Privacy policy

Who is responsible

CDL Trading ApS, Bjørnkærvej 3, 8783 Hornsyld, Denmark, CVR DK39200864, is the data controller for bjaf.com and our country sites. Questions about your data: support@bjaf.com.

What we collect and why

  • When you buy: name, delivery and billing address, email, phone, order and payment status. To deliver your order, handle returns and complaints, and keep our accounts. Legal basis: contract and legal obligation (GDPR art. 6(1)(b) and (c)). We never see your full card details.

  • When you return something: what you return, your reason, and any photos you upload. To process the return and refund you. Legal basis: contract.

  • When you sign up for emails or take the supplement quiz: your email, your dog's name, age, size, breed and needs, and what you browse and buy. To send you relevant emails. Legal basis: consent (art. 6(1)(a)); unsubscribe in any email.

  • When you visit the site: IP address, device, pages viewed. Necessary cookies on our legitimate interest (art. 6(1)(f)); statistics and marketing only with your consent. See the cookie policy.

  • When you contact us or leave a review: what you send us, and your review with your name as you choose to show it.

We don't make automated decisions with legal effects for you, and we don't personalise prices.

Who we share it with

We only share data with companies that help us run the shop, under data processing agreements:

  • our webshop and payment providers

  • warehouse, shipping and return services, and the carriers that deliver your parcel

  • our tools for emails, reviews and customer service

  • third-party analytics and advertising partners, only with your consent

We keep a current list of these companies. Email support@bjaf.com and we'll send it to you.

Some of these companies are in the United States or process data there. Transfers then rely on the EU-US Data Privacy Framework or the EU Commission's Standard Contractual Clauses. You can ask us for a copy. We also share data when the law requires it, for example with tax authorities. We never sell your data.

How long we keep it

Orders and accounting: 5 years from the end of the financial year (Danish Bookkeeping Act). Return photos: deleted 12 months after you upload them. Newsletter data: until you unsubscribe. Customer service emails: up to 3 years. Cookies: as set out in the cookie policy.

Your rights

You can ask to see, correct or delete your data, restrict or object to how we use it, and get it in a portable format. You can withdraw consent at any time. Email support@bjaf.com, and we'll answer within one month. You can also complain to the Danish Data Protection Agency (Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, datatilsynet.dk) or the authority in your own country.

Children

Our site isn't aimed at children, and we don't knowingly collect data from anyone under 15.