Privacy Policy
last updated DATE
1. Who is responsible
Mabld (CVR DK36998245), ADDRESS, Odense, Denmark, is the data controller for personal data processed through comfyliftclub.com. Contact: hello@comfyliftclub.com.
2. What we collect and why
| data | purpose | legal basis | kept for |
|---|---|---|---|
| Name, shipping address, email, phone, order details | Fulfil and deliver your order, customer service, returns | Contract (GDPR art. 6(1)(b)) | 5 years after the order (Danish bookkeeping law) |
| Payment details | Take payment | Contract | Processed by Stripe; we never see or store full card numbers |
| Email, member number, marketing preference | Club membership, welcome discount, marketing emails | Consent (art. 6(1)(a)), withdraw any time via unsubscribe | Until you leave the club, then 30 days |
| Contact form messages | Answer your questions | Legitimate interest (art. 6(1)(f)) | 2 years |
| Cookies and analytics data | Site functionality, statistics, advertising measurement | Consent for non-essential cookies; legitimate interest for strictly necessary ones | See Cookie Policy |
3. Who we share it with
Only what's needed, only with processors bound by data processing agreements: our production and shipping partners (name, address, order contents, to print and deliver), Stripe (payments), Supabase (hosting and database), Resend (transactional and marketing email), Lovable (site hosting), and analytics and advertising providers you consent to via the cookie banner (TikTok, Meta, Plausible/Google). Some of these are in the United States; transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses. We never sell your data.
4. Your rights
You can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interest or withdraw consent at any time. Email us and we'll respond within one month. You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to the supervisory authority in your country.
5. US residents
We do not sell or share personal information for cross-context behavioural advertising except through advertising cookies you consent to, which you can decline in the cookie banner. To exercise any privacy rights, email us.
6. Children
The site is not directed at children under 16 and we don't knowingly collect their data.
7. Changes
We'll post any changes here with a new date; material changes to how we use your data will be emailed to members. See also our Cookie Policy.