Terms and conditions

At Chaya, we take great care to protect your personal data. This Privacy Policy explains what information we collect, how we use it, and what rights you have.

1. Who is responsible for your personal data?

Chaya is the data controller responsible for the processing of your personal data.

Company: Chaya ApS
CVR no. (Danish Business Registration Number): 66111717
Address: Literbuen 9, 2740 Skovlunde, Denmark
Email: chaya@chaya.dk
Website: www.chaya.dk

2. What personal data do we collect?

Depending on how you use our services, we may process the following information:

Your name, email address, telephone number and delivery address.
Information about your purchases, orders and payments.
Information you provide when subscribing to our newsletters or participating in competitions.
Information about your use of our website and your interactions with our marketing activities, where relevant and permitted by law.

We only collect personal data that is relevant to the purposes for which it is intended.

3. How do we use your personal data?

Purchases from our online shop

When you shop at Chaya, we process the information necessary to complete your order, process payment, deliver your products and handle customer service enquiries, complaints and returns.

This processing is generally based on the performance of our contract with you, in accordance with Article 6(1)(b) of the GDPR, and compliance with legal obligations, in accordance with Article 6(1)(c).

Newsletters and marketing

When you subscribe to our newsletter, we use your email address and, where applicable, your name to send you news, inspiration, product information and special offers from Chaya.

We send marketing emails based on your consent, in accordance with Article 6(1)(a) of the GDPR and applicable rules on electronic marketing.

You may withdraw your consent at any time by clicking the unsubscribe link in our newsletters.

Competitions and promotional campaigns

When you participate in a competition organised by Chaya, we process the information necessary to register your participation, conduct the prize draw and contact the winner.

If participation in a competition also involves subscribing to our newsletter, we will clearly inform you of this before you sign up.

Participating in a competition does not, in itself, give Chaya permission to send you marketing communications. This requires valid consent.

Customer service

When you contact us, we process the information you provide in order to respond to your enquiry and assist you.

Depending on the nature of your enquiry, this processing is based on the performance of a contract, compliance with legal obligations or our legitimate interest in providing customer service.

4. Which systems and service providers do we use?

We use external service providers for various purposes, including operating our online shop, processing payments, delivering orders, distributing newsletters and managing advertising.

Klaviyo

We use Klaviyo to manage newsletter subscribers, send emails and analyse the performance of our newsletters.

Klaviyo processes personal data on our behalf under a data processing agreement, to the extent that Klaviyo acts as a data processor.

Meta (Facebook and Instagram)

We use Meta's platforms for advertising and promotional campaigns. If you complete an instant form on Facebook or Instagram, Chaya receives the information you choose to submit.

Meta also processes personal data in accordance with its own terms and Privacy Policy. The specific allocation of data protection responsibilities depends on the features used.

Other service providers

We also use relevant service providers for online shop operations, payment processing, shipping and technical services.

We only share personal data where there is a legitimate and lawful basis for doing so.

5. Transfers of personal data outside the EU/EEA

Some of our service providers may process personal data outside the European Union (EU) or the European Economic Area (EEA), including in the United States.

Where such transfers take place, we ensure that a valid transfer mechanism under the GDPR is in place, such as a relevant adequacy decision or the European Commission's Standard Contractual Clauses, together with any necessary supplementary safeguards.

You may contact us for further information about relevant international data transfers and the safeguards applied.

6. How long do we retain your personal data?

We only retain personal data for as long as necessary for the purposes for which it was collected, or for as long as required by law.

Purchase and accounting records: Retained in accordance with applicable Danish bookkeeping regulations, generally for five years from the end of the relevant financial year.
Newsletter information: Processed for as long as you remain subscribed. After unsubscribing, we only retain the information necessary to respect your opt-out and document your consent for an appropriate period.
Competition information: Deleted once the competition has ended and the information is no longer required, unless another lawful basis justifies continued retention.
Customer service enquiries: Retained for as long as necessary to handle your enquiry and any subsequent claims.

7. Cookies and analytics

Our website may use cookies and similar technologies for functionality, analytics and marketing purposes.

Where required by law, we obtain your consent before using non-essential cookies or similar tracking technologies.

You can find more information about the specific technologies we use and manage your preferences in our cookie settings.

8. Your rights

Under applicable data protection legislation, you have a number of rights, including the right to:

Access the personal data we process about you.
Have inaccurate personal data corrected.
Request the deletion of your personal data where the relevant conditions are met.
Request the restriction of processing in certain circumstances.
Object to certain types of processing.
Receive your personal data in a structured format where the right to data portability applies.
Withdraw your consent at any time without affecting the lawfulness of processing carried out before your withdrawal.