Privacy Policy

Last updated: May 15, 2026

This Privacy Policy explains how Oceano collects, uses, stores and protects personal information when you visit our website, purchase products, contact us, sign up for our newsletter or otherwise use our services.

For the purposes of data protection law, the data controller is:

M Oceano
Nis Thuesensvej 21, 6070 Christiansfeld
VAT/CVR number: 46206983

Email: help@oceano.dk

1. Personal information we collect

We may collect and process the following types of personal information:

• Name
• Email address
• Phone number
• Billing address
• Shipping address
• Order information
• Payment status and transaction information
• Customer account information, if you create an account
• Communication with us, including customer support inquiries
• Newsletter subscription status
• IP address, device information, browser information and website usage data
• Cookie and tracking preferences

We do not intentionally collect sensitive personal information.

2. How we collect personal information

We collect personal information when you:

• Place an order
• Create a customer account
• Contact us by email or through the website
• Sign up for our newsletter
• Browse or interact with our website
• Accept, reject or manage cookies
• Request a return, refund or customer support

Some information is collected directly from you. Other information is collected automatically through Shopify, cookies and similar technologies.

3. Why we process your personal information

We process your personal information for the following purposes:

Orders and fulfilment

We use your personal information to process orders, receive payment, send order confirmations, ship products, handle returns and provide customer service.

Legal basis: Performance of a contract.

Customer support

We use your personal information to respond to inquiries, resolve issues, handle complaints and communicate with you about your order.

Legal basis: Performance of a contract and legitimate interest.

Legal and accounting obligations

We process and store certain order, payment and invoice information to comply with accounting, tax, bookkeeping and legal requirements.

Legal basis: Legal obligation.

Newsletter and direct marketing

If you sign up for our newsletter, we use your email address to send updates about new work, releases, products, exhibitions and related news.

You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us at help@oceano.dk

Legal basis: Consent.

Website analytics and improvement

We may use analytics tools to understand how visitors use the website and to improve layout, content, performance and user experience.

Where required, analytics cookies are only used with your consent.

Legal basis: Consent or legitimate interest, depending on the specific technology used.

Marketing and advertising

We may use marketing tools, including pixels or similar technologies, to measure campaign performance or show relevant ads.

These tools are only used where permitted by law and, where required, only after your consent.

Legal basis: Consent.

Security and fraud prevention

We process certain technical and transaction information to protect the website, prevent fraud, secure payments and detect misuse.

Legal basis: Legitimate interest and legal obligation.

4. Shopify

Our store is hosted by Shopify. Shopify provides the e-commerce platform that allows us to sell products and services to you.

When you use our website or place an order, personal information may be processed by Shopify to provide checkout, payment, hosting, order management, security, analytics and related services.

Shopify may process personal information in countries outside your country of residence. Where required, Shopify relies on appropriate transfer mechanisms for international data transfers.

You can read more about Shopify’s handling of personal information in Shopify’s own privacy information.

5. Payment providers

Payments are processed by third-party payment providers. We do not store full payment card details ourselves.

Payment providers may process information such as payment card details, transaction ID, payment status, fraud checks and billing information in order to complete and secure the payment.

6. Shipping and fulfilment

To deliver your order, we share necessary information with shipping and fulfilment partners.

This may include:

• Name
• Shipping address
• Email address
• Phone number
• Order details necessary for delivery
• Customs information where relevant

7. Digital products

If you purchase a digital product, we may process your email address, order number, download status, access logs and licence-related information in order to deliver the file, prevent misuse and document delivery.

If digital files are watermarked or stamped, the stamp may include information such as your email address, order number or licence notice.

8. Cookies and tracking technologies

We use cookies and similar technologies to make the website work, remember preferences, improve performance and, where enabled, measure analytics or marketing performance.

Cookies may include:

• Necessary cookies required for the website and checkout to function
• Preference cookies
• Analytics cookies
• Marketing cookies

Necessary cookies may be used without consent where they are required for the website to function.

Analytics and marketing cookies are only used where permitted by law and, where required, after your consent.

You can manage or withdraw your cookie consent through the cookie settings on the website, if available, or through your browser settings.

9. Who we share personal information with

We only share personal information where necessary for legitimate business, legal or operational purposes.

This may include:

• Shopify
• Payment providers
• Shipping and fulfilment providers
• Email and newsletter providers
• Accounting and bookkeeping providers
• IT, hosting and security providers
• Analytics and marketing providers, where enabled
• Public authorities, if required by law

We do not sell your personal information.

10. International transfers

Some of our service providers may process personal information outside the EU/EEA.

Where personal information is transferred outside the EU/EEA, we rely on appropriate safeguards, such as an adequacy decision, Standard Contractual Clauses or other lawful transfer mechanisms.

11. How long we keep personal information

We only keep personal information for as long as necessary for the purposes described in this Privacy Policy.

Typical retention periods:

• Order and accounting records: normally 5 years from the end of the relevant financial year, or longer if required by law
• Customer service communication: as long as necessary to handle the issue and document the outcome
• Newsletter data: until you unsubscribe or withdraw consent
• Customer account data: until the account is deleted, unless we need to retain certain information for legal reasons
• Cookie and analytics data: according to the relevant cookie settings and provider retention periods

12. Your rights

Depending on applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of personal information
• Request restriction of processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Request data portability
• Lodge a complaint with a data protection authority

These rights are not absolute and may be subject to legal limitations, for example where we are required to retain information for accounting, legal or fraud prevention purposes.

To exercise your rights, contact us at help@oceano.dk 

13. Complaints

If you are unhappy with how we process your personal information, please contact us first at:

help@oceano.dk

You also have the right to lodge a complaint with the Danish Data Protection Agency:

Datatilsynet
www.datatilsynet.dk

14. Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure, alteration and destruction.

No online service can be guaranteed to be completely secure. You should avoid sending sensitive or confidential information through unsecured channels.

15. Children

Our website and products are not directed at children, and we do not knowingly collect personal information from children.

If you believe that a child has provided personal information to us, contact us at help@oceano.dk, and we will take appropriate steps to delete the information where required.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers or legal obligations.

The latest version will always be available on this website, with the date of the latest update shown at the top.

17. Contact

For questions about this Privacy Policy or how we process personal information, contact: help@oceano.dk