Privacy policy

Last updated: 7 September 2026

This Privacy Policy explains how 944 Webshop ("we", "us", "our"), a store operated from Denmark, collects, uses, shares and protects your personal data when you visit 944webshop.com ("the Store") or use our services.

1. Data controller

944 Webshop, Maglehøjparken 137, 3600 Frederikssund, Denmark — VAT / CVR: 40841725. Contact: support@944webshop.com.

2. Personal data we collect

We collect only data that is necessary to operate the Store and fulfil orders:

  • Account data — name, email address, password (stored as a one-way hash), language preference, and optional profile details you provide (phone, gender, birth date).
  • Order data — delivery name, delivery address, billing email, ordered items, and order history.
  • Payment data — payment references and transaction identifiers. We never store full card numbers or CVV; card data is processed directly by our payment provider (Stripe).
  • Support data — messages you send to our support team and their replies.
  • Technical data — IP address, browser type, device information and approximate visit activity, collected through server logs and a lightweight, anonymised presence counter (used only to display aggregate visitor statistics).
  • Marketing data — whether you have consented to receive marketing emails.

3. Legal bases for processing

We process personal data under the following lawful bases of the GDPR:

  • Performance of a contract — creating your account and processing your orders and deliveries.
  • Legal obligation — tax, accounting and consumer-protection record keeping.
  • Legitimate interest — preventing fraud, securing the Store, and improving our service.
  • Consent — marketing emails and, where required, cookies. You may withdraw consent at any time.

4. How we use your data

Your data is used to: create and manage your account; process, deliver and track orders; handle payments and refunds; provide customer support; prevent fraud and abuse; comply with legal obligations; and — only with your consent — send marketing communications.

5. Sharing with third parties

We share personal data only to the extent necessary, with the following categories of recipients:

  • Fulfilment suppliers — your delivery name and address are shared with the supplier that ships your order (currently CJ Dropshipping and SunSky, whose warehouses may be located outside the EU).
  • Payment processor — Stripe processes payments; your card details go directly to Stripe and never touch our servers.
  • Email and hosting providers — used to send transactional emails and operate the Store.
  • Authorities — where we are legally required to do so.

We do not sell or rent personal data to third parties.

6. International data transfers

Some of our suppliers operate outside the European Economic Area. When delivery data is transferred to a supplier outside the EEA, we rely on the transfer being necessary for the performance of your purchase contract (Article 49(1)(b) GDPR) and share only the minimum data required to ship your order.

7. Cookies and advertising technology

We use the following categories of cookies and similar technologies on the Store:

  • Essential cookies — required for the shopping cart, session management and your language and currency preferences. These are set regardless of your consent because the Store cannot function without them.
  • Advertising / tracking pixels — we use the Meta Pixel and the TikTok Pixel to measure and improve our advertising, including measuring how visitors interact with the Store and attributing orders to advertising campaigns.

When tracking works: the Meta and TikTok pixels are only loaded, and advertising events are only sent, after you accept marketing/tracking cookies in the cookie banner. If you choose “essential only”, no advertising pixels are loaded and no advertising events are sent.

What the pixels collect: when enabled, the pixels may record events such as page views, product views, add-to-cart actions, checkout steps and purchase confirmation, together with technical identifiers such as your IP address, browser type and device information. If you are logged in and have accepted tracking, a hashed version of your email address may be sent to the advertising providers to help them match your activity across devices. A TikTok click identifier (ttclid) may be stored when you arrive from a TikTok advertisement.

Why we use them: to understand which advertising campaigns and products are effective, and to show you more relevant products.

How to reject or withdraw consent: you can refuse tracking by selecting “essential only” in the cookie banner. You can change or withdraw your consent at any time by clearing the Store’s cookies in your browser settings and re-choosing your preference when the banner appears again. You can also disable cookies generally through your browser settings.

Advertising providers: Meta Platforms (Meta Pixel) and TikTok (TikTok Pixel) act as separate data controllers for the advertising data they collect through their pixels. Please refer to their respective privacy policies for details on how they process this data.

8. Data retention

Account data is kept while your account is active. Order and payment records are retained as required by Danish tax and accounting law. Unverified accounts are deleted automatically after 7 days. Support messages are retained while relevant and then deleted.

9. Security

We use encryption in transit (HTTPS), one-way password hashing, two-factor authentication support, and access controls. Access to personal data is limited to personnel who need it to operate the Store.

10. Automated processing

We use automated tools, including artificial intelligence, to categorise and optimise product information and to detect fraud. This does not produce legal or similarly significant effects for you. Decisions about your orders are made by people.

11. Your rights

Under the GDPR you have the right to:

  • Access a copy of your personal data;
  • Correct inaccurate data;
  • Erase your data ("right to be forgotten");
  • Restrict or object to processing;
  • Data portability;
  • Withdraw consent at any time (for consent-based processing);
  • Lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.

To exercise any right, email us at support@944webshop.com. We respond within 30 days.

12. Children

The Store is not directed to children under 16, and we do not knowingly collect data from them.

13. Changes to this policy

We may update this policy. Material changes will be announced on this page, and the "Last updated" date above will be revised.