Privacy Policy

Helin Hair ApS, CVR 36955317, Bymidten 40, DK-3500 Værløse, is the data controller for the personal data we process about you on helinhair.dk and in our webshop.

Contact: info@helinhair.dk or phone +45 26 25 92 92.

When you buy in the webshop: name, email, phone, billing and delivery address, the pickup point you choose, what you buy, amounts, order and payment status, and returns. Your card details go straight to Stripe. We do not see them.

When you type your address at checkout, what you type is sent to Google to show address suggestions.

When you have a customer account: your email, your name and a log of sign-ins.

When you write to us or use the chat: what you write and the contact details you give.

When you sign up for the newsletter: your email, your language and the time of your consent.

When you visit the site: your IP address and details about your browser, which our hosting and content providers need to show the page. Statistics and analysis with cookies only if you have said yes (see Statistics and cookies).

Processing, sending and delivering your order, and handling withdrawal, returns and complaints: our contract with you, GDPR Article 6(1)(b).

Bookkeeping of orders, invoices, credit notes and payments: our legal obligation under the Danish Bookkeeping Act, Article 6(1)(c).

Giving you a customer account so you can see your orders: our contract with you, Article 6(1)(b).

Answering your messages and chat: our legitimate interest in helping you, Article 6(1)(f), or the contract when it concerns an order.

Sending the newsletter: your consent, Article 6(1)(a). You confirm the sign-up through a link in an email.

Statistics and analysis with cookies (Google Analytics, Google Tag Manager, Microsoft Clarity): your consent, Article 6(1)(a).

Cookie-free statistics (Umami), address suggestions at checkout and fraud protection at payment: our legitimate interest in a webshop that works and is safe, Article 6(1)(f).

When you pay for an order in our webshop, we create an account for your email so you can sign in and see your orders. You sign in with a one-time code we email you, so there is no password. The account holds your email and name, and our sign-in provider (Amazon Web Services, in the EU) keeps a log of sign-ins for security. Once you are signed in, the session is kept only in the open browser tab and ends when you close it. You can ask us to delete the account at any time.

The chat on the website uses an AI model from Anthropic (USA) to answer. What you write in the chat is sent to Anthropic to produce the answer. If you give your name, email and phone in the chat, we keep them with the conversation so a member of staff can follow up. Please do not write health details or other sensitive information in the chat.

Umami counts visits and a fixed set of actions without cookies and without storing anything in your browser, and it runs for everyone. The actions are: clicking Book, going on to the booking site, calling a salon, viewing a salon, opening the chat, signing up for the newsletter, sending the contact form, and webshop steps (item viewed, added to basket, payment started, purchased with amount). We only send fixed codes such as salon and item, never your name, e-mail, phone or anything you type. Umami does not store your IP address, and the data stays in the EU. The basis is our legitimate interest in improving the website (GDPR Article 6(1)(f)).

If you click Accept all in the cookie banner, we also load Google Analytics 4 and Google Tag Manager (visits and purchases) and Microsoft Clarity (clicks, scrolling and session recordings, so we can find errors). Clarity does not record on the pages with your order. If you click Decline, none of them is loaded.

You can change your choice on the Cookie Policy page. Details of each cookie are in our cookie policy.

If you consent to us using photos or video of your treatment, we record your name, your contact details, exactly what you agreed to, the time, the version of the text you were shown, and your IP address and browser. The last two are kept solely as proof that the consent was actually given, as required by GDPR Article 7(1). The legal basis is your consent, Article 6(1)(a). We keep the record for up to 5 years so we can prove the consent for as long as the material is published. You can withdraw your consent at any time by writing to info@helinhair.dk or telling your stylist. We do not delete the record itself, as we must also be able to prove that you withdrew your consent.

Our website, webshop, sign-in and emails run at Amazon Web Services in the EU (Frankfurt and Stockholm). Some providers are American or may process data in the USA: Stripe, Google, Microsoft and Anthropic.

Such transfers rely on the European Commission's adequacy decision on the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's standard contractual clauses.

We keep orders, invoices, credit notes and payment details for 5 years from the end of the financial year they belong to, as the Danish Bookkeeping Act requires.

You keep your customer account until you ask us to delete it. We still keep bookkeeping records for the period the law requires.

We keep your newsletter sign-up until you unsubscribe.

Cookies are kept for the time stated in the cookie policy.

Other data we keep only as long as we need it for the purpose we collected it for.