Sharktor Brewing & Next Level Cozy

Are you 18 or older?

Our shop includes alcohol and optional adult-oriented product photos.

Privacy Policy

Who is responsible for your data? Sharktor Brewing operates this webshop, including the Next Level Cozy storefront. CVR: 34247684. Address: Rodosvej 15, 23...

Who is responsible for your data?
Sharktor Brewing operates this webshop, including the Next Level Cozy storefront. CVR: 34247684. Address: Rodosvej 15, 2300 København S, Denmark. Contact: [email protected] or +45 50 58 47 60.
Orders and deliveries
When you order, we process your name, email, telephone number where supplied, billing and delivery addresses, chosen service point, items, order history and payment status. We use this to process your purchase, deliver your goods, provide support and handle returns. The basis is performing our contract with you (GDPR Article 6(1)(b)). Accounting records are retained to meet legal obligations (Article 6(1)(c)). Payment details are handled by the payment provider; do not send card numbers in our forms.
Contact and cancellation requests
We use the details you submit to answer your enquiry or handle your cancellation. Cancellation requests are emailed to us and a copy is sent to your supplied email address. Please only provide information relevant to your request. Order-related correspondence is processed to perform the contract; general enquiries are processed in our legitimate interest in answering customers (Article 6(1)(f)). Submitting an enquiry does not subscribe you to marketing.
Newsletters and offers
If you choose to join, we process your email address, subscription status and signup/confirmation records to send offers and news from Sharktor Brewing and Next Level Cozy. This is based on your consent (Article 6(1)(a)). MailPoet handles our mailing list and confirmation email. Confirm your subscription using the link in that email. Every marketing email includes an unsubscribe link. You can also withdraw consent by contacting us. Withdrawal does not affect processing carried out before withdrawal.
Providers and recipients
We use WordPress/WooCommerce to operate the shop, Microsoft Azure for hosted infrastructure, MailPoet for email services, Google/Gmail for correspondence, OnPay for payment processing, and Shipmondo and the selected carrier for delivery. Providers receive the information needed for their role. Our pages may request fonts from Google Fonts; the service can receive your IP address and browser request information. External social links lead to services with their own privacy notices.
Some providers may process data outside the EU/EEA. Applicable transfer safeguards depend on the provider and service agreement. Contact us for the current recipients and transfer safeguards applying to your information.
Cookies and technical information
The shop uses cookies and browser storage for cart/session functionality, selected brand and currency, account login where used, and subscription confirmation. Technical request information, including IP address, may be processed for security, operation and signup-abuse prevention. Newsletter signup does not itself give consent to advertising cookies. Any non-essential analytics or marketing tracking needs its own appropriate consent choice.
How long do we keep information?
We keep order/accounting documentation for the applicable statutory period, generally five years from the end of the relevant financial year. Contact and cancellation correspondence is kept while needed to handle the request, fulfil related obligations or resolve a dispute. Newsletter information is kept while you are subscribed; limited consent and suppression records may be retained to document your choices and avoid sending unwanted marketing. Other information is removed or anonymised when no longer needed. Backups expire through the backup retention cycle rather than being used for new marketing.
Your choices and rights
You may request access, correction, deletion, restriction or portability of your personal information, and object to processing based on legitimate interests, where the relevant conditions apply. Some records cannot be deleted while we must retain them by law. Contact us at the email above; we may need to verify your identity before disclosing information. You can complain to Datatilsynet, the Danish Data Protection Agency.
Last updated: 3 October 2026