Privacy policy

Last updated: October 22, 2026

This policy explains what personal information we collect when you visit paxromanaart.com or buy from us, why we collect it, who we share it with, and the choices and rights you have.

Who is responsible for your data

The data controller is Amstrup Commerce (Pax Romana Art), Mågevej 19, 3600 Frederikssund, Denmark, CVR 37813478. Contact us about privacy at support@paxromanaart.com. Because we are based in Denmark, we handle personal data under the EU General Data Protection Regulation (GDPR), wherever you live.

What we collect

Order details: your name, email address, phone number if you give it, shipping and billing address, and what you ordered.
Payment: payments are handled by our payment providers. We do not see or store your full card number.
Messages: what you send us by email or through our contact form.
Browsing information: your IP address, device and browser type, the pages you view, and how you arrived at our website, collected with cookies and similar technologies.
Email sign-up: your email address, where you signed up, and which of our emails you open or click.
Reviews: any review, rating or photo you choose to submit.

Why we use it, and our legal basis

To make and deliver your order and help you with it. Legal basis: performing our contract with you.
To keep accounting and tax records. Legal basis: legal obligation under Danish bookkeeping law.
To prevent fraud and keep our website secure. Legal basis: our legitimate interest in protecting our business and customers.
To understand how our website is used and improve it. Legal basis: your consent where the law requires it, otherwise our legitimate interest.
To show and measure our advertising on platforms such as Facebook, Instagram and Google. Legal basis: your consent where the law requires it.
To send you marketing emails. Legal basis: your consent. You can unsubscribe at any time with the link in every email.

Who we share it with

We share only what each partner needs to do its job:

Shopify, which runs our store and checkout
Our payment providers, including Shopify Payments, PayPal, and wallets such as Shop Pay, Apple Pay and Google Pay
Our print, framing and shipping partners, who receive your name, address and order so they can produce and deliver it
Advertising and analytics providers: Meta Platforms (Facebook and Instagram), Google, and Microsoft (Clarity)
Our email service provider and our customer reviews provider
Public authorities, when the law requires it

We do not sell your personal information for money. Under some US state privacy laws, sharing browsing information with advertising partners can count as "selling" or "sharing" personal information, or as targeted advertising. You can opt out at any time (see "Your choices" below).

International transfers

Some of our providers are based in, or process data in, the United States and other countries outside the EU and EEA. Where they do, we rely on the EU-U.S. Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses.

How long we keep it

Order and accounting records: for five years from the end of the financial year they belong to, as Danish bookkeeping law requires.
Email marketing data: until you unsubscribe, after which we keep only what is needed to respect your choice.
Customer service messages: for as long as needed to handle your request and any follow-up, and no longer than three years after our last contact.
Browsing information: for the lifetime of the cookie or as set by the provider.

Your choices

You can accept or decline non-essential cookies in our cookie banner and change your choice at any time. We honor the Global Privacy Control signal from your browser as an opt-out of selling, sharing and targeted advertising. You can also opt out by emailing us.

Your rights

Depending on where you live, you have the right to:

know what personal information we hold about you and get a copy
have it corrected or deleted
restrict or object to how we use it
receive it in a portable format
withdraw your consent at any time
opt out of the sale or sharing of your information and of targeted advertising
not be treated differently for using these rights

To use any of these rights, email support@paxromanaart.com. We reply within one month. If we decline your request, you can ask us to reconsider by replying to our answer.

Children

Our website is not intended for children under 16, and we do not knowingly collect their personal information.

Complaints

If you are unhappy with how we handle your data, please contact us first. You can also complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark (datatilsynet.dk), or to the data protection authority where you live.

Changes to this policy

We may update this policy. The date at the top shows when it last changed.