Privacy policy

Last updated: 2 November 2026

This policy explains what personal data Bean Bros collects when you visit beanbros.co, beanbros.dk or beanbros.it, buy from us, sign up for our emails or contact us, what we use it for, who we share it with, and what rights you have.

1. Who is responsible for your data

The data controller is:
Studio Élan ApS (trading as Bean Bros)
CVR: 39803992
Amaliegade 6, 2. tv., 1256 København K, Denmark
Email: support@beanbros.co
Phone: +45 31 88 64 20

Write to us at the address above whenever you have a question about your data or want to use your rights.

2. What data we collect

  • Order data: name, delivery and billing address, email, phone number, the products you buy, order history, and the delivery and return details of your orders.
  • Payment data: payments are handled by our payment providers (for example Shopify Payments, PayPal, Google Pay, Apple Pay and Shop Pay). We see the payment method and status, but never your full card number.
  • Account data: if you create a customer or trade account: name, email, addresses, company details (trade accounts) and order history.
  • Newsletter and sign-up data: email, first name, language, the answers you give in sign-up forms (for example which upgrade you are interested in), and where you came from (campaign/UTM data).
  • Back-in-stock requests: email, the product you asked about and your language.
  • Customer service: what you write to us by email, chat or contact form, and any photos you send with a warranty claim.
  • Website use: IP address, device and browser type, pages viewed, products added to the cart and similar data, collected with cookies and similar technologies (see section 6).

3. What we use it for, and on what legal basis

  • To process and deliver your order, handle returns, warranty claims and refunds, and send order and shipping emails. Legal basis: performance of a contract (GDPR art. 6(1)(b)).
  • To keep accounting records as required by Danish bookkeeping law. Legal basis: legal obligation (art. 6(1)(c)).
  • To answer your questions and give customer service. Legal basis: contract, or our legitimate interest in helping you (art. 6(1)(b) and (f)).
  • To send newsletters, offers and early access emails, and to tell you when a product is back in stock. Legal basis: your consent (art. 6(1)(a)). You can withdraw it at any time with the unsubscribe link in every email.
  • To measure and improve the website and our ads (statistics and marketing cookies). Legal basis: your consent via the cookie banner (art. 6(1)(a)).
  • To prevent fraud and keep the shop secure. Legal basis: our legitimate interest (art. 6(1)(f)).
  • To ask you for a review after a purchase. Legal basis: our legitimate interest (art. 6(1)(f)). You can say no at any time.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We use trusted providers who process data on our behalf, under data processing agreements:

  • Shopify: our shop platform, checkout and customer accounts.
  • Payment providers: Shopify Payments, PayPal, Google Pay, Apple Pay and Shop Pay process your payment.
  • Shipmondo and Smartpack: shipping labels, warehouse handling, packing and returns.
  • Carriers such as DAO, Bring, PostNord and FedEx: they receive your name, address, phone and email to deliver your parcel.
  • Klaviyo: newsletters, sign-up forms, order-related emails and back-in-stock alerts.
  • Gorgias: customer service by email and chat.
  • SparkLayer: trade (B2B) accounts and wholesale prices.
  • Google (Google Analytics and Google Ads) and Meta (Facebook/Instagram pixel): statistics and advertising, only if you accept these cookies.
  • Trustpilot: review invitations and reviews.
  • Pandectes: our cookie banner, which stores your cookie choices.
  • Our accountant and authorities, when the law requires it.

5. Transfers outside the EU/EEA

Some providers (for example Shopify, Klaviyo, Google and Meta) may process data outside the EU/EEA, mainly in the USA and Canada. We only allow this where there is a legal basis for the transfer, such as an EU adequacy decision (Canada, or the EU-U.S. Data Privacy Framework for certified companies) or the EU Commission's standard contractual clauses.

6. Cookies

We use necessary cookies to make the shop work (cart, checkout, language and country, login, security). These are always on. Statistics and marketing cookies (Google Analytics, Google Ads, Meta pixel) are only set if you accept them in the cookie banner. You can change your choice at any time via the cookie settings link on the site, or by clearing cookies in your browser.

7. How long we keep it

  • Orders and accounting records: 5 years from the end of the financial year, as required by Danish bookkeeping law.
  • Customer accounts: until you delete the account, or after 3 years without activity.
  • Customer service conversations: up to 3 years after the case is closed, longer only if needed for a warranty claim or legal claim.
  • Newsletter data: until you unsubscribe. After that we keep only your email on a suppression list, so we don't email you again.
  • Back-in-stock requests: until the alert has been sent, or at most 12 months.
  • Cookies: as described in the cookie banner.

8. Your rights

Under the GDPR you have the right to:

  • see the personal data we hold about you (access);
  • have incorrect data corrected;
  • have your data deleted, unless we must keep it by law;
  • restrict how we use your data;
  • object to our use of your data based on legitimate interest, and to direct marketing at any time;
  • receive your data in a machine-readable format (data portability);
  • withdraw your consent at any time, without affecting what we did before you withdrew it.

To use your rights, email support@beanbros.co. We reply within one month.

You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.

9. Security

We protect your data with technical and organisational measures, including encrypted connections (TLS), access only for the staff and providers who need it, and PCI-DSS compliant payment handling by our payment providers.

10. Children

Our shop is not aimed at children under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version. If we make important changes, we will tell you on the website or by email.

12. Contact

Questions about privacy: support@beanbros.co or Studio Élan ApS, Amaliegade 6, 2. tv., 1256 København K, Denmark.