Privacy policy
DavidNukri — Privacy
Privacy
Policy
GDPR
In compliance with GDPR
(EU) 2016/679 and the
Danish Data Protection Act
(Databeskyttelsesloven)
(EU) 2016/679 and the
Danish Data Protection Act
(Databeskyttelsesloven)
Data
Controller
Controller
DAVIDNUKRI is the data controller responsible for the processing of your personal data. We operate an online store (davidnukri.com) selling hair cosmetics, and a hair studio offering professional salon services in Frederiksberg, Denmark.
We are committed to protecting your privacy and handling your data transparently, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).
If you have any questions about how we process your data, please contact us at info@davidnukri.com.
What We
Collect
Collect
Online Product Orders (via Shopify)
When you purchase hair cosmetics on davidnukri.com, we collect your name, email address, phone number, and shipping address. All payment processing is handled entirely by Shopify — we do not process or store your payment card details.
Studio Bookings & Online Service Payments (via Fresha)
Our website contains a booking button that redirects you to Fresha (fresha.com) where you can book an appointment and pay for salon services online. Fresha collects your name, phone number, email address, booking details, and payment information. All payments on Fresha are processed by Adyen N.V. Fresha's privacy policy applies: terms.fresha.com/privacy-policy
In-Studio Payments (via Fresha)
All in-person payments at DavidNukri Studio — for both salon services and cosmetics — are processed exclusively through Fresha's payment system (powered by Adyen N.V.). We do not have access to your full card details.
Contact Enquiries
When you contact us via email or phone, we collect the information you provide (name, email, message content) to respond to your enquiry.
Newsletter
If you subscribe to our newsletter, we collect your email address. You can unsubscribe at any time by clicking the unsubscribe link in any email.
Website Usage
We automatically collect certain technical data when you visit our website, including IP address, browser type, device information, and browsing behavior through cookies and similar technologies.
Purpose &
Legal Basis
Legal Basis
Order Fulfillment — Art. 6(1)(b) GDPR
Processing your personal data is necessary to fulfill online cosmetics orders placed through our website (via Shopify). This is based on the performance of a contract.
Appointment & Service Management — Art. 6(1)(b) GDPR
Your booking and payment data is processed through Fresha to schedule, manage, confirm, and process payments for salon services and in-studio purchases.
Legal Obligations — Art. 6(1)(c) GDPR
We are required by Danish bookkeeping law (Bogføringsloven) to retain certain transaction data for a minimum of 5 years.
Legitimate Interest — Art. 6(1)(f) GDPR
We may process data for improving our services, website analytics, fraud prevention, and appointment reminders.
Consent — Art. 6(1)(a) GDPR
For marketing communications, non-essential cookies, and promotional messages, we rely on your explicit consent. You may withdraw your consent at any time.
Data
Retention
Retention
Order & Transaction Data
Transaction records from both Shopify and Fresha are retained for 5 years as required by the Danish Bookkeeping Act (Bogføringsloven).
Booking Data (Fresha)
Appointment history is retained within the Fresha platform for service continuity. You may request deletion of your data directly from Fresha or through us.
Marketing Data
Newsletter subscription data is retained until you unsubscribe. Marketing consent recorded in Fresha can be updated at any time in your profile settings.
Contact Enquiries
Communication records are retained for up to 2 years to handle follow-up enquiries.
Third-Party
Processors
Processors
Shopify — Online Store & Online Payments
Shopify Inc. hosts our online store (davidnukri.com) and handles all online product orders and payments. We do not have access to your full card details. Shopify is GDPR-compliant.
Fresha — Bookings, Studio & Service Payments
Fresha.com SV Limited handles all studio bookings, appointment management, and all payments made through Fresha. Payments are processed by Adyen N.V. Fresha is GDPR-compliant and does not sell your data. See: Fresha Privacy Policy
Shipping Partners
We share your name and shipping address with delivery partners (DAO, PostNord) to fulfill online cosmetics orders.
Analytics
We may use analytics tools (e.g. Google Analytics) to understand website traffic and improve our services. This data is anonymized where possible and only activated with your consent.
Cookies
Essential Cookies
Required for the website to function — shopping cart, login sessions, and security. These cannot be disabled.
Analytics Cookies
Help us understand how visitors use our website. Only activated with your consent.
Marketing Cookies
Used to deliver relevant ads and track campaigns. Only activated with your consent.
Fresha Cookies
When you are redirected to Fresha for booking, Fresha may set its own cookies subject to their cookie policy.
Managing Cookies
You can manage preferences at any time through your browser settings or our cookie consent banner.
Your
Rights
Rights
Right of Access — Art. 15
You have the right to request a copy of the personal data we hold about you.
Right to Rectification — Art. 16
You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure — Art. 17
You have the right to request deletion of your personal data, unless we are legally required to retain it.
Right to Restriction — Art. 18
You have the right to request that we limit the processing of your data under certain circumstances.
Right to Data Portability — Art. 20
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object — Art. 21
You have the right to object to processing based on legitimate interest or direct marketing at any time.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time via your Fresha profile or by contacting us.
Data
Security
Security
Our Measures
We implement appropriate technical and organizational measures to protect your personal data. Our website uses SSL encryption for all data transmissions.
Shopify Security
Shopify provides Level 1 PCI DSS compliance for all online payment processing, ensuring the highest standard of payment security.
Fresha Security
Fresha protects your data with encrypted cloud storage, TLS encryption, and advanced firewalls. Fresha is PCI DSS compliant for all card payments processed through Adyen.
Data Breach Notification
In the event of a personal data breach, we will notify the Danish Data Protection Agency (Datatilsynet) within 72 hours and inform you without undue delay.
Complaints
If you believe that we are processing your personal data in violation of GDPR or Danish data protection law, you have the right to file a complaint with the Danish Data Protection Agency.
Datatilsynet
For concerns regarding data processed by Fresha, you may also contact Fresha's Data Protection Officer at dpo@fresha.com.
Contact
Email
Phone
Studio Address
DAVIDNUKRI
Vodroffsvej 7
1900 Frederiksberg C
Denmark
Vodroffsvej 7
1900 Frederiksberg C
Denmark
This privacy policy may be updated from time to time. Any changes will be published on this page.
Last updated: February 2026
Frederiksberg, Denmark
Vodroffsvej 7, 1900
Vodroffsvej 7, 1900
DavidNukri