Controller
Spike Company ApS, company registration number 43080555, Kellerisvej 66, 3490 Kvistgård, Denmark, is the controller.
Contact info@spikecompany.dk regarding personal data.
Data we process
We may process identity, contact, delivery, billing, order, payment-status, refund, tracking, correspondence, chat, newsletter, consent and technical security data.
Spike Company does not receive your full card details; these are entered directly with Stripe.
Purposes and legal bases
Order, delivery and payment data is processed to enter into and perform the purchase contract. Returns, claims and support rely on the contract, legal duties and legitimate interests in customer service and fraud prevention.
Newsletters, optional analytics and marketing rely on consent.
Recipients and processors
Providers may include Vercel, Supabase, Stripe, Resend or another approved email provider, relevant carriers, advisers and authorities.
Google and Meta tools load only when configured and consented to. We do not sell personal data.
Transfers outside the EEA
Where a provider processes data outside the EEA, an appropriate transfer mechanism and relevant safeguards are used, such as an adequacy decision or the European Commission’s standard contractual clauses.
Retention
Order and accounting data is retained as needed to document purchases and meet accounting and tax duties. Support and chat data is deleted or anonymised when no longer needed for the matter or a legal claim.
Newsletter data remains until unsubscribe, while consent evidence may be retained where necessary.
Your rights
You may request access, correction, deletion, restriction and portability and object where applicable. Consent may be withdrawn at any time.
Some information must be retained where law requires it.
Security
Measures include encrypted transport, access controls, role-based administration, database policies, signed payment webhooks and audit logging.
Cookies and local storage
Necessary storage supports the cart, language, security and consent choice. Optional analytics and marketing require consent. See the cookie policy and reopen Cookie settings from the footer at any time.
Complaints and changes
You may complain to the Danish Data Protection Agency. Please contact Spike Company first so that we can investigate.
The current version of this notice is always available on this page.