Privacy policy

Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains how Noctraaa ("we", "us" or "our") collects, uses, stores and shares personal information when you visit noctraaa.com, purchase our products, contact us or otherwise interact with our online store.

We are committed to handling personal information responsibly, transparently and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Who We Are

Noctraaa is an independent online store operated by Jonas Krongaard Hansen, who is responsible for the processing of personal information as described in this policy.

Store: Noctraaa

Website: https://noctraaa.com

Data controller: Jonas Krongaard Hansen

Email: noctraaa1@gmail.com

For privacy-related questions, requests or concerns, please contact us by email.

2. Personal Information We Collect

Depending on how you interact with Noctraaa, we may collect and process the following information:

Contact information: Name, email address, telephone number and billing or shipping address.
Order information: Products purchased, order history, transaction amounts, payment status and delivery details.
Customer communications: Messages, questions, complaints and other information you voluntarily provide when contacting us.
Technical information: IP address, browser type, device information and website interaction data.
Preferences: Marketing subscriptions, cookie preferences and other privacy choices.

We generally receive this information directly from you when you browse our store, place an order or contact us. Certain technical and transaction information may also be collected automatically through Shopify and relevant service providers.

Payments are handled by Shopify and the payment providers available at checkout. We do not need to store your full payment card details.

3. How and Why We Use Your Information

We process personal information only where we have an appropriate legal basis.

Processing and fulfilling orders

We use your information to accept payments, process purchases, arrange product manufacturing, organize delivery and handle returns, refunds and customer support.

Legal basis: Performance of a contract (GDPR Article 6(1)(b)).

Legal and accounting obligations

Certain transaction and order information may be retained to comply with applicable accounting, tax and consumer protection laws.

Legal basis: Compliance with a legal obligation (GDPR Article 6(1)(c)).

Store operation and security

We may process information to maintain our website, troubleshoot technical problems, prevent fraud, protect transactions and establish or defend legal claims.

Legal basis: Legitimate interests (GDPR Article 6(1)(f)), where applicable.

Marketing communications

If you choose to subscribe to marketing emails, we may send information about new products, collections, promotions and store updates.

Where consent is required, we send these communications only with your consent.

You may unsubscribe at any time using the unsubscribe link in our emails or by contacting us.

Legal basis: Consent (GDPR Article 6(1)(a)), where required.

Analytics and advertising

Depending on the services enabled on our website, technical and usage information may be used to understand website performance and improve the shopping experience.

Non-essential cookies and tracking technologies requiring consent will only be activated after valid consent has been obtained.

Legal basis: Consent where required, or legitimate interests where legally permitted.

4. Shopify

Noctraaa is hosted by Shopify, which provides the ecommerce infrastructure used to operate our online store.

Shopify processes personal information in connection with services such as:

Website hosting and operation
Shopping cart and checkout functionality
Order and transaction management
Payment-related services
Website security and fraud prevention
Customer accounts and shopping features, where available

Depending on the Shopify services and privacy settings enabled, Shopify may also process information about interactions with our store and other Shopify-powered services to provide improved shopping experiences, personalization, analytics or advertising-related features.

Information may be processed by Shopify and relevant service providers in different countries.

Shopify may process certain personal information independently in accordance with its own privacy policies.

You can learn more about Shopify's handling of personal information and available privacy rights here:

Shopify Consumer Privacy Policy: https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal: https://privacy.shopify.com

5. Contrado – Manufacturing and Fulfilment

Noctraaa uses Contrado Imaging Ltd, a UK-based manufacturing and fulfilment provider, to produce and deliver certain products.

When you purchase a product fulfilled by Contrado, we may share the information necessary to complete your order.

This may include:

Your name
Shipping address
Relevant contact information
Products ordered
Product specifications and order details

This information is shared for purposes such as manufacturing, packaging, delivery and resolving fulfilment-related issues.

We share only information reasonably necessary for these purposes.

Contrado may process information in accordance with its contractual obligations and applicable data protection laws.

For more information, please review Contrado's privacy policy:

https://www.contrado.com/privacy-cookies

6. Sharing Information With Third Parties

We may share personal information with trusted service providers where necessary to operate our store and provide our services.

These may include:

Shopify, for ecommerce infrastructure and related services.
Contrado, for manufacturing and order fulfilment.
Payment providers, for securely processing transactions.
Delivery companies, for transporting and delivering purchased products.
Technology providers, for maintaining the website and associated systems.
Professional advisers, where reasonably necessary for legal, accounting or similar purposes.
Public authorities, where disclosure is required by applicable law.

Depending on the features enabled, certain information may also be processed by providers of analytics, advertising or personalization services.

We do not independently sell customer contact lists or personal information to data brokers.

Some forms of advertising-related data sharing may be subject to additional legal requirements depending on the customer's location.

7. International Data Transfers

Some providers supporting Noctraaa operate outside the European Economic Area (EEA).

For example, Contrado is based in the United Kingdom, while Shopify and certain other service providers may process information internationally.

Where international transfers are subject to GDPR requirements, they must rely on an appropriate legal basis for the transfer.

Depending on the circumstances, this may include:

An adequacy decision issued by the European Commission.
Standard Contractual Clauses approved by the European Commission.
Other transfer mechanisms permitted under applicable data protection law.

You can contact us if you would like further information about relevant international transfers and safeguards.

8. How Long We Keep Your Information

We retain personal information only for as long as necessary for the purposes described in this policy, subject to applicable legal requirements.

Retention depends on the type of information and the reason it was collected.

Order and accounting records

Where Danish bookkeeping requirements apply, relevant accounting records are generally retained for five years after the end of the financial year to which they relate.

Customer service communications

Communications are retained for as long as reasonably necessary to resolve enquiries, manage orders or disputes and protect applicable legal rights.

Marketing information

Marketing contact information is generally retained while you remain subscribed. When you unsubscribe, we stop sending marketing emails and may retain limited information necessary to document your preferences and prevent further unwanted communications.

Technical and cookie data

Retention depends on the specific technology and service used, the relevant privacy settings and applicable legal requirements.

We may retain limited information for longer where necessary to comply with the law or establish, exercise or defend legal claims.

9. Your Privacy Rights

Depending on your location and applicable data protection law, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Rectification: Request correction of inaccurate or incomplete information.
Erasure: Request deletion of personal information where legally applicable.
Restriction: Request that we limit certain processing activities.
Objection: Object to processing based on legitimate interests, including direct marketing.
Data portability: Request certain personal information in a structured, commonly used and machine-readable format.
Withdraw consent: Withdraw previously provided consent at any time.

Withdrawal of consent does not affect processing that was lawful before withdrawal.

Some requests may be limited by legal obligations, including mandatory accounting record retention.

To exercise your rights, contact:

noctraaa1@gmail.com

We will respond without undue delay and generally within one month, in accordance with applicable GDPR requirements.

We may request reasonable verification of your identity before disclosing or modifying personal information.

10. Cookies and Tracking Technologies

Noctraaa uses Shopify's ecommerce platform, which may use cookies and similar technologies to support website functionality.

These technologies may include:

Essential cookies

Used for functions such as shopping carts, checkout, security and maintaining website preferences.

Analytics cookies

Where enabled, these help us understand how visitors interact with the website and how the store performs.

Marketing and advertising cookies

Where enabled, these may support advertising measurement, personalization or relevant marketing activities.

Where legally required, non-essential cookies and similar technologies are used only after obtaining valid consent.

You can manage or withdraw your consent through the privacy or cookie controls made available on the website.

You may also manage cookies through your browser settings, although disabling essential cookies can affect store functionality.

11. Children's Privacy

Noctraaa is a general online store and is not specifically directed toward children.

We do not knowingly use children's personal information for purposes prohibited by applicable data protection laws.

If you believe that personal information relating to a child has been collected or processed unlawfully, please contact us so that we can review the matter and take appropriate action.

12. Data Security

We take reasonable steps to protect personal information against unauthorized access, loss, misuse and disclosure.

Our ecommerce infrastructure is provided by Shopify, which maintains security measures for its platform and associated services.

We also rely on relevant service providers to implement appropriate security measures for the information they process.

However, no internet-based service can guarantee absolute security.

13. Complaints

If you have concerns about how Noctraaa processes personal information, please contact us at:

noctraaa1@gmail.com

We will review your enquiry and respond as appropriate.

If you are located in Denmark, you also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

Website: https://www.datatilsynet.dk

Depending on your location, you may also have the right to contact another competent data protection supervisory authority.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technologies, service providers or applicable legal requirements.

Any updated version will be published on noctraaa.com together with its latest revision date.

We encourage visitors to review this policy periodically.

15. Contact

For questions, concerns or requests relating to this Privacy Policy or the processing of personal information, please contact:

Noctraaa

Operated by: Jonas Krongaard Hansen