Privacy policy

Privacy Policy

Last updated: 13 June 2026

LRS ECOM B.V. (hereinafter "Concept Odense", "we", "us" or "our") attaches the highest priority to the protection of your personal data. This Privacy Policy describes how we collect, use, store, and protect your information when you visit concept-odense.com, place an order, or contact our customer service.

We process your personal data in accordance with the General Data Protection Regulation (GDPR, EU 2016/679) and applicable national legislation.

1. Data Controller

2. Personal Data Collected

We collect the following categories of information:

  • Identification data: first and last name.
  • Contact data: email address, telephone number, delivery and billing address.
  • Order data: ordered items, prices, purchase history, returns.
  • Payment data: processed directly by our payment provider (Shopify Payments, PayPal). We never store your full card details on our servers.
  • Technical data: IP address, browser type, operating system, pages visited, duration of visit, referring source.
  • Communication data: content of your correspondence with our customer service (email, contact form).
  • Marketing data: communication preferences, email open history (if you have given consent).

3. Purposes and Legal Basis

In accordance with Article 6 of the GDPR, we process your data for the following purposes:

  • Performance of a contract (Art. 6(1)(b)): processing and delivering your order, handling returns and refunds, order-related communication.
  • Legal obligations (Art. 6(1)(c)): retention of invoices and accounting documents, fraud prevention, responding to competent authorities.
  • Consent (Art. 6(1)(a)): sending marketing communications (newsletters, promotions), placing non-essential cookies, sharing data with marketing partners.
  • Legitimate interest (Art. 6(1)(f)): improving our website and services, securing the webshop, fraud prevention, anonymised statistical analyses.

4. Retention Periods

  • Order data: 10 years from the last transaction (accounting and tax obligations).
  • Account data: until your account is deleted or after 3 years of inactivity.
  • Marketing data: until consent is withdrawn or 3 years after the last contact.
  • Cookies: a maximum of 13 months.
  • Technical logs: 12 months.
  • Customer service data: 3 years after the last interaction.

5. Recipients and Data Processors

Your information may be shared with the following categories of recipients and data processors. This list is not exhaustive and may be updated as we add or remove services:

Platform and Payment

  • Shopify Inc. - hosting of the webshop, order management, payment processing (Shopify Payments).
  • Payment providers: PayPal, Shop Pay, Apple Pay, Google Pay and other gateways used at checkout.
  • TrackiPal: automatic synchronization of PayPal transactions and track-and-trace numbers.
  • Disputely / Chargeflow: management of chargebacks and payment disputes.

Email and SMS Marketing

  • Klaviyo: email and SMS marketing and segmentation (only with your consent).
  • SMSGo: SMS recovery of abandoned carts (only with your consent).
  • Yotpo: email and SMS campaigns, customer reviews.
  • Aftersell: post-purchase upselling and follow-up campaigns.

Analytics, Attribution, and User Behavior

  • Google Analytics / Google Ads: traffic analysis and advertising (only with cookie consent).
  • Microsoft Clarity: session recordings and heatmaps for UX improvement (only with cookie consent).
  • Propel Replays & Heatmaps: session recordings and user behavior analysis.
  • TrackBee: attribution and cross-channel marketing analysis.
  • wetracked.io: conversion tracking and ad attribution.

Advertising and Sales Channels

  • Meta (Facebook, Instagram): targeted advertising and social commerce (only with cookie consent).
  • Google & YouTube: shopping ads and video campaigns (only with cookie consent).
  • Pinterest: advertising and product pins.
  • Microsoft Advertising: Bing ads.

Customer Service

  • Help Scout: management of customer inquiries and support tickets.
  • SmartBot / Jack AI: AI assistance in customer communication.
  • Shopify Inbox: live chat with customer service.

Logistics and Delivery

  • International shipping carriers - for the delivery of your order.
  • ParcelWILL (Parcel Panel): track-and-trace and delivery notifications.

Public authorities - when required by law (tax authorities, judicial authorities).

All our data processors are contractually obligated to respect the confidentiality of your data and to process it only in accordance with our instructions, pursuant to Art. 28 GDPR.

6. International Data Transfers

Some of our data processors (Shopify, Google, Meta, Klaviyo) are located outside the European Union, primarily in the United States. The transfer is then based on:

  • The EU-U.S. Data Privacy Framework (DPF) for certified providers;
  • The EU Commission's Standard Contractual Clauses (SCCs);
  • Additional security measures (encryption, technical and organisational measures).

7. Your Rights

In accordance with Articles 15-22 of the GDPR, you have the following rights:

  • Right of access (Art. 15) - to obtain a copy of the information we process about you.
  • Right to rectification (Art. 16) - to have incorrect or incomplete information corrected.
  • Right to erasure (Art. 17) - "the right to be forgotten".
  • Right to restriction of processing (Art. 18) - to restrict the processing of your information.
  • Right to data portability (Art. 20) - to receive your information in a structured format.
  • Right to object (Art. 21) - to direct marketing or for legitimate reasons.
  • Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please contact us at info@concept-odense.com. We will respond within one month (extendable to three months for complex requests).

8. Complaint to a Supervisory Authority

If you believe that the processing of your personal data does not comply with the GDPR, you can lodge a complaint with the supervisory authority in your country of residence:

9. Data Security

We implement appropriate technical and organisational measures to protect your information:

  • SSL/TLS encryption of the entire website and purchase process.
  • Encrypted storage (AES-256) of sensitive information.
  • PCI-DSS compliance for payment processing via Shopify Payments.
  • Strict access control to customer data.
  • Regular backups and business continuity plan.
  • Notification of data breaches within 72 hours to the competent authorities and affected individuals, pursuant to Art. 33 of the GDPR.

10. Cookies and Similar Technologies

Our website uses cookies to ensure proper functionality, measure traffic, and personalise your experience. On your first visit, a banner allows you to accept, reject, or customise your preferences. You can change your choices at any time via your browser settings or by resetting the banner on our website.

Cookie categories used:

  • Strictly necessary cookies - shopping cart, session, security (no consent required).
  • Analytics cookies - Google Analytics (with consent).
  • Marketing cookies - Meta Pixel, Google Ads, Klaviyo (with consent).

11. Minors

Our services are not intended for persons under the age of 16. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with their information, please contact us at info@concept-odense.com, and we will delete it.

12. Marketing and Communication

We only send marketing emails (newsletters, promotions, news) to individuals who have given their explicit consent. You can unsubscribe at any time:

  • by clicking the "unsubscribe" link in each email;
  • by writing to us at info@concept-odense.com;
  • by changing your preferences in your customer account.

13. Changes to This Policy

We reserve the right to amend this Privacy Policy to adapt it to legislative, technical, or business developments. Significant changes will be indicated on this page and, if necessary, by email. The date of the last update is shown at the top of the document.

14. Related Documents

15. Contact

For any questions regarding this policy or the processing of your personal data: