Privacy policy
PRIVACY POLICY
Last updated: November 5, 2025
Jo Riis-Hansen operates this online store and website, including all related content, features, tools, products, and services, to provide you with a curated shopping experience (the “Services”).
The store is hosted and powered by Shopify, which enables us to deliver these Services to you.
This Privacy Policy explains how we collect, use, and protect your personal information when you visit, use, or make a purchase through our website.
By accessing or using the Services, you acknowledge that you have read and understood how we handle your information as described below.
Personal Information We Collect
We collect personal information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we may collect:
• Contact details (name, billing and shipping address, phone number, email address)
• Payment details (credit/debit card or other payment information, transaction details)
• Account information (username, password, preferences)
• Order and transaction data (items viewed, purchased, returned or exchanged)
• Communication history (emails or messages you send us)
• Device and usage data (IP address, browser type, pages visited, cookies and analytics data)
Sources of Information
We may collect personal information:
• Directly from you when you create an account, place an order, or contact us
• Automatically when you use our website, through cookies or similar technologies
• From service providers and partners assisting us in running the store (for example Shopify, payment gateways, or shipping companies)
How We Use Your Information
We use your personal information to:
• Provide and improve our Services — process orders, payments, returns, and customer support
• Personalize your experience — remember preferences, recommend products, and improve usability
• Communicate with you — send order confirmations, shipping updates, and respond to inquiries
• Send marketing materials (only with your consent, where required by law)
• Ensure security and prevent fraud
• Comply with legal obligations
Legal Basis for Processing (EU/EEA Customers)
We process your personal information only where we have a lawful basis under applicable data protection laws:
• Contract performance: to fulfill your order and provide customer service
• Legitimate interest: to operate, improve, and secure our Services
• Legal obligation: to comply with accounting, tax, and regulatory requirements
• Consent: for optional communications such as newsletters or marketing emails
You can withdraw your consent at any time by contacting us or using the unsubscribe link in our emails.
How We Share Information
We may share your personal information with:
• Shopify International Ltd., our e-commerce platform provider and data processor, which hosts and processes data on our behalf in accordance with its privacy policy: https://www.shopify.com/legal/privacy
• Service providers who assist with payment processing, shipping, analytics, IT management, and marketing
• Authorities where required by law or to respond to lawful requests
• Business partners with your consent (for example, newsletter or marketing collaborations)
We do not sell or otherwise disclose your personal data for profit.
International Data Transfers
Your information may be transferred and processed outside of the country where you live.
If we transfer your data outside the European Economic Area or the United Kingdom, we use recognized safeguards such as the EU Standard Contractual Clauses to ensure appropriate protection.
Data Security and Retention
We take appropriate technical and organizational measures to protect your personal data, but no system is entirely secure.
We retain your information only as long as necessary to fulfill the purposes described in this policy, including to comply with legal obligations, resolve disputes, and enforce our agreements.
Your Rights
Under applicable data protection laws (including GDPR), you may have the right to:
• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing activities
• Receive a copy of your data in a portable format
• Withdraw your consent (where processing is based on consent)
To exercise these rights, please contact us at studio@joriishansen.com.
We may need to verify your identity before processing your request.
If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.
In Denmark, this is Datatilsynet — www.datatilsynet.dk.
Children’s Data
Our Services are not intended for children. We do not knowingly collect information from individuals under 18 years of age.
If you believe we have collected such information, please contact us to request its deletion.
Updates to This Policy
This policy may be updated from time to time to reflect changes in our practices or legal requirements.
The latest version will always be available on our website.
Contact
If you have questions about this Privacy Policy or how we handle your information, please contact:
Jo Riis-Hansen
Dronningens Tværgade 23, 7th floor
1302 Copenhagen K, Denmark
Email: studio@joriishansen.com
For data protection purposes, Jo Riis-Hansen is the data controller of your personal information.