How we look after your data

Last updated: 11 October 2026

We only collect what we need to send you your straps and answer your messages. We don't sell your data, we don't send marketing emails, and we don't use tracking or advertising cookies.

1. Who we are

Pants Protector is responsible (the "data controller") for the personal data described in this policy.

2. What we collect and why

When you place an order

• Your name, email and shipping address, so we can send your order and your order confirmation.
• Your phone number, only if you choose to give it, so we can reach you about your delivery.
• What you ordered and what you paid, for our records and bookkeeping.
• Payment details (such as card number) go straight to our payment provider, Stripe. We never see or store your full card details.

Legal basis: we need this to fulfil our contract with you (GDPR article 6(1)(b)) and to meet our bookkeeping obligations under Danish law (article 6(1)(c)).

When you contact us

• Your name, email and message, so we can reply.

Legal basis: our legitimate interest in answering questions from customers and anyone else who writes to us (article 6(1)(f)).

When you visit the website

• Our hosting provider keeps short-lived technical logs (such as IP address, browser type and the pages requested) to keep the site running and secure.
• We count visits with Vercel Web Analytics: which pages are viewed, roughly which country visits come from, and the type of device and browser. It uses no cookies and can't identify you personally; visitors are only counted, not followed across sites.
• The site loads its fonts from Google Fonts, which means your browser connects to Google and shares your IP address with them.
• On the checkout page, Stripe may use cookies and device information to prevent fraud.

Legal basis: our legitimate interest in running a secure, working website and preventing fraud (article 6(1)(f)).

3. Cookies and storage on your device

We don't use any cookies of our own, and no advertising or tracking cookies (our visitor counting works without cookies). The site saves two small things in your own browser: your shopping cart and the region you picked (for prices and currency). They stay on your device and are never sent to us until you check out. You can clear them at any time in your browser settings.

Stripe sets its own strictly necessary cookies on the checkout page to process payments securely and prevent fraud.

4. Who we share your data with

We only share your data with the services we need to run the shop:

• Stripe processes payments and stores order and payment details. Address suggestions at checkout are powered by Google through Stripe.
• Google (Gmail) sends and stores our order emails and the messages you send us.
• Vercel hosts the website and counts visits (without cookies).
• Shipping carriers receive your name and address so they can deliver your parcel.

If you choose to save your details with Stripe's Link service at checkout, Stripe handles that under its own privacy policy.

We never sell your data or share it for marketing. We may disclose data if the law requires it.

5. Transfers outside the EU

Some of these providers are based in, or use servers in, the United States. Those transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Order and payment records: 5 years from the end of the financial year, as Danish bookkeeping law requires.
• Messages you send us: for as long as needed to help you, and no longer than 2 years after our last contact.
• Hosting logs: a short period, as set by our hosting provider.

7. Your rights

Under the GDPR you have the right to:

• see the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted, unless we have to keep it by law (for example for bookkeeping);
• restrict or object to how we use your data;
• receive your data in a portable format.

To use any of these rights, email us at pantsprotector@gmail.com. We'll reply within one month.

If you're unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.

8. Security

The site is served over an encrypted connection (HTTPS), payments are handled by Stripe, and access to our accounts is limited to the people who run Pants Protector.

9. Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top.