Privacy policy

Tinct ApS (“Tinct”, “we”) is the controller of your personal data. We are a company registered in Denmark, at Jægersborggade 41, 2200 Copenhagen N, Denmark.

For anything about your data, email privacy@tinct.example. We reply within 30 days, usually much sooner.

We don’t buy data about you, we don’t build advertising profiles and we don’t sell or rent personal data — to anyone, for anything.

We share only what each service needs to do its job for us, under contracts that require them to protect it and use it for nothing else:

1. 1Payment provider — to take and refund payments.
2. 2Couriers (for example DHL and national postal services) — your name, address and phone to deliver parcels.
3. 3Our recycling partner — your name and address on the empties-back label.
4. 4Email service — to send order updates and, if you signed up, our letters.
5. 5Hosting and infrastructure providers — to run the store securely.
6. 6Authorities — only when the law requires it.

We are based in the EU. Where a provider handles data outside the EU or UK (for example a US courier for US deliveries), we rely on an adequacy decision or the European Commission’s Standard Contractual Clauses to keep your data protected to the same standard.

We use only what the store needs to work. There are no advertising or tracking cookies, so we don’t ask you to accept any.

Browser storage never leaves your device. You can clear it at any time in your browser’s settings.

Wherever you live, you can ask us to:

1. 1Show you the personal data we hold about you and send you a copy.
2. 2Correct anything that’s wrong.
3. 3Delete your data, unless we must keep it (for example invoices for tax).
4. 4Stop or limit how we use it, or object to a use based on our legitimate interest.
5. 5Send your data to you or another company in a common format.
6. 6Withdraw consent — for example, unsubscribe from letters with one click.

California residents: we do not sell or share personal information as defined by the CCPA/CPRA, and we don’t use sensitive personal information. You have the rights to know, delete and correct, and we will never treat you differently for using them.

To use any right, email privacy@tinct.example. We may ask you to confirm your identity first.

The store runs over HTTPS. Passwords are stored hashed, sign-in and cart cookies can’t be read by scripts, and only the people who need it can see order data. If a breach ever puts your data at risk, we will tell you and the authorities as the law requires.

Our store is for adults. We don’t knowingly collect data from anyone under 16. If you think a child has given us data, tell us and we’ll delete it.

When we change this policy we update the date at the top. If a change affects how we use data you’ve already given us, we’ll email you before it takes effect.

Please contact us first — we’d like the chance to put it right. You can also complain to a data protection authority: in Denmark Datatilsynet (datatilsynet.dk), in the UK the Information Commissioner’s Office (ico.org.uk), or the authority where you live.