Privacy policy

1. Who is responsible

The data controller is My Journal To ApS, CVR 43513710, Vølundsgade 5, st. tv, 2200 København N, Denmark. Email: support@myjournalto.com. Write to us about anything in this policy.

2. What we collect and why

What	Why	Legal basis (GDPR)	How long
Name, email, delivery and billing address, phone if given, order details	To take, ship and support your order	Art. 6(1)(b), contract	As long as the order needs, then as long as bookkeeping law requires
Order and payment records	Bookkeeping and tax	Art. 6(1)(c), legal obligation (Danish Bookkeeping Act)	5 years from the end of the financial year
Withdrawal requests (button, email or letter)	To handle your withdrawal	Art. 6(1)(c), legal obligation	As long as the order records
Emails you send us	To answer you	Art. 6(1)(b) or (f), our interest in answering	Up to 2 years after the case is closed
Email address for the newsletter	To send the newsletter you asked for	Art. 6(1)(a), consent	Until you unsubscribe
Reviews you post	To show reviews	Art. 6(1)(a), consent	Until you ask us to remove it
Device and usage data via cookies and similar tools	Statistics and marketing	Art. 6(1)(a), consent through the cookie banner; strictly necessary cookies under Art. 6(1)(f)	See the cookie banner

3. Who we share data with

We use these service providers. They process data for us, or act as independent controllers where noted.

Shopify (store, checkout, hosting, Shop app and Shop Pay): shopify.com/legal/privacy
Shopify Payments (cards, Shop Pay, Apple Pay, Google Pay, Klarna, MobilePay and the other methods shown at checkout) and PayPal. They process the payment; PayPal and Klarna act as independent controllers for their part.
DHL (parcel delivery)
Klaviyo (newsletter, sign-up forms, email tracking)
Google (Google Analytics, Google Tag Manager, Google Merchant Center measurement, Google Fonts used by the sign-up form)
Meta (Facebook and Instagram pixel)
Pinterest (Pinterest Tag, and the Pinterest API for our own Pins and ads): policy.pinterest.com/en/privacy-policy
Trustpilot (review invitations and widget)
Triple Whale (marketing analytics)
Adobe (Adobe Fonts serves the website's fonts, so your IP address reaches Adobe when a page loads)
Zentric Digital ApS, the provider of the withdrawal-button app (handles withdrawal requests)

4. Transfers outside the EU

Some providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the EU Commission's standard contractual clauses.

5. Your rights

You have the right to:

access your data
have it corrected
have it erased
restrict processing or object to it
data portability

Where we rely on consent, you can withdraw it at any time; this does not affect processing done before. Write to support@myjournalto.com.

You may complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to the data protection authority where you live.

6. Children

Our shop is not aimed at children. Under Danish law, a child can consent to online services from age 13. We do not knowingly collect data from younger children.

7. Changes

We update this policy when our processing changes. The date below shows the current version.

Last updated: 6 November 2026