Last updated: July 31, 2026

At Ugly Duckli, your privacy matters. This Privacy Policy explains how personal data is collected, used, shared and protected when you visit our website, contact us, place an order or participate in an activity.

1. Who is responsible for your personal data?

The data controller is:

Rikke V. Stoltz, trading under the name Ugly Duckli
Yrsavej 6
2000 Frederiksberg
Denmark
Email: info@uglyduckli.com
Telephone: +45 61 42 61 56

2. What personal data do we collect?

Depending on how you interact with Ugly Duckli, we may collect:

  • Your name, email address, telephone number and postal address.
  • Order information, purchased products, delivery information and payment status.
  • Messages and other information you provide when contacting us.
  • Newsletter subscriptions and consent preferences.
  • Information connected with workshops, talks or private experiences.
  • Technical information such as IP address, browser, device, pages visited and cookie preferences.

Full payment card details are handled securely by the relevant payment provider and are not available to Ugly Duckli.

3. Why do we use your personal data?

We process personal data for the following purposes and legal bases:

  • Orders and customer service: To process your order, receive payment, arrange delivery, handle returns and respond to questions. The legal basis is the performance of a contract or steps taken before entering into a contract, Article 6(1)(b) of the GDPR.
  • Legal obligations: To retain information required under applicable tax, bookkeeping or consumer legislation. The legal basis is Article 6(1)(c) of the GDPR.
  • Website operation and security: To operate, protect and improve the website, prevent misuse and understand general website performance. The legal basis is our legitimate interest, Article 6(1)(f) of the GDPR. Non-essential cookies and analytics are only used where the required consent has been provided.
  • Newsletters and marketing: To send newsletters or marketing communications when you have actively subscribed. The legal basis is your consent, Article 6(1)(a) of the GDPR. You may withdraw your consent at any time.
  • Workshops, talks and experiences: To administer your participation, communicate practical information and provide the agreed activity. The legal basis is normally Article 6(1)(b) of the GDPR.

4. Who may receive your personal data?

We do not sell your personal data. We may share necessary information with trusted service providers that help us operate the website and fulfil your request or order, including:

  • Payment providers, such as Stripe.
  • Delivery and logistics providers, such as PostNord and Shipmondo.
  • Website hosting, WooCommerce, email and technical service providers.
  • Newsletter providers, such as MailerLite, if you subscribe.
  • Analytics and cookie providers, where you have given the required consent.
  • Professional advisers or public authorities where disclosure is required by law.

Service providers may only process personal data as necessary to provide their services and in accordance with applicable data protection requirements.

5. Transfers outside the EU and EEA

Some service providers may process personal data outside the European Union or European Economic Area. Where this occurs, we use providers that rely on a recognised adequacy decision, the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.

You may contact us if you would like more information about the safeguards used for an international transfer.

6. How long do we keep your data?

We retain personal data only for as long as necessary for the purpose for which it was collected:

  • Order and payment records are retained for the period required by applicable tax and bookkeeping rules.
  • Customer enquiries are normally deleted when they are no longer needed, generally within 12 months, unless an ongoing matter or legal requirement requires longer retention.
  • Newsletter information is retained until you unsubscribe or withdraw your consent. A limited record may be kept to ensure that you are not contacted again.
  • Information relating to disputes, returns or legal claims may be retained until the matter and any relevant limitation period have ended.
  • Cookie and analytics information is retained according to the periods stated in the relevant cookie settings or provider information.

7. Cookies and analytics

The website uses necessary cookies to provide basic functionality. Analytics, marketing or other non-essential cookies are only used where you have provided the required consent.

You can review or change your choices through the website’s cookie settings. You can also delete cookies through your browser.

8. Your data protection rights

Subject to the conditions in applicable data protection law, you may have the right to:

  • Request access to your personal data.
  • Have inaccurate personal data corrected.
  • Request deletion of your personal data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests or direct marketing.
  • Receive certain personal data in a portable format.
  • Withdraw your consent at any time, without affecting processing that took place before the withdrawal.

To exercise your rights, email info@uglyduckli.com. We may need to verify your identity before responding. We will normally respond within one month.

9. Automated decision-making

Ugly Duckli does not use your personal data for automated decisions that produce legal or similarly significant effects.

10. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. However, no internet transmission or storage system can be guaranteed to be completely secure.

11. Complaints

If you have concerns, you are welcome to contact us first so that we can try to resolve the matter.

You also have the right to complain to the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
Website: www.datatilsynet.dk

12. Changes to this Privacy Policy

This Privacy Policy may be updated when our services, providers or legal obligations change. The current version and its update date will always be available on this page.

13. Contact

If you have any questions about this Privacy Policy or the use of your personal data, please contact:

Rikke V. Stoltz, Ugly Duckli
Email: info@uglyduckli.com
Telephone: +45 61 42 61 56
Address: Yrsavej 6, 2000 Frederiksberg, Denmark