N'goodso ApS

This privacy policy has been established by N'goodso ApS, CVR no. 44780860.

1. Information about the processing of personal data

Your data security is important to us, and we therefore attach great importance to the responsible handling of your personal data. Below you can read how we process personal data about you when we act as data controller. You can also read about the rights you have in connection with our processing.

2. N'goodso ApS ' role as data controller

In connection with the operation of our company, we process a number of personal data. We do this so that we can serve you in the best possible way. We collect and process mainly ordinary (non-sensitive) personal data.

If you have any questions about our processing of your personal data, you can contact N'goodso ApS here:

Email: kontakt@ngoodso.dk

3. What personal data we collect and the purpose

We process personal data about you in a number of different situations. Read more about our processing in the different situations below.

3.1 Visitors to N'goodso ApS ' websites and users of N'goodso ApS ' online services

When you visit N'goodso ApS' websites (e.g. https://ngoodso.dk/) or use our other online services (e.g. on https://www.instagram.com/ngoodso/), N'goodso ApS can process information about your IP address as well as information about your computer, device and browser.

We also process information about your visit (e.g. information about how you access our websites, how you navigate around them, which pages you visit, content you view, your searches, advertisements you have seen, etc.). This personal information is collected through cookies, log files and other technologies.

We also process personal data that you provide to us in connection with your use of the website or our online services, for example when you use our online contact form, including your name, email address, and other information you provide to us.

We use your personal information to make relevant products, deliveries, services and offerings available to you and to improve your experience of our websites and online services and the services we offer. We also use the personal information to show you content on our and other sites based on your activities and preferences, and to limit the number of times you see the same content.

Our basis for processing is our legitimate interests in making our website (and online services) available to you (GDPR Article 6(1)(f)) or your consent (GDPR Article 6(1)(a) and Cookie Order Section 3).

We store personal data collected in connection with your visit to our website for as long as the cookie lasts or until you withdraw any consent.

3.2 Customers at N'goodso ApS

When you are a customer at N'goodso and purchase via our webshop, personal data about your name, address, email address, your purchases, payment information, as well as information from publicly available sources and other information that you provide to us are processed.

We process personal data for the purpose of fulfilling the agreement with our customers, in order to provide the services, invoice, keep statistics and carry out quality management, as well as to maintain our customer register and provide general service, marketing and sales to our customers.

Our basis for processing is the agreement with you (GDPR Article 6(1)(b)) or our legitimate interests in managing your information as a customer of ours (GDPR Article 6(1)(f)).

3.3 Recipients of marketing

When you receive marketing, including newsletters from N'goodso ApS, we process personal data about your name and email address. We also process information about your use of the marketing we send to you (including, for example, whether you have opened an email from us, whether the email has been read, and which links you have opened), as well as information that you otherwise provide to us.

We process your personal data for the purpose of marketing our company and its services, creating and administering your subscription to marketing. We use the personal data about your preferences and usage to understand how our customers receive our marketing and to improve marketing to you and our other customers in the future.

We will only send you marketing material by email, text message or other electronic channel when we have obtained your consent to do so, when this is required according to the rules of the Marketing Act.

We also use personal information about you to show you content on our and other sites based on your activities and preferences, to limit the number of times you see the same content, and to measure the effectiveness of our content and marketing. For this purpose, we may upload your email address to advertising tools such as Google or Facebook for the purpose of sending targeted marketing.

Our basis for the processing is our legitimate interests in fulfilling your wish to receive marketing from us, to which you have consented under the Marketing Communications Act (General Data Protection Regulation Article 6(1)(f)).

We will store your personal data until we no longer need to process it for the purposes above. If you unsubscribe from newsletters, the sending of newsletters will cease immediately, but documentation of the original consent will be stored for 2 years, after which it will be deleted.

4. Sharing your personal information with others

N'goodso ApS may disclose your personal information to other suppliers and/or service providers in connection with the normal operation of our business .

N'goodso ApS may also disclose your personal data to a public authority in situations where we are specifically obliged to disclose your personal data pursuant to legislation and notification obligations to which we are subject.

N'goodso ApS also entrusts your personal data to data processors. Our data processors only process your personal data for our purposes and on our instructions.

5. Storage, data integrity and security

When your personal data is no longer needed, we will ensure that it is deleted in a secure manner.

It is our policy to protect personal data by taking adequate technical and organizational security measures.

We have implemented security measures to ensure data protection for all personal data we process. We regularly conduct internal follow-ups on the adequacy and compliance of policies and measures.

6. Your rights

As a data subject, you have a number of rights under the General Data Protection Regulation. If you would like to exercise your rights, please contact us.

You can – unconditionally and at any time – withdraw any consent. This can be done by sending us an email (see email above). Withdrawing your consent will not have any negative impact. However, it may mean that we will not be able to fulfill specific requests from you in the future. Withdrawing your consent will not affect the lawfulness of processing based on consent before it is withdrawn. Furthermore, it will not affect any processing carried out on another lawful basis.

Your rights also include the following:

• Right to access : You have the right to access the personal data that we process about you.

• Right to rectification : You have the right to have inaccurate personal data about you corrected and incomplete personal data completed.

• Right to erasure (right to be forgotten) : In special cases, you have the right to have personal data about you deleted before the time when we would normally delete your personal data.

• Right to restriction of processing : In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the personal data – with the exception of storage – with your consent, or for the establishment, exercise or defence of legal claims, or to protect a person or important public interests.

• Right to object : In certain cases, you have the right to object to our processing of your personal data, and always if the processing is for the purpose of direct marketing.

• Right to data portability : In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have this personal data transferred from one data controller to another.

• Right to lodge a complaint : You can lodge a complaint with the Danish Data Protection Agency at any time about our processing of personal data. See more at www.datatilsynet.dk , where you can also find further information about your rights as a data subject.

7. Updating our privacy policy

From time to time, it will be necessary for us to update this Privacy Policy. We regularly review our Privacy Policy to ensure that it is up-to-date, accurate and in accordance with applicable laws and principles for the processing of personal data. We will publish new versions on our website.

This policy is effective from August 1, 2025.