Privacy Policy 

This document is written for the Copatana website as it operates at the date above. The current website is a coming soon / launch notification website rather than a live e-commerce store. It currently uses a launch signup form, Google Analytics 4, WordPress / Elementor technology, WooCommerce functionality installed on the site, and an Elementor cookie consent system. Bank transfer is the only payment method contemplated for the current initial sales process, the other future payment and e-commerce services discussed internally are not described as active processing in this version.

When Copatana launches full e-commerce functionality or introduces additional services such as payment providers, email marketing systems, conversion pixels, additional shipping integrations, or other third party technologies, this policy and the Cookie Policy / Declaration must be reviewed and updated before or when those technologies become active.

1. Who is responsible for your personal data?

The data controller for the personal data processed through Copatana is:

• LVL GRUPPEN
• Brand: Copatana
• CVR: 43855492
• VAT: DK43855492
• Address: Søborg Hovedgade 38 A, 2860 Søborg, Denmark
• Email: support@copatana.com
• Telephone: +45 71 58 19 30
• Website: https://copatana.com

2. What personal data do we currently process?

Depending on how you interact with the current website, we may process:

• Email address submitted through the Copatana launch signup form.
• Information contained in messages you send to Copatana, including customer support communications.
• Technical information and online identifiers generated by website technologies, including cookie identifiers, browser / device information, approximate location and traffic / source information where applicable.
• Analytics information collected through Google Analytics 4 where you have given the relevant consent.
• Information contained in consent records showing the choices you make in the cookie consent system.

We do not currently operate the full WooCommerce checkout / order process through the website. Accordingly, order, payment, delivery, return and warranty information is not described below as an active website processing activity unless and until those functions are actually launched.

3. How do we collect your personal data?

• Directly from you when you submit your email address through the launch signup form.
• Directly from you when you contact Copatana by email or other available support channels.
• Automatically from your browser / device through cookies and similar technologies, where permitted by applicable law and your consent settings.

4. Why do we process your personal data?

We will not use your launch signup email address for unrelated purposes simply because you provided it. If we later introduce ongoing marketing communications, the applicable consent and unsubscribe mechanisms will be implemented and this policy will be updated where necessary.

5. Launch signup emails and communications.

The current website allows visitors to submit an email address so that Copatana can notify them when the brand launches. The form is configured through Elementor and submissions are collected through the website’s form system. At the current stage, Copatana has not selected a separate email marketing provider.

The intended current communication is a launch announcement and related communications connected with the launch. If Copatana later introduces regular marketing newsletters, promotional campaigns or a dedicated email marketing platform, the processing will be reviewed and this policy will be updated as necessary.

Retention: we retain a subscriber’s email address for as long as there is an ongoing purpose for the subscription and the person remains subscribed, subject to periodic review. If a person withdraws consent or unsubscribes, Copatana will stop using the address for the relevant marketing / launch communications and will delete or appropriately suppress the address when it is no longer necessary to retain it, unless another lawful reason requires retention.

6. Google Analytics 4.

Copatana uses Google Analytics 4 through the Site Kit by Google integration to understand how visitors use the website, measure traffic and improve the website. Analytics technologies are subject to the website’s cookie consent settings and are intended to operate only where the applicable consent has been obtained.

Google may process analytics data on Copatana’s behalf and may process information outside Denmark and the European Economic Area. Where personal data is transferred internationally, the applicable safeguards required by data protection law will apply.

The retention period for analytics data is governed by the retention settings configured for the Copatana Google Analytics property. Copatana will use a retention period that is appropriate to the stated analytics purpose and will periodically review that setting.

Copatana does not currently use Meta Pixel or TikTok Pixel on the website. Awareness advertising may be conducted directly on Meta / Instagram and TikTok platforms without installing those website pixels. If website pixels or other advertising technologies are introduced, this policy and the Cookie Policy will be updated.

7. Cookies and similar technologies.

Copatana uses an Elementor cookie consent system. The current configuration provides visitors with an active consent banner and allows them to accept or reject non essential categories. Copatana has tested the banner in a private browsing session, including both acceptance and rejection, and consent records are available in the consent system.

Under Danish cookie rules, consent is required before non essential cookies are set or read, while technically necessary cookies may be used without consent where the applicable requirements are met. The cookie banner is therefore configured on an opt in basis for non essential categories.

The current cookie scan identified seven Sourcebuster / WooCommerce attribution cookies. These are listed below. They are associated with WooCommerce’s source / attribution functionality rather than with Google Analytics.

Cookie information may change when plugins, analytics, advertising tools or other technologies are added or updated. The Cookie Declaration should therefore be based on a fresh scan of the live website whenever significant changes are made.

You can change or withdraw your non essential cookie consent through the cookie consent controls made available on the website. If the website later introduces additional cookies or similar technologies, the Cookie Policy / Declaration will be updated.

8. Website technology and service providers.

The current website is built and hosted using third party technology services, including:

• WordPress
• WooCommerce (installed; full e-commerce functionality is not currently live)
• Elementor and Elementor Pro
• Elementor Forms
• Elementor Cookie Consent
• Site Kit by Google
• Yoast SEO
• LiteSpeed Cache
• Modern Cart Starter for WooCommerce
• Starter Templates
• Duplicate Page
• WordPress AI
• Hostinger hosting, security and infrastructure services

Rank Math SEO is installed but inactive. Inactive plugins are not treated in this policy as active processing services.

9. Security.

Copatana takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

• HTTPS / SSL for website connections.
• Unique administrator passwords and restricted administrative access.
• WordPress two factor authentication is planned as an additional administrative security measure.
• Hostinger hosting security, malware scanning and infrastructure level security controls.
• Automatic / managed backup facilities provided by the Hostinger hosting plan.
• Server/infrastructure monitoring and security maintenance provided by the hosting environment.

Hostinger account two factor authentication and the Hostinger CDN level Web Application Firewall are planned security measures that are still being configured / verified. The absence or later activation of those controls does not change the purposes for which Copatana processes personal data, but the security description will be updated if the technical setup materially changes.

10. Who may receive personal data?

Copatana may share personal data with service providers where necessary to operate the website and provide requested services. For the current website, this includes hosting and website technology providers and Google services used for analytics and website management. We only share information that is relevant to the applicable purpose and require appropriate contractual and security arrangements where required by law.

If and when e-commerce launches, information necessary to fulfil orders may be shared with payment providers and delivery carriers. The intended future providers discussed internally include Flatpay and carriers such as PostNord, DAO, GLS, DHL and Omniva, but they are not described here as active website integrations unless and until they are actually implemented.

11. International transfers.

Some service providers used by Copatana may process personal data outside Denmark or the European Economic Area. Where such a transfer takes place, Copatana will rely on an applicable lawful transfer mechanism, such as an adequacy decision, standard contractual clauses or another mechanism permitted by applicable data protection law, as appropriate to the provider and transfer.

The exact international transfer arrangements will be reviewed whenever a new third party provider or technology is introduced.

12. How long do we keep personal data?

Copatana applies the principle of storage limitation and does not intend to retain personal data for longer than is necessary for the purpose for which it was collected.

• Launch signup emails: while the person remains subscribed and there is an ongoing purpose for the subscription, subject to periodic review.
• Consent records: for as long as necessary to demonstrate and manage consent in accordance with applicable legal requirements and the configuration of the consent management system.
• Analytics data: according to the retention setting configured in the Copatana Google Analytics property and subject to periodic review.
• Support communications: for as long as necessary to respond to the enquiry, manage the relationship, protect legal interests and comply with applicable legal obligations.

Where another law requires a longer retention period, that legal requirement may override the general retention approach.

13. Your rights under the GDPR.

Subject to the conditions and exceptions in the GDPR, you may have the following rights:

• Right of access to request a copy of personal data we process about you and information about the processing.
• Right to rectification to request correction of inaccurate or incomplete personal data.
• Right to erasure to request deletion of personal data in circumstances provided by law.
• Right to restriction of processing to request that processing is restricted in circumstances provided by law.
• Right to data portability in applicable cases, to receive certain personal data in a structured, commonly used and machine readable format and transmit it to another controller.
• Right to object to object to processing based on legitimate interests and, in particular, to object to direct marketing.
• Right to withdraw consent where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact support@copatana.com. We may need to verify your identity before responding to a request.

14. Right to complain.

If you believe that Copatana has processed your personal data unlawfully or that your rights have not been respected, you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet), which is Denmark’s supervisory authority.

• Datatilsynet Carl Jacobsens Vej 35, DK-2500 Valby, Denmark
• Website: https://www.datatilsynet.dk
• You are also welcome to contact Copatana first so that we can try to resolve your concern.

15. Children.

The current website is not directed specifically at children. Copatana does not knowingly seek to collect personal data from children through the launch signup form. If Copatana becomes aware that personal data has been collected from a child in circumstances where processing is not permitted, appropriate steps will be taken to address the situation.

16. Customer generated content and images.

Copatana may, as part of its marketing and community activities, receive or create photographs, videos, testimonials, reviews, street interview material, event material and other social media content that may contain personal data or identifiable people.

Copatana will seek an appropriate permission or other lawful basis before using identifiable customer generated content for its own marketing purposes. Publicly posting or tagging Copatana content does not by itself grant unlimited permission for Copatana to reuse that content. Additional care will be taken where children appear in content.

This section describes the intended processing framework; individual campaigns or content uses may require specific consent, permission or another lawful basis depending on the circumstances.

17. Future e-commerce services.

The current website is not a full e-commerce store. When e-commerce launches, Copatana expects to introduce additional processing connected with orders, payments, delivery, returns, refunds, complaints, warranties, customer accounts and marketing.

Future services currently contemplated include Flatpay, card payments, MobilePay, Klarna, Apple Pay, PostNord, DAO, GLS, DHL, Omniva and a dedicated email / transactional email system. These are not treated as active processing services in this current version unless and until they are actually implemented.

Before those services go live, Copatana will review and update this Privacy Policy, Cookie Policy/Declaration and other legal information to reflect the actual technologies, data flows, recipients, international transfers, retention periods and legal bases.

18. Changes to this Privacy Policy.

We may update this Privacy Policy when our processing activities, website technology, legal requirements or business operations change. The latest version will be published on the Copatana website with an updated effective date.

19. Contact.

For privacy questions, requests concerning your personal data, or to exercise your GDPR rights, contact:

• LVL GRUPPEN / Copatana
• Søborg Hovedgade 38 A, 2860 Søborg, Denmark
• Email: support@copatana.com
• Phone: +45 71 58 19 30

COOKIE POLICY / COOKIE DECLARATION

This Cookie Policy forms part of the Copatana Privacy Policy and explains how the current Copatana website uses cookies and similar technologies.

1. What are cookies?

Cookies are small files or identifiers stored on or accessed from your device when you visit a website. Similar technologies can perform comparable functions. They may be used for essential website operation, preferences, analytics, security or advertising.

2. How Copatana uses cookies.

Copatana currently uses necessary website technologies and a limited set of WooCommerce Sourcebuster attribution cookies. Google Analytics 4 is also connected to the website and is intended to operate subject to the applicable consent settings.

3. Current cookies identified by the website scan.

The current scan identified the following cookies as Analytics cookies:

The current scan identified these cookies as Analytics cookies. The sbjs_ cookies are associated with WooCommerce/Sourcebuster attribution functionality, while the _ga cookies are associated with Google Analytics 4. The exact cookie inventory can change when website plugins, analytics settings or other technologies are added or updated.

4. Consent.

The current Copatana cookie banner is configured on an opt in basis for non essential categories. Visitors can accept or reject non essential categories, and the consent system records the choice. Copatana has tested both acceptance and rejection in private browsing mode.

Consent can be changed or withdrawn through the cookie consent controls made available on the website. Necessary cookies may continue to operate where permitted because they are required for the website to function or to provide a service requested by the visitor.

5. Google Analytics 4.

Google Analytics 4 is used to measure website traffic and usage. Analytics cookies and related technologies are subject to the applicable consent settings. The exact Google Analytics cookies and identifiers should be re-scanned whenever the Analytics configuration or website implementation changes.

6. Future cookies and technologies.

Copatana does not currently install Meta Pixel or TikTok Pixel on the website. If conversion tracking, advertising pixels, payment technology, marketing platforms or other third party technologies are introduced, the Cookie Declaration will be updated before or when those technologies become active, and consent controls will be configured as required.

7. How to withdraw consent.

You can withdraw or change your consent using the cookie consent controls provided on the website. Withdrawal of consent does not affect processing that was lawful before the withdrawal.

8. Contact.

Questions about cookies or privacy can be sent to support@copatana.com.

Document status: Updated 18.08.2026