as required by law:

  • Order and transaction data: Up to 5 years for tax and accounting obligations.
  • Account data: Until you delete your account or request erasure (subject to legal obligations).
  • Marketing data: Until you withdraw consent or unsubscribe.
  • Technical/usage data: For 2 years or as long as needed for analytics and security.

When no longer needed, we securely delete or anonymize the data.

7. International Data Transfers

Since we sell worldwide, your data may be transferred to and processed in countries outside the EEA (e.g., by our service providers in the US or elsewhere). Where such transfers occur, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs) approved by the European Commission, or
  • Other mechanisms recognized under GDPR (e.g., adequacy decisions where applicable).

You can request more information about these safeguards by contacting us.

8. Data Security

We implement reasonable technical and organizational measures (e.g., encryption, access controls, secure servers) to protect your data from unauthorized access, loss, or misuse. However, no internet transmission or storage method is 100% secure. We will notify you and relevant authorities of any personal data breach where required by law.

9. Your Rights (GDPR and Other Laws)

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure ("right to be forgotten"): Request deletion of your data (subject to exceptions).
  • Restriction: Request we limit processing in certain cases.
  • Objection: Object to processing based on legitimate interests or for direct marketing.
  • Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
  • Withdraw consent: At any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at info@polymerworkshop.com. We will respond within one month (extendable where permitted). You also have the right to lodge a complaint with your local data protection authority (in the EU/EEA: the supervisory authority in your country of residence).

For California residents (if applicable under CCPA/CPRA): You have additional rights, including to know, delete, and opt-out of the sale/sharing of personal information. We do not sell personal information.

10. Children's Privacy

The Webshop is intended for users aged 18 and older. We do not knowingly collect or process personal data from children under 18. If we become aware that we have collected such data, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The new effective date will be posted at the top. For material changes, we will provide prominent notice on the Webshop and, where required or appropriate, notify you by email.

Your continued use of the Webshop after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

Email: info@polymerworkshop.com or call us at +45 31 66 73 27

We aim to respond promptly and help resolve any issues.