Privacy policy

Data controller

Information we process

Orders contain the customer's name, email, telephone number, delivery address, purchased items, delivery choice, payment reference and order status. Reviews contain the submitted name, optional email and review. Newsletter records contain the email address and consent time. Product availability requests contain the email address and selected product until the one-time notification has been sent. If a customer chooses the optional checkout reminder, that choice is stored with the pending order. Customer accounts contain the email address, a one-way password hash, saved contact and delivery details, and links to orders placed while signed in. Security records may contain timestamps, request information and an IP-derived one-way identifier.

Purpose and legal basis

Order data is processed to complete the purchase, deliver the goods, provide customer service, prevent misuse and comply with bookkeeping and other legal obligations. Newsletter messages are based on consent, which may be withdrawn at any time. Reviews are processed to moderate and publish customer feedback. Availability alerts and unfinished checkout reminders are sent only after the customer explicitly requests them. A pending checkout can receive at most one reminder.

Service providers

Necessary information may be shared with the hosting provider, Stripe for payment, Resend for transactional email, the selected delivery carrier, and an image-storage provider when used. Full card details are entered on Stripe's hosted checkout and are not stored by Sakinah Bookstore.

Storage and deletion

Order and invoice records are kept for the period required by bookkeeping and consumer law. Account profile data is kept while the account is active and may be corrected or requested deleted by contacting the store; legally required order and invoice records remain protected for the required period. Newsletter data is kept until consent is withdrawn, and other information is deleted or anonymised when it is no longer needed for its stated purpose or a legal requirement. An availability request is deleted after its notification has been sent.

Cookies and local storage

The store currently uses only functionality needed for the basket, customer and administrator sessions, checkout and abuse prevention. The signed customer session is stored in a secure, HTTP-only cookie and the basket is stored locally in the browser. The store also uses an anonymous, first-party session identifier during a visit to count page views, visits and referral domains. It does not record names, email addresses, IP addresses, search terms or advertising identifiers, and it is not shared with third-party advertising or analytics providers.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, objection or data portability. Contact sakinahbookstore@hotmail.com. You may also complain to the Danish Data Protection Agency.