Privacy Policy

Short version

• We never sell your data.
• We use it only to deliver what you purchased and to stay in touch about the product.
• You can always request access, correction, or deletion of your data.

Data controller

CVBE ApS (operating Slowshore)
Borrebyvej 27, 1., DK-2700 Copenhagen, Denmark
Business registration (CVR): 42764760
Contact: chris@slowshore.com

What we collect

• At purchase: name, email, payment info (handled by Stripe), the product purchased.
• Newsletter signup: email.
• Pilot application: name, email, optional short motivation.
• Online tool use: login info, your downloads, IP address at login.
• Automatic: technical browser and device info for security and debugging.

Why we process this data

• To deliver what you purchased (legal basis: performance of a contract, GDPR art. 6(1)(b)).
• To send receipts and updates about your purchase (same basis).
• To comply with tax and accounting law (legal basis: legal obligation, GDPR art. 6(1)(c)).
• To send the newsletter if you subscribed (legal basis: consent, revocable anytime).
• To review pilot applications and contact you about the outcome (legitimate interest).

Third parties (subprocessors)

We use the following services to run Slowshore:

• Supabase (EU region): database and authentication.
• Stripe: payment processing. Stripe receives your payment info directly and stores it on their platform.
• Resend: sending receipts, download links, and newsletter.
• Vercel: website hosting.
• Plausible (if enabled): cookie-free, anonymized visit statistics.

All subprocessors are bound by data processing agreements where applicable, and by their own GDPR-compliant privacy practices.

How long we keep your data

• Purchase history and invoices: 5 years (Danish accounting law).
• Login account and active subscription: until you delete the account.
• Newsletter subscription: until you unsubscribe.
• Pilot applications: up to 12 months after the decision.

Your rights (GDPR)

You have the right at any time to:

• Request access to what data we hold about you.
• Have incorrect data corrected.
• Have your data deleted (except what we are legally required to retain).
• Restrict processing of your data.
• Receive your data in a common format (portability).
• Withdraw consent where processing relies on consent.

Email chris@slowshore.com to exercise these rights. We respond within one month.

California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know, delete, and opt out of the sale of personal information. Slowshore does not sell personal information under any definition.

Complaints

If you are unhappy with how we handle your data, you may file a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

Cookies

Slowshore only sets cookies strictly necessary for the site to work (login session, language preference). We do not use third-party cookies for advertising or tracking.