Privacy policy
Last updated: 30 September 2026
Who is responsible?
AM Ecom ApS, CVR 40055436, Viborgvej 159A, 8210 Aarhus V, Denmark, is the controller for personal data processed through this website and our customer communications. Write to hello@balanik.com about privacy or your rights.
What we process and why
- Website requests: technical information such as IP address, requested URL, browser details and timestamps may be processed by our hosting and security services to deliver and protect the site. Our legal basis is our legitimate interest in operating a reliable, secure website.
- Enquiries and support: we process your name, email address, message and any relevant order or diagnostic information you choose to provide to answer you and provide support. The basis is taking steps at your request before a contract, performing a contract, or our legitimate interest in responding to general enquiries.
- Orders and records: where you purchase, we process contact, billing, order and payment-status information to fulfil the order and meet accounting obligations. The bases are contract performance and legal obligation. Payment provider information will be provided as part of the purchase flow; do not email card details.
Providing contact details is necessary for us to reply. Billing information required for an order will be identified before purchase. We do not use this website to make automated decisions with legal or similarly significant effects about you.
Cookies, analytics and ads
The website uses WordPress and WooCommerce. Necessary cookies keep sign-in, the cart and checkout working. We also use Google Analytics to see how the site is used, Google Ads to measure which ad clicks lead to a purchase (both provided by Google Ireland Limited), and WooCommerce order attribution to record which website or campaign brought a buyer.
- If you visit from the EU, the EEA, the UK or Switzerland, these only run after you accept them in the cookie banner. The legal basis is your consent (GDPR Art. 6(1)(a)), and you can withdraw it at any time on our cookies page.
- For visitors elsewhere they run by default, unless your browser sends a Do Not Track or Global Privacy Control signal. The basis is our legitimate interest in measuring and improving our marketing (Art. 6(1)(f)).
Google may process this data in the United States under the EU–US Data Privacy Framework. The demo uses fictional store data and browser storage for its interactive behaviour; it does not connect to your store. See our cookies and local storage page for every cookie, what it does and how long it’s kept.
Who can receive data?
Our service providers may process data on our behalf where needed for hosting, content delivery, security, email, support and accounting. This site is hosted with Rocket.net and uses its hosting and content delivery infrastructure. Card payments are processed by Stripe (Stripe Payments Europe, Limited), which receives your payment details and the information needed to prevent fraud. Google Ireland Limited receives data for analytics and ad measurement as described above. Cloudflare, part of our hosting’s content delivery network, also tells us your country so we can show the right cookie choice. Data may also be disclosed to advisers or authorities where necessary to meet a legal obligation or protect legal rights.
Where a service involves transfer outside the EEA, the transfer must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. Contact us for information about safeguards relevant to your data.
How long do we keep it?
We retain enquiries and support correspondence for as long as necessary to answer the request, provide the agreed service and resolve related issues. We review continued need and delete or anonymise information when it is no longer required. Danish accounting records are generally retained for five years from the end of the financial year they concern. Records may be retained longer where needed for an ongoing dispute or legal obligation. Technical log retention is governed by the hosting and security service settings and operational need.
Data from your own store
This notice concerns the Balanik website and our customer relationship. You remain responsible for the personal data in your store and connected accounts. Installing a plugin does not make your customer database public on this website. If you send support material, minimise or redact customer data. Do not send credentials or API secrets by email.
Your rights
Subject to applicable conditions, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. Contact us using the email above. We may need proportionate information to verify your identity.
You can complain to Datatilsynet, the Danish Data Protection Agency, or your local supervisory authority.
Updates
We update this notice when our practices change. The date above shows the latest revision.