Privacy policy
Last updated: 27 July 2026
Who we are
Scandicart is operated by Nine Labs ApS (CVR 46561023), Gunderupvej 16, 9260 Gistrup, Denmark. We are the data controller for the personal data described in this policy. Questions about your data: hello@scandicart.eu or +45 93 70 29 99.
What we collect, and why
When you place an order, we process your name, address, email, phone number, order contents and payment confirmation. We need this to fulfil our contract with you: processing your order, arranging delivery, handling returns and refunds, and meeting our legal obligations (including Danish bookkeeping law).
When you contact customer support — by email, chat or phone — we process your contact details and the content of the conversation so we can help you.
When you sign up for our newsletter, we process your email address — only after you have actively signed up and confirmed your subscription by clicking the link we send you (double opt-in). We keep a record of when and how you consented. You can unsubscribe in every email we send, and your objection to direct marketing is always respected immediately.
When you browse our shop, we use cookies and similar technologies — but anything beyond what is strictly necessary only runs if you have said yes in our cookie banner. Statistics (Google Analytics) and marketing tools only activate with your consent, and you can change your choice at any time via the cookie settings page. Details are in our cookie policy.
Legal bases
We rely on: performance of our contract with you (orders, delivery, support); your consent (marketing emails, statistics and marketing cookies); and our legal obligations (bookkeeping, consumer law). Where we rely on consent, you can withdraw it at any time with effect for the future.
AI assistants in our customer service
Parts of our customer service are handled by our digital assistant, Nora — in chat, by email and on the phone. Nora is an AI assistant and always identifies herself as such. When you call us, your call is answered by Nora, and a summary and transcript of the conversation is created so our team can follow up. Nora can look up your order status only after you provide matching order details; decisions about refunds and complaints are always made by a person on our team. Our AI assistants are provided through Re:amaze (chat and email), and Retell AI and Make.com (phone; Make is used in its EU region). Where these providers process data outside the EU/EEA, transfers are protected by the EU Commission's Standard Contractual Clauses.
Who we share data with
We use carefully chosen service providers who process data on our behalf under data processing agreements: our e-commerce platform (Shopify), payment processors, our customer service platform, our email and office systems (Microsoft 365), our consent management provider, Google (analytics, only with your consent), our phone assistant providers, and shipping providers. To deliver your order, we share the necessary delivery details with the supplier partner or warehouse dispatching your order and with the carrier delivering it — they may only use this information to fulfil your delivery.
Some providers are based outside the EU/EEA (for example in the United States). Where that is the case, transfers rely on the EU–US Data Privacy Framework or the EU Commission's Standard Contractual Clauses.
We never sell your personal data.
How long we keep data
Order and payment records: 5 years plus the current year, as required by the Danish Bookkeeping Act. Support conversations: up to 2 years after the case is closed. Newsletter consent: until you unsubscribe, after which we keep only the record needed to document that consent existed and was withdrawn. Cookie consent records: as described in the cookie policy.
Children
Our shop is not directed at children, and we do not knowingly collect personal data about children. If you believe a child has provided us with personal data, contact us and we will delete it.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to our processing — including an absolute right to object to direct marketing — and to receive your data in a portable format. You can exercise these rights via our privacy request page or by writing to hello@scandicart.eu. We respond within one month.
If you are unhappy with how we handle your data, you can complain to Datatilsynet (the Danish Data Protection Agency), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk — or to the supervisory authority in your own EU country.
Third-party links
Our shop may link to websites we do not control. Their privacy practices are their own — review their policies when you visit them.
Changes to this policy
We update this policy when our practices change. The current version is always available on this page.
