Privacy Policy

Last Updated: August 14, 2026

This Privacy Policy explains how Erik Hvid ("we", "us", or "our") collects, uses, stores, shares, and protects your personal data when you visit, use, or make a purchase from hcmck.shop (the "Website" or "Store").

We respect your privacy and process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable European and German data protection and privacy laws.

By using our Website, you acknowledge the processing of personal data as described in this Privacy Policy.

1. Data Controller

The controller responsible for the processing of your personal data is:

Erik Hvid
Nørremarkvej 10, Nr. Rind
8832 Skals
Denmark

Website: hcmck.shop
Email: support@hcmck.shop
Telephone: +45 53355670
Company Registration Number: 46615891

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us at:

support@hcmck.shop

2. Personal Data We Collect

Depending on how you interact with our Store, we may collect and process the following categories of personal data.

Identity and Contact Information

This may include:

• first and last name;

• billing address;

• shipping address;

• email address;

• telephone number; and

• other information you provide when placing an order or contacting us.

Order and Transaction Information

When you place an order, we may process information including:

• products purchased;

• order number;

• order date;

• order value;

• delivery information;

• order status;

• returns and refunds; and

• payment method, including Cash on Delivery information.

Payment and Refund Information

Our Store offers Cash on Delivery (COD).

For COD orders, payment is generally collected when the order is delivered.

If a refund for a COD order requires a bank transfer or another refund method, we may request information necessary to process the refund, such as bank account details.

We process such information only to the extent necessary to complete the transaction or refund.

Technical and Device Information

When you visit our Website, certain information may be collected automatically, including:

• IP address;

• browser type;

• device type;

• operating system;

• language settings;

• time zone;

• pages viewed;

• referring website;

• website interactions;

• session information; and

• cookie or similar technology identifiers.

Customer Service Information

If you contact us, we may process:

• your name;

• email address;

• telephone number;

• order information;

• the contents of your communication; and

• any documents, images, or other information you voluntarily provide.

Marketing Information

Where applicable and where required by law, we may process information relating to:

• marketing preferences;

• newsletter subscriptions;

• consent records; and

• interactions with marketing communications.

3. How We Collect Personal Data

We may collect personal data:

• directly from you when you place an order;

• when you contact customer service;

• when you subscribe to marketing communications;

• automatically when you browse our Website;

• through cookies and similar technologies;

• through Shopify and services used to operate our Store;

• from logistics or delivery service providers; and

• from other service providers where permitted by law.

4. Why We Process Your Personal Data

We process personal data only where we have an appropriate legal basis.

Processing Your Orders

We process your information to:

• receive and confirm orders;

• prepare and dispatch products;

• arrange delivery;

• provide Cash on Delivery services;

• communicate about your order;

• process returns and refunds; and

• provide customer service.

The legal basis for this processing is generally Article 6(1)(b) GDPR, because processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.

Compliance With Legal Obligations

We may process personal data where necessary to comply with legal obligations, including:

• accounting obligations;

• taxation requirements;

• consumer protection laws;

• regulatory requirements; and

• requests from competent public authorities.

The legal basis is generally Article 6(1)(c) GDPR.

Fraud Prevention and Website Security

We may process certain information to:

• protect our Store and customers;

• detect suspicious transactions;

• prevent fraud or abuse;

• maintain network and information security; and

• establish, exercise, or defend legal claims.

Where applicable, this processing is based on our legitimate interests under Article 6(1)(f) GDPR.

Improving Our Store

Where permitted by law, we may process information to understand how customers use our Store and to improve:

• Website functionality;

• Store performance;

• customer experience;

• products and services; and

• security.

Depending on the particular processing activity, the legal basis may be our legitimate interests under Article 6(1)(f) GDPR or your consent under Article 6(1)(a) GDPR.

Marketing

Where your consent is required, we will send electronic marketing communications only after receiving the appropriate consent.

The legal basis is generally Article 6(1)(a) GDPR.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before your withdrawal.

5. Shopify

Our online Store is operated using the Shopify ecommerce platform.

Shopify provides technical services that allow us to operate our Store, display products, process orders, manage customer information, and provide checkout functionality.

As part of providing these services, Shopify may process personal data relating to Store visitors and customers.

Shopify and its affiliated entities or service providers may process information in countries other than the country in which you live.

Where personal data is transferred outside the European Economic Area ("EEA"), appropriate safeguards must be used where required under applicable data protection law.

Our use of Shopify does not remove our responsibility to comply with applicable privacy and data protection requirements.

6. Sharing Your Personal Data

We may disclose personal data to third parties only where necessary for the purposes described in this Privacy Policy or where required by law.

Recipients may include:

Shopify and Ecommerce Service Providers

We may share personal data with Shopify and service providers necessary to operate our Store and checkout systems.

Shipping and Logistics Providers

We may provide necessary information such as:

• your name;

• delivery address;

• telephone number;

• email address;

• order details; and

• COD amount

to delivery companies and logistics partners so that your order can be delivered and, where applicable, payment can be collected upon delivery.

IT and Hosting Providers

We may use service providers for:

• hosting;

• cybersecurity;

• website functionality;

• email;

• customer support;

• analytics; and

• technical infrastructure.

Banks and Financial Service Providers

Where necessary to process a refund, payment, or financial transaction, relevant information may be provided to banks or other financial service providers.

Professional Advisers

Where necessary, information may be disclosed to:

• accountants;

• auditors;

• lawyers;

• insurance providers; and

• other professional advisers.

Authorities

We may disclose personal data where required by law or where reasonably necessary to respond to lawful requests from courts, regulatory bodies, tax authorities, law enforcement agencies, or other competent authorities.

7. International Transfers of Personal Data

Some of our service providers, including providers involved in operating the Shopify platform, may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the EEA and the recipient is not located in a country covered by an applicable adequacy decision, appropriate safeguards may be used as required by law.

Such safeguards may include, where applicable:

• European Commission Standard Contractual Clauses;

• other legally recognized contractual safeguards; or

• another valid transfer mechanism under applicable data protection law.

You may contact us at support@hcmck.shop if you would like further information regarding applicable safeguards.

8. Cookies and Similar Technologies

Our Website may use cookies and similar technologies.

Cookies are small pieces of information stored on or accessed from your device when you visit a website.

Strictly Necessary Cookies

Certain cookies may be necessary for the Website to function properly, including functions such as:

• shopping cart operation;

• checkout;

• security;

• fraud prevention;

• session management; and

• remembering essential settings.

Where permitted by applicable law, strictly necessary technologies may be used without consent.

Analytics, Advertising, and Other Non-Essential Cookies

Where consent is legally required, analytics, advertising, personalization, or other non-essential cookies and similar technologies will only be activated after you have provided your consent.

You can accept, reject, or adjust applicable cookie categories through the cookie or privacy settings made available on our Website.

You may withdraw or modify your consent at any time through the available privacy or cookie settings.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

9. Shopify Apps and Third-Party Services

Our Store may use Shopify applications or other third-party services to provide additional functionality.

Depending on the services enabled, these providers may process information necessary to provide their services.

We review the services we use and seek to provide appropriate information and consent mechanisms where required by applicable law.

The specific third parties and technologies used by the Store may change as we update our services.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

The retention period may depend on:

• the duration of our contractual relationship with you;

• legal and regulatory requirements;

• accounting and taxation obligations;

• warranty and consumer protection requirements;

• fraud prevention needs;

• dispute resolution; and

• the establishment, exercise, or defence of legal claims.

When personal data is no longer required, we will delete, anonymize, or otherwise securely dispose of it, unless continued retention is required or permitted by applicable law.

11. Your Rights Under the GDPR

Subject to the requirements and limitations of applicable law, you may have the following rights regarding your personal data.

Right of Access

You may request confirmation as to whether we process your personal data and request access to that data.

Right to Rectification

You may request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure

You may request deletion of your personal data where the legal requirements for erasure are satisfied.

This right may be limited where we are required to retain information to comply with legal obligations or to establish, exercise, or defend legal claims.

Right to Restriction of Processing

In certain circumstances, you may request that we restrict the processing of your personal data.

Right to Data Portability

Where applicable, you may request personal data you have provided to us in a structured, commonly used, and machine-readable format and may have the right to transmit that information to another controller.

Right to Object

Where we process your personal data on the basis of legitimate interests, you may have the right to object to that processing for reasons relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing performed before the withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

You may, in particular, lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or the location of the alleged infringement.

Because our business is located in Denmark, you may also contact:

The Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35
2500 Valby
Denmark

Telephone: +45 33 19 32 00
Email: dt@datatilsynet.dk

12. How to Exercise Your Privacy Rights

To exercise any applicable data protection right, please contact us at:

support@hcmck.shop

Please state clearly which right you wish to exercise and provide sufficient information for us to identify the relevant personal data.

Where we have reasonable doubts about the identity of the person making a request, we may request additional information necessary to verify identity.

We will respond to valid requests within the period required by applicable data protection law.

13. Requirement to Provide Personal Data

Certain personal information is necessary to enter into and perform a purchase contract.

For example, we generally require:

• your name;

• delivery address;

• contact details; and

• information necessary to process and deliver your order.

If you do not provide the necessary information, we may be unable to accept, process, or deliver your order.

Other information may be optional.

14. Marketing Communications

If you have consented to receive marketing communications, you may withdraw your consent at any time.

You can do this by:

• using the unsubscribe function provided in a marketing email, where available; or

• contacting us at support@hcmck.shop.

We may still send non-marketing communications that are necessary in connection with an existing order, customer service request, legal obligation, or contractual relationship.

15. Data Security

We use reasonable technical and organizational measures designed to protect personal data against:

• unauthorized access;

• unauthorized disclosure;

• accidental loss;

• alteration;

• destruction; and

• misuse.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You should also take reasonable precautions to protect your account information and devices.

16. Children's Privacy

Our Store is intended for customers who have the legal capacity to enter into purchase contracts or who purchase with the authorization of a parent or legal guardian where required.

We do not knowingly seek to collect personal data from children for marketing purposes contrary to applicable law.

If you believe that a child has provided us with personal data unlawfully, please contact us at:

support@hcmck.shop

17. Links to Third-Party Websites

Our Website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our business;

• changes to our services;

• changes to technologies used by our Store;

• operational changes; or

• changes in applicable legal requirements.

The latest version will be published on hcmck.shop with an updated "Last Updated" date.

Where legally required, we will provide additional notice or request consent before applying material changes to relevant processing activities.

19. Contact Us

For questions about this Privacy Policy, our privacy practices, or your personal data, please contact:

Erik Hvid
Nørremarkvej 10, Nr. Rind
8832 Skals
Denmark

Website: hcmck.shop
Email: support@hcmck.shop
Telephone: +45 53355670
Company Registration Number: 46615891