Controller
Spike Company ApS, company registration number 43080555, Kellerisvej 66, 3490 Kvistgård, Denmark, is the controller. Contact info@spikecompany.dk.
Data and purposes
We may process identity, contact, delivery, order, payment-status, correspondence, chat, consent and technical event data to complete orders, provide support, prevent misuse, meet accounting duties and improve the site.
Legal basis
Order data is processed to perform the contract and meet legal duties. Support relies on contract or legitimate interest. Newsletters, analytics and marketing rely on consent.
Processors and recipients
Providers may include Vercel, Supabase, Stripe, an email provider such as Resend, relevant carriers, advisers and authorities. Google and Meta tools load only after relevant consent and configuration.
Retention
Order and accounting data is retained as required by law. Support data is deleted or anonymised when no longer needed. Newsletter data remains until unsubscribe, while consent evidence may be retained.
Your rights
You may request access, correction, deletion, restriction and portability, object where applicable and withdraw consent. Complaints may be made to the Danish Data Protection Agency.
Cookies and choices
Necessary storage supports the cart, language, security and consent choice. Analytics and marketing are off until accepted. Cookie settings can be reopened from the footer.
Security and changes
Controls include encrypted transport, role-based admin access, database policies and audit logging. This notice is updated when processing changes materially.