Privacy Policy
Privacy Policy
Last updated: October 13, 2026
At EDDISHAW, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, request a free store review, or interact with our advertisements and services.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Danish data protection laws.
1. Who We Are
EDDISHAW is a Denmark-based business specializing in Shopify website design, development, conversion rate optimization (CRO), and e-commerce consulting.
Business Information
Business name: EDDISHAW
CVR Number: 36640995
Country: Denmark
Website: https://eddishaw.com
Email: peter@eddishaw.com
Phone: +45 61 78 88 75
Registered business address: Gammavej 302, 5200 Odense V, DK
EDDISHAW is the data controller responsible for the personal information described in this Privacy Policy.
For questions concerning privacy or personal data, please contact us using the email address above.
2. Information We Collect
Depending on how you interact with us, we may collect the following information.
Information you provide voluntarily:
Full name
Email address
Telephone number
Company or business name
Website or Shopify store URL
Project details and business requirements
Messages, enquiries, and other information you choose to share
Information collected automatically:
IP address
Browser type and device information
Pages visited and interactions with our website
Referral sources
Approximate geographic location derived from technical information
Cookie identifiers and analytics data, where applicable
We only collect information relevant to providing our services, responding to enquiries, operating our website, and carrying out legitimate business activities.
3. How We Use Your Information
We may process your personal information to:
Respond to enquiries and contact requests.
Provide free Shopify store reviews and consultations.
Evaluate your business needs and recommend relevant services.
Communicate about requested services, proposals, and projects.
Manage customer relationships and fulfil contractual obligations.
Improve our website, services, and user experience.
Measure advertising performance and website engagement, where legally permitted.
Send marketing communications when we have the necessary consent or another applicable legal permission.
Comply with legal, accounting, and regulatory obligations.
We do not sell your personal information.
4. Legal Basis for Processing
Under Article 6 of the GDPR, we process personal information using the applicable legal basis:
Consent (Article 6(1)(a)): Where you have given consent, such as for non-essential cookies, certain tracking technologies, or marketing communications.
Contract or Pre-Contractual Measures (Article 6(1)(b)): Where processing is necessary to provide requested services, prepare proposals, or perform an agreement with you.
Legitimate Interests (Article 6(1)(f)): Where necessary for legitimate business interests, such as responding to certain business enquiries, maintaining website security, and managing business relationships, provided your rights and interests do not override ours.
Legal Obligations (Article 6(1)(c)): Where processing is necessary to comply with applicable laws, including accounting and recordkeeping requirements.
We assess the appropriate legal basis according to the specific purpose of processing.
5. Meta Lead Ads and Lead Generation
EDDISHAW may use lead generation features provided by Meta Platforms, including Facebook and Instagram advertisements and lead forms.
When you submit information through a Meta lead form, we may receive personal information such as your name, email address, telephone number, business name, website URL, and any additional information you voluntarily provide.
We use this information to:
Respond to your request.
Contact you regarding your enquiry.
Provide a requested free Shopify store review or consultation.
Discuss services relevant to your submitted request.
Arrange consultations or follow-up communication directly related to your enquiry.
Submitting a lead form does not automatically subscribe you to unrelated marketing communications.
If we wish to use your information for separate email marketing, newsletters, or promotional campaigns, we will obtain any additional consent required by applicable law.
Information collected through Meta lead generation features will not be sold to third parties.
Meta may separately process your information under its own privacy policy, available at https://www.facebook.com/privacy/policy/.
6. Cookies, Analytics, and Advertising Technologies
Our website may use cookies and similar technologies to support website functionality, understand visitor interactions, and measure advertising performance.
Depending on the technologies enabled on our website, these may include:
Essential cookies required for website functionality and security.
Analytics technologies, such as Google Analytics, to understand website usage and performance.
Advertising technologies, such as the Meta Pixel, to measure advertising effectiveness and conversions.
Other similar technologies used to improve website functionality and user experience.
Non-essential cookies and tracking technologies requiring consent will only be activated after valid consent has been obtained.
Where applicable, you can accept, reject, or adjust your cookie preferences through our cookie consent mechanism. You may withdraw consent at any time.
Further details about the cookies and tracking technologies actually used, including their purposes, providers, and durations, are made available through our cookie information and consent mechanism.
7. Sharing Information With Third Parties
We may share limited personal information with trusted service providers when necessary to operate our business and deliver requested services.
These providers may include:
Website hosting and infrastructure providers.
Email and communication service providers.
Customer relationship management and lead management platforms.
Scheduling and appointment booking services.
Website analytics providers.
Advertising and marketing platforms.
Professional advisers and other service providers where necessary.
We only share information where there is an appropriate legal basis and where the sharing is relevant to the services provided.
Where required, we enter into data processing agreements with service providers and apply appropriate safeguards.
We may also disclose personal information when legally required to do so.
We do not sell personal information or lead generation data.
8. International Data Transfers
Some of our service providers may process personal information outside Denmark or the European Economic Area (EEA), including in the United States.
Where personal information is transferred to countries outside the EEA, we ensure that an appropriate legal transfer mechanism is in place, where required.
These mechanisms may include European Commission adequacy decisions, the EU-U.S. Data Privacy Framework for participating certified organisations, or the European Commission's Standard Contractual Clauses, together with additional safeguards where necessary.
You may contact us for further information about safeguards applicable to your personal information.
9. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
The retention period depends on the type of information and the purpose of processing.
Enquiries and lead information are retained while necessary to respond to requests and manage relevant follow-up communications.
Customer and contractual information is retained for the duration of the business relationship and for any additional period required by law or justified by legitimate business needs.
Accounting records are retained for the period required under applicable Danish accounting legislation.
Marketing information is processed until consent is withdrawn or another applicable reason for processing ends.
Cookie and analytics information is retained according to the settings and retention periods of the relevant technologies.
When information is no longer necessary, we securely delete or anonymise it unless continued retention is legally required.
10. Data Security
We implement appropriate technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure.
These measures may include restricted access to personal data, secure communication methods, account authentication, and the use of reputable service providers.
Although we take reasonable precautions, no online system can guarantee absolute security.
11. Your Rights Under GDPR
If the GDPR applies to your personal information, you have the following rights, subject to applicable conditions and exceptions:
Right of Access: Request information about the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete information.
Right to Erasure: Request deletion of your personal information where applicable.
Right to Restrict Processing: Request restrictions on certain uses of your data.
Right to Data Portability: Receive certain personal data in a structured, commonly used format.
Right to Object: Object to processing based on legitimate interests and to processing for direct marketing.
Right to Withdraw Consent: Withdraw previously provided consent at any time without affecting the lawfulness of processing before withdrawal.
Rights Relating to Automated Decision-Making: Exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, please contact:
We will respond in accordance with applicable data protection laws, generally within one month of receiving your request.
12. Marketing Communications
We only send electronic direct marketing communications where permitted by applicable law.
If you provide consent to receive marketing emails or other promotional communications, you may withdraw that consent at any time.
You can unsubscribe through the instructions provided in applicable marketing communications or by contacting us directly.
Withdrawing marketing consent does not prevent us from sending necessary communications related to an existing agreement or a request you have made.
13. Children's Privacy
Our services and lead generation advertisements are intended for adults and businesses.
We do not knowingly collect personal information from children through our lead generation activities or direct such advertisements to minors.
If we become aware that we have collected personal information from a child without a valid legal basis, we will take appropriate steps to delete it.
14. Third-Party Websites
Our website may contain links to external websites, platforms, or services.
We are not responsible for the privacy practices or content of third-party websites.
We encourage you to review the privacy policies of any external services you visit.
15. Complaints
If you have concerns about how we process your personal information, please contact us first so we can address your enquiry.
You also have the right to lodge a complaint with the Danish Data Protection Agency:
Datatilsynet
Website: https://www.datatilsynet.dk
Email: dt@datatilsynet.dk
You may also have the right to lodge a complaint with another competent supervisory authority.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our services, technologies, business practices, or legal obligations.
Any updates will be published on this page with a revised "Last updated" date.
We encourage visitors to review this policy periodically.
17. Contact Us
If you have questions about this Privacy Policy, how we process personal information, or wish to exercise your data protection rights, please contact us.
EDDISHAW
Website: https://eddishaw.com
Email: peter@eddishaw.com
Phone: +45 61 78 88 75
CVR: 36640995
Denmark