Legwork ApS Niels Ebbesens Vej 11 Stuen th. 1911 Frederiksberg Denmark CVR: 45848647 Email: info@legwork.dk We operate a website with content and a webshop based on WooCommerce, including subscription-based products.

Information you provide directly (e.g. name, email address, billing and shipping address, payment details). Technical data (e.g. IP address, browser type, device, usage statistics). Order and subscription data (orders, renewals, cancellations, payment status). Cookies and similar technologies (see section 7).

• To process orders and subscriptions.
• To manage payments and prevent fraud.
• To communicate with you regarding orders, subscriptions or support requests.
• To improve website performance and user experience.
• For analytics and marketing purposes (only with consent, where required).

Legal basis for processing
Processing of personal data is based on one or more of the following legal grounds under Article 6 of the GDPR: performance of a contract, compliance with a legal obligation, legitimate interests, and consent where required.

We only share personal data when necessary and only with trusted third parties, including: E-commerce platform: WooCommerce (by Automattic)
https://automattic.com/privacy/ Hosting and security: SiteGround
https://www.siteground.com/privacy.htm Analytics and marketing services:
Google (Analytics, Tag Manager) – https://policies.google.com/privacy
Meta (Facebook / Instagram) – https://www.facebook.com/privacy/policy Embedded media:
Vimeo – https://vimeo.com/privacy Payment providers:
Stripe – https://stripe.com/privacy
Vipps MobilePay – https://vippsmobilepay.com/en-DK/privacy-policy

Payment providers process payment information as independent data controllers. We do not store full card details or payment credentials on our servers.

We never sell your personal data.

Payments and recurring subscriptions are handled via WooCommerce and WooCommerce Subscriptions.

We use the following payment providers:

• Stripe – https://stripe.com/privacy
• Vipps MobilePay – https://vippsmobilepay.com/en-DK/privacy-policy

When you complete a purchase or subscription, payment information is transmitted securely and processed directly by the selected payment provider. We do not have access to or store sensitive payment data such as full card numbers.

Each payment provider acts as an independent data controller for payment-related data.

Some third-party services (e.g. Google, Meta, Vimeo and Stripe) may process data outside the EU/EEA, including in the United States.

Such transfers are based on the EU Commission’s Standard Contractual Clauses (SCC).

• Essential cookies: website functionality, security, cart and checkout.
• Analytics cookies: traffic and usage statistics (e.g. Google Analytics).
• Marketing cookies: advertising and remarketing (e.g. Meta Pixel).
  Embedded content: Vimeo.

You can manage or withdraw consent via the cookie settings on the website.

• Order and accounting data: minimum 5 years in accordance with Danish bookkeeping law.
• Customer accounts and subscriptions: stored until deletion or termination.
• Comments and user-generated content: stored indefinitely unless removed.

• Right of access to your personal data.
• Right to rectification or erasure.
• Right to restriction or objection to processing.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Danish Data Protection Authority (Datatilsynet).

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

We may update this privacy policy from time to time. Any changes will be published on this page with an updated revision date.