PRIVACY POLICY

Modeoutlet.dk & Modeoutlet.net

Last updated: 17 September 2026

This Privacy Policy explains how TOHUMAN Services ApS, operator of Modeoutlet.dk and Modeoutlet.net, collects, uses, stores, shares and protects personal data. It applies when you visit our stores, make a purchase, use a customer account, contact customer service, return goods or make a complaint, subscribe to marketing, or otherwise interact with our websites and digital services. We process personal data only where we have a legitimate purpose and a valid legal basis.

1. Data controller

TOHUMAN Services ApS
Lyngbyvej 83A
2100 Copenhagen Ø
Denmark
CVR no. 40427422

Websites: www.modeoutlet.dk and www.modeoutlet.net
Email: support@modeoutlet.dk

Contact us at this address if you have questions about our processing of personal data or wish to exercise your rights.

2. When you visit our websites

We may process information such as IP address, browser and device information, operating system, technical logs, cookie and online identifiers, pages and products viewed, searches, clicks and other interactions, referring website, visit time and duration, and approximate geographical area derived from technical information.

Purposes can include technical operation, security and abuse prevention, troubleshooting, statistics and analytics, improvement of the user experience, personalisation and, where the required consent has been obtained, marketing.

Legal basis

Technically necessary activities may be based on our legitimate interest in operating a secure and functional store under GDPR Article 6(1)(f). Where consent is required, for example for non-essential cookies, certain analytics, personalisation or marketing, processing is based on GDPR Article 6(1)(a). Storage of or access to information on a user's device generally requires prior consent unless technically necessary. See also our Cookie Policy and cookie settings.

3. When you make a purchase

We may process your name, delivery and billing addresses, email, telephone number, order number, purchased products, prices and discounts, delivery information, payment status, order history, return and refund information, complaint information and relevant order communications.

We use this information to receive and administer orders, complete purchases, deliver goods, communicate about orders, manage returns and refunds, handle complaints, provide customer service, prevent fraud and abuse, and comply with accounting, tax and other legal requirements.

Depending on the purpose, processing can be based on GDPR Article 6(1)(b) for performance of a contract, Article 6(1)(c) for legal obligations, or Article 6(1)(f) for legitimate interests such as fraud prevention, documentation and legal claims.

4. Payment

Relevant payment information is processed by the payment providers offered at checkout. Depending on the current setup, these may include Shopify Payments, card-payment providers, MobilePay, PayPal, Klarna or other payment or financing providers. We normally do not receive your full card details.

Payment data is processed for payment execution, authorisation, control, fraud prevention, refunds and payment disputes. Depending on the service, a provider can act as processor, joint controller or independent controller. Where a provider is an independent controller, its own privacy policy applies.

5. Delivery and logistics

To deliver your order, we may share necessary information with carriers and logistics providers, including name, delivery address, email, telephone number, order number and relevant delivery details. This sharing is necessary to perform the purchase contract under GDPR Article 6(1)(b). Carriers may be independent controllers for parts of their processing.

6. Returns, withdrawal and complaints

When you return goods, exercise the right of withdrawal or make a complaint, we may process your name, contact details, order number, product information, return information, communications, photos or video you send us, and payment/refund information. The purpose is to administer returns, refunds and complaints and comply with contractual and legal obligations.

For ordinary consumer purchases, Modeoutlet.dk and Modeoutlet.net generally provide a 14-day statutory right of withdrawal. Full rules are set out in our Return & Refund Policy. The right of withdrawal is a consumer-law rule rather than a GDPR right, but personal-data processing may form part of the return process.

7. Customer service

If you contact customer service, we may process your name, email, telephone number, order number, the content of your enquiry, relevant previous correspondence, and any images or documents you send. We use this information to answer your enquiry, provide service, manage orders, returns or complaints, and document relevant cases. The legal basis may be GDPR Article 6(1)(b), (c) or (f), depending on the enquiry.

8. Customer account

If you create or use a customer account, we may process your name, email, telephone number, addresses, account identifier, order history and relevant account settings. The purpose is to provide account functions such as order history, order status and easier checkout. Processing is generally based on GDPR Article 6(1)(b).

9. Newsletters and direct marketing

If you subscribe to newsletters or other electronic marketing, we may process your email address, name if provided, date and evidence of consent, marketing preferences and, where applicable and consented to, information about opens and clicks.

Electronic direct marketing generally requires prior consent, which must be easy and free to withdraw. A specific exception may apply to marketing of a business's own similar products to existing customers if all legal conditions are met, including an easy and free opt-out both when the email address is collected and in each later communication.

You can unsubscribe through the link in a marketing email or by contacting support@modeoutlet.dk. Service messages relating to an existing purchase, such as order confirmation, payment, delivery or return information, are not marketing emails and can be sent as part of performing the purchase contract.

10. Cookies and similar technologies

We use cookies and similar technologies. Some are technically necessary for functions such as cart, checkout, login, security and session management. Others can be used for statistics, analytics, personalisation, marketing measurement and targeted advertising.

Non-essential cookies and similar technologies are generally activated only after the required consent has been obtained. Through our cookie settings you can accept or reject relevant categories, change your choices and withdraw consent. Details about providers, purposes and lifetimes are available in our Cookie Policy or cookie settings.

11. Shopify

Modeoutlet.dk and Modeoutlet.net operate on the Shopify platform. Shopify provides hosting, the e-commerce platform, checkout, order processing, technical functions, security and operational services.

For ordinary processing of customer data in our store, TOHUMAN Services ApS is the controller while Shopify acts as our processor for a number of processing activities. Shopify's role may differ for certain services and so-called Enhanced Services.

Shopify Network Intelligence

If Shopify Network Intelligence is enabled, Shopify may use information from customer interactions with our store together with information from other interactions across the Shopify network for specified Enhanced Services such as personalisation, analytics, security and advertising functions. Additional information, consent and opt-out requirements can apply to customers in the EU/EEA.

12. Recipients of personal data

We share or make personal data available only where necessary and lawful. Recipients can include Shopify, payment providers, card networks and banks, shipping and logistics providers, IT and security providers, newsletter and marketing platforms, analytics providers, customer-service systems, accounting and audit providers, professional advisers and public authorities where required by law.

Some providers process data on our instructions as processors; others act as independent controllers for their own purposes.

13. International transfers

Some providers or subprocessors may process personal data outside the EU/EEA. Transfers must have a lawful transfer mechanism, for example an adequacy decision by the European Commission, the Commission's Standard Contractual Clauses (SCCs) or another mechanism permitted by GDPR.

For transfers to the United States, an adequacy decision can be used where the recipient is validly certified under the EU-U.S. Data Privacy Framework. Where SCCs are used, supplementary technical or organisational safeguards may be required depending on the circumstances.

14. Retention and deletion

We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required by law or necessary to establish, exercise or defend legal claims.

Orders and accounting

Accounting records are generally retained for 5 years from the end of the financial year to which the records relate. Purchase-related information may also be retained as necessary for delivery, returns, complaints, accounting, tax, documentation and legal claims, after which it is deleted or anonymised unless another lawful basis requires continued retention.

Customer service

Customer-service enquiries and documentation are retained for as long as necessary to handle the enquiry and document relevant circumstances.

Marketing

Marketing data is retained until consent is withdrawn, you object, the marketing basis ends, or the data is no longer necessary. Limited evidence of previous consent and unsubscribe requests can be retained where needed to demonstrate compliance.

Cookies

Cookie lifetimes vary by type and purpose. Current periods are shown in our Cookie Policy or cookie settings.

15. Sources of personal data

Most data is received directly from you when you make a purchase, create an account, contact customer service or subscribe to marketing. We may also receive or generate information through Shopify, payment providers, carriers, cookies and similar technologies, analytics and marketing platforms, and security or fraud-prevention systems.

16. Automated processing and profiling

We may use automated systems for fraud prevention, security, analytics, product recommendations, personalisation and marketing where a valid legal basis exists. TOHUMAN Services ApS generally does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you. If such processing is introduced, we will provide the information required by GDPR.

17. Your rights

Depending on the processing, you may have rights to access, rectification, erasure, restriction, data portability, object, object to direct marketing, withdraw consent, and rights relating to certain automated decisions.

These rights are not absolute in every situation; for example, we cannot erase data that we are legally required to retain. To exercise your rights, contact support@modeoutlet.dk.

We respond without undue delay and generally within one month. In particularly complex cases, GDPR allows the period to be extended by a further two months, in which case you will be informed. We may request information necessary to verify identity and protect personal data from unauthorised disclosure.

18. Withdrawal of consent

Where processing is based on consent, you can withdraw that consent at any time. Withdrawal applies prospectively and does not affect the lawfulness of processing carried out before withdrawal. Use our cookie settings for cookies and the unsubscribe link or support@modeoutlet.dk for newsletter and marketing consent.

19. Security

We use appropriate technical and organisational safeguards designed to protect personal data against unauthorised access, loss, destruction, alteration, misuse and unlawful disclosure. Access is limited to employees, suppliers and other persons with a relevant need. Safeguards are reviewed in light of the nature and risk of the processing.

20. Complaints to the Danish Data Protection Agency

If you are dissatisfied with our processing, you are welcome to contact us first at support@modeoutlet.dk. You also have the right to complain to:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Telephone: 33 19 32 00
Email: dt@datatilsynet.dk

21. Changes to this Privacy Policy

We may update this Privacy Policy if our processing, suppliers, technologies, services, legislation or regulatory practice changes. The current version will be available on our websites. Where required, significant changes may also be communicated in another appropriate way.

Last updated: 17 September 2026