Privacy policy
ByLykke ApS is the data controller for the personal data we process about you. We treat your data confidentially and in accordance with the GDPR.
What we collect
Name, email, address and payment information are processed solely to complete and deliver your order.
Sign in with Google
If you choose to sign in or create an account with Google, we process the Google user data described below. Our use complies with the Google API Services User Data Policy, including the Limited Use requirements.
Data we access
We only access your basic Google profile: your name, email address and Google account ID. We do not request access to any other Google services (e.g. Gmail, Drive, contacts or calendar).
How we use the data
The information is used solely to create and recognise your customer account, sign you in and link your orders to your account. We do not use it for advertising or profiling.
Sharing of data
We do not sell or share your Google user data with third parties for their own purposes. Data is processed only by us and by the data processors necessary to run the shop (e.g. hosting and email delivery), who act on our instructions under data-processing agreements.
Storage and protection
Your data is stored securely in our database behind access control and an encrypted connection (HTTPS). We never store your Google password; we only receive the profile information mentioned above via Google's secure login.
Retention period and deletion
We retain your account information for as long as you have an active account. You can request deletion of your account and your Google user data at any time by writing to lykke@bylykke.com. We delete your data without undue delay unless we are legally required to retain certain information (e.g. accounting records).
Google Analytics
If you consent to statistics, we use Google Analytics to understand how our shop is used — for example which pages are visited and where visitors come from. We use the figures to improve the shop and only ever see them in aggregate.
Google Signals
With your consent to marketing, we have also enabled Google Signals. This means Google may associate information about your visit with your Google account, if you are signed in and have ad personalisation switched on. It gives us statistics on visitors' age, gender and interests, and lets us recognise visits across devices.
We receive this information solely in aggregated, anonymised form. We cannot see which details belong to you as an individual, and Google withholds figures where the number of visitors is too low to ensure anonymity.
Legal basis and your choices
This processing is based on your consent under Article 6(1)(a) of the GDPR. You may withdraw your consent at any time via "Cookie settings" at the bottom of the page, after which we stop collecting data and the associated cookies are deleted. You can also opt out of ad personalisation directly in your Google account.
Google Ireland Limited acts as data processor for this processing. Transfers of data to countries outside the EU/EEA take place on the basis of the European Commission's standard contractual clauses.
Cookies we use
Below you can see the cookies and similar technologies we use, grouped by category. You can change your consent at any time via "Cookie settings" at the bottom of the page.
| Name | Purpose | Duration |
|---|---|---|
| cart_id | Remembers your shopping cart between page views. | 30 days |
| customer_token | Keeps you signed in to your customer account. | 30 days |
| access_token | Login to the admin area (for shop administrators only). | Session |
| chat_token | Links you to your conversation in our live chat. | 30 days |
| bylykke_lang | Remembers your chosen language. | Persistent |
| bylykke_currency | Remembers your chosen currency. | Persistent |
| bylykke_consent | Remembers your cookie consent so you are not asked again. | Persistent |
| Name | Purpose | Duration |
|---|---|---|
| bylykke_session | Pseudonymous ID for our own first-party statistics. Set only after consent and deleted if you withdraw consent. | Persistent |
| _ga | Google Analytics: distinguishes visitors so we can see the number of users and visits. Only set after consent to statistics. | Up to 2 years |
| _ga_* | Google Analytics: keeps track of the individual visit (session) and the events that occur during it. | Up to 2 years |
| Name | Purpose | Duration |
|---|---|---|
| _ga (Google Signals) | Google Signals: allows Google to link the visit to your Google account so we can see aggregate statistics on age, gender and interests. Only set after consent to marketing. | Up to 2 years |
The cookies below are only set if you have consented to marketing. Other third-party widgets that may set cookies (e.g. Trustpilot) likewise only load after you give consent.