Privacy policy

Privacy Policy

Last updated: 09/05/2026

Virion Apparel ("we", "us", or "our") operates this website and online store using Shopify. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, place an order, contact us, or otherwise interact with our services. You can also see Shopify's consumer privacy policy at https://www.shopify.com/legal/privacy/consumers.

We are committed to handling personal data responsibly and in accordance with applicable data protection laws, including the EU General Data Protection Regulation ("GDPR") and Danish Data Protection legislation. 

1. Data Controller

Virion Apparel is the data controller responsible for your personal data.

Contact information:

Virion Apparel
Gothersgade, 41A, 1, Copenhagen
Denmark

Email: contact@virionapparel.com

2. Personal Data We Collect

Depending on how you interact with our store, we may collect the following categories of personal data:

Information you provide directly

  • name

  • billing and shipping address

  • email address

  • phone number

  • payment and transaction details

  • account information if you create an account

  • communications you send to us

Information collected automatically

When you use our website, certain technical information may be collected automatically, including:

  • IP address

  • browser type

  • device information

  • pages visited

  • referral information

  • website interaction data

This information may be collected using cookies or similar technologies.

3. How We Use Your Personal Data

We only process personal data where we have a lawful basis to do so under GDPR.

Order fulfillment

We process your personal data to:

  • process and deliver orders,

  • provide customer support,

  • manage payments,

  • send order confirmations and shipping updates,

  • handle returns and refunds.

Legal basis:

  • performance of a contract (GDPR Article 6(1)(b))

  • legal obligations (GDPR Article 6(1)(c))

Customer communication

We use your information to respond to inquiries and provide support.

Legal basis:

  • legitimate interests (GDPR Article 6(1)(f))

  • contract performance where applicable

Fraud prevention and security

We may process personal data to:

  • prevent fraud,

  • detect abuse,

  • secure our website and services.

Legal basis:

  • legitimate interests (GDPR Article 6(1)(f))

Marketing communications

We only send marketing emails if you have explicitly opted in to receive them.

You may unsubscribe at any time using the unsubscribe link included in marketing emails or by contacting us directly.

Legal basis:

  • consent (GDPR Article 6(1)(a))

Analytics and website functionality

We may use limited analytics and cookies to understand website usage and improve functionality.

Where legally required, non-essential cookies and analytics technologies are only used with your consent.

Legal basis:

  • consent (GDPR Article 6(1)(a))

  • legitimate interests for strictly necessary website functions

4. Cookies

Our website uses cookies and similar technologies to ensure the website functions properly and, where permitted, to analyze traffic and improve user experience.

Our website uses the consent management platform Cookiebot to manage user consent preferences and to help prevent non-essential cookies and tracking technologies from loading prior to user consent where required by applicable law.

Essential cookies required for website functionality, security, fraud prevention, and checkout operations may still be used without consent where permitted under applicable law.

You can manage your cookie preferences at any time through the Cookiebot preferences widget (bottom left of screen) or through browser settings.

Analytics, advertising, personalization, and other non-essential cookies are only activated after consent has been provided where legally required.

5. Sharing Personal Data

We share or make personal data available where necessary to operate our business, provide our services, and enable platform functionality through Shopify and other service providers.

Shopify Network Intelligence and Enhanced Services

Virion Apparel may operate through Shopify with Shopify Network Intelligence and Enhanced Services enabled. This means that Shopify may process personal data collected from your interaction with our store to provide both Shopify and us with enhanced services. These services may include:

(i) providing a more personalized shopping experience,
(ii) delivering more relevant advertising and marketing content,
(iii) analyzing how customers interact with our store and advertising campaigns.

Information about your activity as a customer on the Virion Apparel web store will be shared with Shopify as well as with third parties that might be located in other countries, in order to provide you and your customers with services, including but not limited to Enhanced Services.

You may object to or opt out of certain data processing activities by Shopify here:
https://privacy.shopify.com

We may also share personal data with the following categories of service providers:

- Shopify (website, ecommerce platform provider, and data processor; may process personal data for hosting, checkout, analytics, fraud prevention, personalization, advertising measurement, and Enhanced Services where enabled). The Shopify Data Processing Addendum (DPA) is available here:
https://www.shopify.com/legal/dpa

- payment processors

- shipping and logistics providers

- Printful (print-on-demand service for order fulfillment). Printful's data processing terms: https://www.printful.com/policies/data-processing-terms

- IT and hosting providers

- analytics and security providers where applicable

A full list of service providers is available upon request.

These service providers process personal data on our behalf under contractual obligations designed to protect your information.

We do not sell your personal data.

6. International Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we rely on legally recognized safeguards such as:

  • European Commission adequacy decisions,

  • Standard Contractual Clauses (SCCs),

  • or equivalent lawful transfer mechanisms.

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy, including legal, accounting, and tax obligations.

Examples include:

  • order and invoice records retained as required by applicable accounting laws,

  • customer support communications retained for operational purposes,

  • marketing consent records retained until consent is withdrawn.

When personal data is no longer required, it is securely deleted or anonymized where reasonably possible.

8. Your Rights Under GDPR

If you are located in the EU or EEA, you may have the following rights regarding your personal data:

  • right of access

  • right to rectification

  • right to erasure

  • right to restriction of processing

  • right to data portability

  • right to object to processing

  • right to withdraw consent at any time

  • right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at:

contact@virionapparel.com

You also have the right to file a complaint with:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
dt@datatilsynet.dk
www.datatilsynet.dk

9. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Third-Party Services and Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of third-party websites.

We encourage you to review their privacy policies before providing personal data.

11. Children's Privacy

Our products and services are not directed toward children, and we do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

The updated version will always be published on this page with the revised "Last updated" date.

13. Contact

If you have questions about this Privacy Policy or how your personal data is processed, please contact:

Virion Apparel
Address: Gothersgade, 41A,1, Copenhagen, Denmark

CVR: 46473434

Email: contact@virionapparel.com

Phone: +45 77174664