Privacy Policy

Privacy Policy

Effective date: November 3, 2025

Poster & Frame Art Group (“we”, “us”, or “our”) operates multiple online stores and brands, including Poster & Frame, Citatplakat, Permild & Rosengreen, Curated Copenhagen, and Wonderhagen (collectively referred to as the “Service”).

This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our websites, make purchases, or engage with our marketing activities. It also describes your rights under applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Definitions

  • Service: All websites and online stores operated by Poster & Frame Art Group, including but not limited to posterandframe.com, citatplakat.dk, permild-rosengreen.dk, curatedcopenhagen.com, and wonderhagen.com.
  • Personal Data: Any information relating to an identified or identifiable individual.
  • Usage Data: Data automatically collected when you use our websites (e.g., IP address, browser type, time spent on pages).
  • Cookies: Small text files placed on your device to collect standard internet log information and visitor behavior information.
  • Data Controller: Poster & Frame Art Group, which determines the purposes and means of processing your personal data.
  • Data Processor: Any third party that processes data on our behalf (e.g., Shopify, Klaviyo, Meta, Google).

 

2. Information We Collect

We collect the following categories of data:

  • Personal Data — such as name, email, phone number, address, and payment details.
  • Account Data — if you create an account or subscribe to newsletters.
  • Usage Data — automatically collected via analytics and cookies.
  • Marketing & Tracking Data — data from cookies, pixels, and tags used to measure performance of ads and improve user experience.

We use Shopify as our e-commerce platform, which processes order and payment data in accordance with their Shopify Privacy Policy.

 

3. How We Use Your Data

Poster & Frame Art Group uses your data to:

  • Fulfill and deliver orders.
  • Communicate regarding orders, returns, and support.
  • Improve our websites and product offerings.
  • Send marketing and remarketing communications (when consent has been given).
  • Conduct analytics and performance tracking across our brands.
  • Comply with legal and tax obligations.

 

4. Tracking, Analytics & Advertising

We use several third-party services to analyze behavior and serve personalized ads:

  • Google Analytics 4 (GA4) — to understand user behavior and website performance.
  • Meta (Facebook & Instagram Ads) — for remarketing and targeted advertising.
  • TikTok Ads — to deliver relevant ads based on your interactions.
  • Klaviyo — to manage email marketing, segmentation, and automations.
  • Shopify Pixels & Cookies — to track purchases, preferences, and improve checkout experiences.

You may withdraw consent to cookies or adjust your preferences at any time via our cookie banner or browser settings.

 

5. Legal Basis for Processing (GDPR)

We process personal data under one or more of the following lawful bases:

  • Your consent (e.g., newsletter subscriptions).
  • Performance of a contract (e.g., fulfilling orders).
  • Legal obligations (e.g., tax and accounting).
  • Legitimate interests (e.g., marketing analytics, fraud prevention).

 

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in this policy:

  • Order data: stored for up to 5 years for accounting and legal reasons.
  • Marketing data: stored until you withdraw consent.
  • Analytics data: anonymized or deleted after 26 months.

 

7. Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA, including the United States.
All transfers occur only where adequate safeguards (e.g., EU Standard Contractual Clauses) are in place to ensure your data is protected.

 

8. Disclosure of Data

We may disclose personal data to:

  • Service providers and processors (e.g., Shopify, Klaviyo, Meta, Google).
  • Authorities, where required by law.
  • In case of a merger or acquisition, your data may be transferred to the acquiring entity, which will continue to handle it in compliance with this policy.

 

9. Security of Data

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction.
However, no system is entirely secure, and we cannot guarantee absolute protection.

 

10. Your Rights (GDPR)

If you are located in the EEA, you have the right to:

  • Access, correct, or delete your personal data.
  • Restrict or object to processing.
  • Withdraw consent at any time.
  • Request data portability.
  • File a complaint with your national data protection authority.

 

11. Children’s Privacy

Our services are not directed to children under 18, and we do not knowingly collect their data.

 

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our websites, with the effective date updated at the top.