Privacy Policy

This policy explains how Burralli collects, uses, shares and protects personal data when you visit burralli.com, contact us, create an account or place an order.

Last updated: 17 September 2026

Privacy Policy

Questions about your data?
Email us at
hello@burralli.com
or call
+45 29 24 89 36

1. Who is responsible for your data?

Burralli is operated by Burralli ApS, which is the data controller for the personal data described in this policy.

This policy applies when you use our webshop, contact customer service, sign up for marketing or otherwise interact with Burralli.

2. Personal data we collect

The data we process depends on how you use our services. It may include:

  • Identity and contact data: name, billing and delivery address, email address and telephone number.
  • Order and transaction data: products, order value, currency, delivery method, payment status, transaction reference, returns, refunds and correspondence about your purchase. Payment providers process full card details; Burralli does not receive or store your complete card number.
  • Account data: login details, order history and saved preferences if you create an account.
  • Communications: messages sent by email, contact form or chat, and information you provide in connection with customer service or a complaint.
  • Technical and usage data: IP address, device and browser information, visited pages, cookie identifiers and consent choices.
  • Marketing data: newsletter subscription, marketing preferences and engagement with messages or advertisements.

We normally receive the data directly from you, automatically from your device, or from payment and delivery providers involved in your order.

3. Why we use your data

We process personal data only when we have a lawful reason to do so:

  • To process and deliver orders, handle payment, returns and complaints: necessary to perform our contract with you (GDPR Article 6(1)(b)).
  • To comply with accounting, tax, consumer and other legal requirements: necessary to comply with a legal obligation (Article 6(1)(c)).
  • To operate and secure the webshop, prevent fraud, improve our service and document claims: based on our legitimate interests in running a safe and efficient business (Article 6(1)(f)).
  • To send newsletters and use non-essential analytics or advertising technologies: based on your consent where consent is required (Article 6(1)(a)). You can withdraw consent at any time.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

4. Who receives your data?

We share data only when it is necessary for the purposes described above. Recipients may include:

  • hosting, IT, webshop and security providers that operate burralli.com;
  • payment providers selected at checkout, including providers supporting card and MobilePay payments;
  • warehouses, delivery companies and carriers such as GLS;
  • email, customer service, chat and internal collaboration providers, including Slack. Limited order information may be shared in restricted internal channels so our team can process orders;
  • analytics, advertising and social-media providers such as Google and Meta, but only where the required consent has been given;
  • accountants, professional advisers, public authorities or courts where required by law or necessary to establish, exercise or defend legal claims.

We do not sell personal data. Some providers may process data outside the European Economic Area. Where this happens, we use a lawful transfer mechanism, such as an EU adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where required.

5. Cookies, analytics and marketing

We use necessary cookies and similar technologies to make the webshop work, remember your basket, maintain security and store your privacy choices. These technologies are used without consent only where they are strictly necessary.

With your consent, we may also use analytics and marketing technologies to understand how the website is used, measure campaigns and show relevant advertising. You can refuse or withdraw consent at any time through the cookie settings on the website or by deleting cookies in your browser. Withdrawing consent does not affect processing carried out before the withdrawal.

If you subscribe to our newsletter, we use your email address and marketing preferences to send it. Every marketing email includes an unsubscribe link. We stop sending marketing messages when you unsubscribe, while retaining the minimum information needed to respect your choice.

6. Retention and security

We retain personal data only for as long as it is needed for the purpose for which it was collected or to meet legal requirements:

  • order, invoice and accounting records are generally retained for five years from the end of the relevant financial year;
  • account data is retained while the account is active and is then deleted or anonymised when it is no longer needed, unless another retention duty applies;
  • customer-service correspondence is normally retained for up to three years after the matter is closed where needed to document the relationship or handle possible claims;
  • newsletter data is retained until you unsubscribe, after which we keep only the information necessary to document and respect the opt-out;
  • cookie and analytics data is retained for the periods stated in the relevant cookie settings or by the provider.

Longer retention may be necessary in the event of a dispute, suspected fraud or another legal requirement. We use appropriate technical and organisational safeguards, including access controls, encryption in transit, updates, backups and restricted staff access. No online service can guarantee absolute security.

7. Your rights and complaints

Subject to the conditions and exceptions in data-protection law, you may ask us to:

  • provide access to the personal data we hold about you;
  • correct inaccurate or incomplete data;
  • delete data or restrict how it is used;
  • provide data you gave us in a portable format;
  • stop processing based on legitimate interests, including direct marketing; or
  • record the withdrawal of your consent.

Send your request to hello@burralli.com. We may ask for information needed to verify your identity. We respond without undue delay and normally within one month.

You may complain to the Danish Data Protection Agency (Datatilsynet) or, where applicable, the supervisory authority in your country of residence.

Changes to this policy: We may update this policy when our services or legal obligations change. The current version and its update date will always be available on this page.