PRIVACY POLICY

Last updated: November 2025

Casa Gira Ceramics (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you visit our website www.casagiraceramics.com, make a purchase, or interact with us in any way.

1. Who We Are

Casa Gira Ceramics
Borups Allé 217A
2400 Copenhagen, Denmark
hello@casagiraceramics.com
+45 53 79 90 70

We are the data controller responsible for your personal information under the EU General Data Protection Regulation (GDPR).

2. Personal Data We Collect

We collect and process the following types of personal data:

A. Information You Provide to Us

  • Contact details: name, address, email, phone number.

  • Order details: products purchased, delivery address, payment information (processed securely by Squarespace or other payment providers — we do not store full card details).

  • Account information: username, password (if you create an account).

  • Messages: information you share when you contact us by email, form, or social media.

B. Information Collected Automatically

When you visit our site, we automatically collect:

  • Device information: IP address, browser type, operating system, and referring URLs.

  • Usage data: how you navigate and interact with the site (pages viewed, time spent, etc.).
    This data helps us improve our website and user experience.

C. Cookies and Similar Technologies

We use cookies to provide essential site functions (like cart and checkout), remember preferences, and analyze traffic. You can adjust cookie preferences in your browser at any time. For more details, see our Cookie Policy [link if available].

3. How We Use Your Data

We use your data only for purposes allowed under the GDPR, including:

  • To process and deliver your orders (payment, shipping, returns).

  • To communicate with you about your purchases, support requests, or inquiries.

  • To improve our website, products, and customer experience.

  • To send marketing emails (only if you have given consent).

  • To comply with legal obligations, such as accounting and tax reporting.

We do not sell or rent your personal data to third parties.

4. Legal Bases for Processing

We process your data based on the following legal grounds:

  • Contractual necessity – to fulfill your order or service request.

  • Consent – for marketing communications and cookies.

  • Legal obligation – to comply with tax and consumer protection laws.

  • Legitimate interests – to maintain and improve our business and website.

5. Sharing Your Personal Data

We share personal data only with trusted partners when necessary to provide our services:

  • Squarespace Inc. – our website and e-commerce platform.

  • Payment processors (e.g., Stripe, PayPal, or Squarespace Payments).

  • Shipping companies – for order delivery.

  • IT and analytics providers – who help us operate our website.

  • Professional advisors – such as accountants or legal counsel, if required by law.

All partners are contractually obligated to handle your data securely and in compliance with GDPR.

6. International Data Transfers

Because our store is hosted by Squarespace Inc. (headquartered in the U.S.), your data may be transferred outside the EU/EEA. Squarespace complies with EU–U.S. Privacy Shield principles and/or Standard Contractual Clauses (SCCs) to ensure your data is protected to EU standards.

7. Data Retention

We keep your personal data only as long as necessary for the purposes for which it was collected:

  • Order and billing data: up to 5 years (as required by Danish bookkeeping law).

  • Account information: until you delete your account.

  • Marketing data: until you withdraw your consent.

After this period, your data is securely deleted or anonymized.

8. Your Rights (Under GDPR)

You have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.

  • Correction: Request correction of inaccurate or incomplete data.

  • Deletion: Request erasure of your data (“right to be forgotten”).

  • Restriction: Request to limit how we process your data.

  • Portability: Receive your data in a structured, machine-readable format.

  • Objection: Object to processing based on legitimate interest or direct marketing.

  • Withdraw Consent: You can withdraw your consent for marketing emails at any time.

To exercise these rights, contact us at hello@casagiraceramics.com.

If you believe your data is being mishandled, you can also file a complaint with:
Datatilsynet (The Danish Data Protection Agency)
Borgergade 28, 5
1300 Copenhagen K, Denmark
📧 dt@datatilsynet.dk
🌐 www.datatilsynet.dk

9. Data Security

We take appropriate technical and organizational measures to protect your data from unauthorized access, loss, or misuse — including encryption, access control, and secure hosting via Squarespace.

10. Children’s Privacy

Our website and services are not intended for children under 16. We do not knowingly collect data from minors. If you believe a child has provided personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with the revised “Last updated” date.

12. Contact Us

If you have questions about this Privacy Policy or how your data is handled, please contact us:

Casa Gira Ceramics
Borups Allé 217A
2400 Copenhagen, Denmark
hello@casagiraceramics.com
+45 53 79 90 70