Privacy Policy

Last updated: 24 May 2026

This privacy policy explains how Café Life Hack (operated by Averdine DK) collects, uses, and protects your personal data when you visit cafelifehack.com, purchase products, use our contact form, or subscribe to our newsletter. We process data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679), the Danish Data Protection Act (Databeskyttelsesloven), and the Danish E-Commerce Act (E-handelsloven).

1. What data we collect and why

1.1 When you make a purchase

Payments are processed by Stripe, Inc. (a PCI-DSS Level 1 certified payment processor). When you complete a purchase, Stripe collects your payment card details, name, and email address. We never see or store your full card number. From Stripe, we receive your name, email address, and transaction details (product purchased, amount, date) so we can deliver your order and provide customer support.

Legal basis: Performance of a contract (GDPR Art. 6(1)(b)) — we need this data to deliver what you bought.

1.2 When you use the contact form

Our contact form collects your name, email address, and message. This data is transmitted via EmailJS and delivered to our inbox hosted by Zoho Mail. We use it solely to respond to your inquiry.

Legal basis: Legitimate interest (GDPR Art. 6(1)(f)) — responding to your inquiry.

1.3 When you subscribe to our newsletter

If you sign up for our newsletter, we collect your email address. You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us directly.

Legal basis: Consent (GDPR Art. 6(1)(a)). You may withdraw your consent at any time.

1.4 When you use the Workshop Playbook

The Workshop Playbook app stores your trial status and playbook data locally in your browser (localStorage). This data stays on your device and is never sent to our servers.

2. Data processors (sub-processors)

We use the following third-party services to operate Café Life Hack. Each acts as a data processor under GDPR:

• Stripe, Inc. (USA, EU data processing) — payment processing. Stripe Privacy Policy. Stripe is certified under the EU-US Data Privacy Framework.
• Zoho Corporation (EU data centres) — email hosting and delivery automation. Zoho Privacy Policy.
• EmailJS — contact form transmission. EmailJS Privacy Policy.

All processors are bound by data processing agreements as required by GDPR Art. 28.

3. International data transfers

Stripe processes some data in the United States under the EU-US Data Privacy Framework (adequacy decision by the European Commission, July 2023). Zoho stores data in EU data centres. We do not transfer data to countries without an adequate level of data protection unless appropriate safeguards are in place (Standard Contractual Clauses or equivalent).

4. How long we keep your data

• Purchase records: 5 years after the transaction, as required by Danish bookkeeping law (Bogføringsloven § 10).
• Contact form messages: Deleted within 12 months after your inquiry is resolved, unless a longer retention is needed for legal purposes.
• Newsletter subscriptions: Until you unsubscribe.

5. Your rights under GDPR

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data (“right to be forgotten”, Art. 17)
• Restrict processing (Art. 18)
• Data portability — receive your data in a machine-readable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7(3))

To exercise any of these rights, email us at hello@cafelifehack.com. We will respond within 30 days.

6. Cookies and local storage

We do not use tracking cookies or third-party analytics. We use browser localStorage for functional purposes only (Workshop Playbook trial status, shared playbook views). See our Cookie Policy for details.

7. Security

Our website is served over HTTPS. Payment data is handled entirely by Stripe and never touches our servers. We take reasonable technical and organisational measures to protect your data, but no system is 100% secure. If you discover a security issue, please contact us immediately.

8. Children

Café Life Hack is designed for professionals and adults. We do not knowingly collect data from children under 16 years of age. If you believe we have collected data from a child, please contact us and we will delete it promptly.

9. Complaints

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):

10. Changes to this policy

We may update this policy from time to time. Material changes will be noted on this page with an updated “Last updated” date. We encourage you to review this page periodically.