Orders and checkout
Information is processed when you place an order, request delivery or contact DESRUC about a purchase.
How personal data is handled
Privacy Policy
This policy explains what information DESRUC collects, why it is used, who it may be shared with and the choices available to you.
Cookies and analytics
CookieYes manages consent and Google Analytics is used according to the preferences you select.
Payment and delivery
Necessary information is shared with payment and delivery providers to complete your order.
Your data rights
You may request access, correction, deletion or other action concerning your personal data.
01
Who is responsible
The data controller
DESRUC is responsible for the personal data processed through desruc.com and in connection with purchases, enquiries and customer service.
Questions about this policy or the use of your personal data can be sent to the contact information below.
DESRUC
Vestergade 76, 2. 0004
5000 Odense C
Denmark
info@desruc.com
Information processed
What we collect
The information collected depends on how you use the website and whether you complete a purchase.
Orders and checkout
Name, email address, telephone number, billing address, delivery address, order contents, order value, chosen delivery method, payment status and relevant order notes.
Customer accounts
If you create an account, DESRUC may process your account email, username, saved addresses, password information in encrypted form and previous order history.
Payments
Payment method, transaction reference, payment status and limited transaction information received from Stripe or MobilePay. DESRUC does not store your complete card number.
Messages and support
Information contained in emails, contact requests, questions, returns, complaints and other correspondence sent to DESRUC.
Technical information
Browser and device information, IP-related security data, timestamps, website requests, error information and other technical data required to operate and protect the site.
Cookies and analytics
Cookie consent preferences, consent identifiers, page interactions, approximate location, traffic source, referral information, device category and similar analytics information where consent has been given.
Why information is used
Purposes and legal bases
Contract
Data is processed to receive and fulfil orders, collect payment, arrange delivery, provide customer service and handle returns, complaints or other matters connected to your purchase.
Legal obligation
Order and transaction information is processed where required for bookkeeping, tax, consumer protection, documentation and other legal obligations.
Legitimate interests
Limited data may be processed to secure the website, prevent fraud, maintain records, answer enquiries, establish or defend legal claims and improve the reliability of the shop.
Consent
Non-essential cookies, Google Analytics and WooCommerce order-attribution cookies are used according to the consent preferences selected through CookieYes. Consent can be changed or withdrawn at any time.
Service providers
Who receives your data
Personal data is shared only where necessary for the website, payment, delivery, legal compliance or services you have chosen.
Website and shop providers
WordPress, WooCommerce, hosting, email and technical service providers may process data needed to operate, secure and maintain desruc.com.
Stripe and MobilePay
Payment information required to authorise, process, secure, refund or dispute a transaction is shared with the payment provider selected during checkout. Read the Stripe Privacy Policy or MobilePay Privacy Notice .
Delivery providers
The selected carrier may receive your name, delivery address, telephone number, email address and relevant shipment information so the order can be delivered and tracked.
Google services
Site Kit connects DESRUC with Google Analytics, Search Console and PageSpeed Insights. Analytics is used according to your cookie consent. Search Console and PageSpeed provide search and technical performance information.
CookieYes
CookieYes records and manages your cookie preferences, including a consent identifier and the categories you have accepted or rejected.
Authorities and advisers
Data may be disclosed to accountants, professional advisers, courts, tax authorities, law enforcement or other public authorities where required or legally permitted.
Processing locations
Data Transfers
Some service providers, including Google and Stripe, may process information in countries outside Denmark or the European Economic Area.
Where personal data is transferred outside the European Economic Area, the transfer must be supported by an applicable legal mechanism. This may include an adequacy decision, the EU-US Data Privacy Framework, Standard Contractual Clauses or another mechanism permitted under data-protection law.
Further information about Google’s processing is available in the Google Privacy Policy .
How long information remains
Data retention
Data is retained only for as long as it is needed for the purpose for which it was collected or to meet legal duties.
Completed orders
Order and accounting information is normally retained for up to six years from the order date. This covers the requirement to retain accounting records for five years after the end of the relevant financial year.
Other orders and accounts
Failed, pending, cancelled or abandoned orders are deleted or anonymised when no longer necessary. Customer-account information is retained while the account is active and while connected order records must be preserved.
Messages and analytics
Correspondence is normally retained for up to two years after the matter has ended, unless it is required for an order or legal claim. Cookie and analytics retention follows the durations shown in CookieYes and the settings configured in Google Analytics.
GDPR
Your rights
Your rights depend on the circumstances and may be limited where information must be retained by law.
Access
You may request information about the personal data DESRUC processes about you and receive a copy.
Correction
You may request correction of inaccurate or incomplete personal data.
Deletion
You may request deletion where DESRUC no longer has a legal reason to retain the information.
Restriction
You may request that processing is restricted in certain circumstances.
Objection
You may object to processing based on legitimate interests. DESRUC will assess the objection against any compelling lawful grounds.
Data portability
Where applicable, you may request personal data provided by you in a structured, commonly used and machine-readable format.
Withdraw consent
You may withdraw cookie or analytics consent at any time without affecting processing that occurred before consent was withdrawn.
Make a complaint
You may complain to the Danish Data Protection Agency, Datatilsynet, if you believe your personal data has been processed unlawfully. Visit datatilsynet.dk .
Protection
Data security
DESRUC uses reasonable technical and organisational measures intended to protect personal data from unauthorised access, alteration, loss, disclosure or misuse.
Access is limited to DESRUC and service providers that require the information to perform their agreed services. No website or electronic transmission can, however, be guaranteed to be completely secure.
Policy information
Changes to this policy
This policy may be updated when the website, service providers, legal requirements or processing activities change.
The current version will always be available on this page. Significant changes may also be communicated through the website or directly where appropriate.
Last updated: 21 July 2026
Privacy questions
Your information should be handled with clarity and care.
Contact DESRUC to ask a question, exercise a data right or request further information about this policy.
Contact DESRUC