Privacy and Personal Data Policy

Last updated: 29 October 2026

1. Data controller

N&M Trading ApS is the data controller for processing personal data in connection with Rabuta.dk.

N&M Trading ApS
CVR no.: 37760692
Strandbygade 51, 6700 Esbjerg, Danmark
Telephone: +45 91 73 54 90
Email concerning the webshop and personal data: support@rabuta.dk
General email: nmasianshop@gmail.com
Website: https://rabuta.dk

2. What personal data do we process?

Depending on how you use the webshop, we may process:

• Your name, address, telephone number and email address.
• Information about your orders, payments, delivery choices and any returns or complaints.
• Information you send us when contacting customer service.
• Technical information about use of the webshop, such as your IP address, device and browser details, and information collected through cookies and similar technologies.

We process only information relevant to the purposes described below.

3. Purposes and legal bases

We process your personal data to:

• Receive and process orders, payments, delivery and any returns or complaints. The legal basis is that the information is necessary to fulfil our contract with you.
• Answer questions and handle customer service. Processing is necessary to follow up on your enquiry and, where relevant, fulfil our contract with you.
• Meet bookkeeping requirements and other statutory obligations. The legal basis is our legal obligation.
• Protect the webshop, prevent misuse and handle security incidents. Processing is based on our legitimate interest in protecting the webshop and our customers.
• Send newsletters or marketing if you have subscribed or otherwise provided the necessary consent. You can withdraw your consent at any time.

4. Who do we share information with?

We share personal data only when necessary. This may include:

• Shopify, which provides the webshop platform and processes information on our behalf.
• The payment provider you select at checkout, to carry out and administer payment.
• Shipping and delivery companies responsible for delivering your order.
• IT, bookkeeping and other service providers when they help us operate the business and process information on our behalf.
• Public authorities if disclosure is required by law.

Providers processing personal data on our behalf may process it only in accordance with our instructions and the applicable rules.

5. Retention of information

We retain personal data for as long as necessary for the purpose for which it was collected, or as long as required by law.

• Order and payment information is retained as long as necessary to complete the order, handle any claims and meet bookkeeping requirements.
• Customer service enquiries are retained while we handle the matter and as long as necessary to document and follow up on it.
• Information used for marketing is retained until you withdraw consent or the information is no longer necessary for that purpose.
• Cookie information is retained for the period stated in our cookie settings.

When information is no longer necessary or required by law, we delete or anonymise it.

6. Transfers of personal data outside the EU/EEA

We use Shopify to operate Rabuta.dk. Shopify states that personal data may be transferred to and processed in countries outside the EU/EEA where Shopify, its affiliates or subprocessors are located. These may include Canada and Singapore.

Shopify states that such transfers take place in accordance with applicable data protection rules and with appropriate safeguards, including binding corporate rules or standard contractual clauses where relevant.

Read more in Shopify's Data Processing Addendum and Shopify's information on international data transfers.

7. Cookies

Rabuta.dk and Shopify may use cookies and similar technologies, including to make the webshop function and manage your chosen settings. Other cookies, for example for statistics or marketing, are used only once the required consent has been given.

You can manage or change your cookie preferences through the cookie banner or the webshop's cookie settings. Details of the specific cookies, their purposes, providers and retention periods are displayed in the cookie settings.

8. Your rights

Under data protection rules, your rights include:

• Access to the personal data we process about you.
• Having inaccurate information corrected.
• In certain cases, having information deleted or processing restricted.
• Objecting to certain forms of processing.
• Receiving or transferring information where the data portability rules apply.
• Withdrawing consent. This does not affect the lawfulness of processing before withdrawal.

Some rights apply only under certain conditions. We may therefore sometimes need to retain information even if you ask us to delete it, for example where required by law.

To exercise your rights, contact us at support@rabuta.dk.

9. Complaints to Datatilsynet

If you are dissatisfied with how we process your personal data, you are welcome to contact us first so that we can investigate the matter.

You also have the right to complain to Datatilsynet. Guidance and contact information are available at datatilsynet.dk.