Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how uStepper ApS ("we", "us", "our") collects, uses, discloses, and protects your personal data when you visit our website or purchase our products. We comply with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

1. Data Controller

uStepper ApS
Seglager 31
8370 Hadsten
Denmark
CVR: DK39103575
Email: contact@ustepper.com

If you have questions about how we process your personal data, or wish to exercise your rights, please contact us at contact@ustepper.com.

2. What Personal Data We Collect and Why

We collect and process personal data only for specific, explicit, and legitimate purposes. Below is an overview of the data we collect, the legal basis we rely on, and the purposes of processing.

Purpose	Data Collected	Legal Basis (GDPR Art. 6)
Processing and fulfilling orders	Name, email, address, phone, payment info	Contract performance (Art. 6(1)(b))
Customer support and inquiries	Name, email, order details, correspondence	Contract performance / Legitimate interest (Art. 6(1)(b)/(f))
Marketing emails (newsletter, promotions)	Email address, name	Consent (Art. 6(1)(a))
Website analytics and improvement	IP address, browser type, pages visited, device info	Consent (Art. 6(1)(a)) — via cookie consent
Advertising and retargeting	Cookies, usage data, interaction data	Consent (Art. 6(1)(a)) — via cookie consent

We do not sell your personal data to third parties.

3. Recipients of Your Data

We share your personal data with the following categories of recipients, only as necessary for the purposes described above:

• Payment providers: PayPal (Europe) — payment processing. No credit card details are stored on our servers.
• Shipping providers: PostNord, GLS, DHL — order delivery.
• Analytics services: Google Analytics (if you consent via cookie banner) — website usage analysis.
• Advertising platforms: Meta (Facebook) — targeted advertising (if you consent via cookie banner).
• IT service providers: One.com — web hosting.

All recipients are contractually bound to process data only on our instructions and to implement appropriate technical and organisational security measures.

4. International Transfers

PayPal (our payment processor) is based in the United States. PayPal is certified under the EU-US Data Privacy Framework, which the European Commission has determined provides an adequate level of protection for personal data transferred from the EU.

We do not currently use analytics or advertising tools that transfer data outside the EU/EEA. If we activate such tools in the future, we will ensure appropriate safeguards are in place before doing so.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Order data: 5 years from the end of the financial year (to comply with Danish accounting and tax law).
• Customer support correspondence: 2 years after the last contact.
• Marketing consent records: Until you withdraw your consent or unsubscribe.
• Website analytics data: 26 months (Google Analytics default).
• Cookie consent records: Stored in your browser until you clear them, or for a maximum of 12 months after your last visit.

When data is no longer needed, it is securely deleted or anonymised.

6. Your Rights Under the GDPR

As a data subject, you have the following rights regarding your personal data:

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your data ("right to be forgotten").
• Right to restriction (Art. 18): Request restriction of processing in certain circumstances.
• Right to data portability (Art. 20): Receive your data in a structured, commonly used format.
• Right to object (Art. 21): Object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent (Art. 7(3)): Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at contact@ustepper.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we have not processed your data in accordance with the GDPR:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
dt@datatilsynet.dk
www.datatilsynet.dk

7. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies. When you first visit our site, a cookie banner appears allowing you to choose which categories of cookies you accept:

• Essential: Required for the site to function (shopping cart, session management). No consent required.
• Preferences: Remember your settings for a better experience.
• Analytics: Help us understand how visitors use the site (e.g., Google Analytics).
• Marketing: Used for relevant advertising (e.g., Meta Pixel).

Non-essential cookies are only set after you have given your explicit consent via the cookie banner. You can change your preferences at any time by clicking "Cookie Settings" in the footer. For more details, please see our Cookie Settings.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• SSL/TLS encryption for all data transmitted via our website.
• Access controls limiting data access to authorised personnel only.
• Secure servers with firewalls and regular security updates.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., resellers, social media platforms). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make significant changes, we will notify you by email (if we have your email address) or through a notice on our website.

11. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

uStepper ApS
Seglager 31
8370 Hadsten, Denmark
Email: contact@ustepper.com