Privacy Policy

This Privacy Policy explains how Scenic Props ApS, trading as Stage Props ("we", "us", "our"), collects and processes personal data when you visit our Website, contact us, or place an order.

This Website is intended exclusively for business and professional customers (B2B).

"Personal data" means any information relating to an identified or identifiable individual.

1. Data Controller & Contact

The data controller is:

Scenic Props ApS
trading as Stage Props ApS
Kongevejen 438
2840 Holte
Denmark
VAT: DK46594142
Email: contact@stage-props.com

2. Personal Data We Collect

a) Information you provide

When you contact us or place an order, we may collect:

• name
• company or organisation name
• job title, where provided
• business email address
• phone number
• billing and delivery address
• VAT registration number, where applicable
• EORI number, where required for customs purposes
• order, payment and invoice information
• delivery and customs information
• messages, enquiries and other correspondence

b) Information collected automatically

When you use the Website, we may collect:

• IP address
• browser type and version
• device information
• pages visited and actions taken
• referral source
• cookie and analytics information, subject to your cookie preferences

3. How We Use Your Data

We use personal data to:

• process and manage orders
• process payments and issue invoices
• arrange delivery and customs clearance
• provide relevant information to shipping, logistics and customs service providers
• verify business, VAT or customs information where necessary
• provide customer service and respond to enquiries
• manage our business relationships
• prevent fraud, misuse and payment-related issues
• maintain and improve our Website and services
• comply with accounting, tax, customs and other legal obligations

4. Legal Basis for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

• Contract – where processing is necessary to enter into or perform a contract with you or the organisation you represent.
• Legal obligation – where processing is necessary to comply with applicable accounting, tax, customs or other legal requirements.
• Legitimate interests – where necessary for the operation, administration, security and improvement of our business and Website, provided those interests are not overridden by your rights and interests.
• Consent – where consent is required, for example for certain cookies, analytics or similar technologies.

These are recognised bases for processing under UK GDPR; where legitimate interests are relied upon, the privacy information should also explain those interests.

5. B2B Customers Only

This Website is intended exclusively for businesses, organisations and professional customers.

We do not knowingly accept orders from private consumers and do not knowingly collect personal data from children in connection with sales through this Website.

6. Sharing of Personal Data

We do not sell personal data.

Where necessary, we may share personal data with service providers and other parties involved in operating our business, including:

• shipping, courier and logistics providers
• customs brokers and customs authorities
• payment and banking providers
• website hosting and IT service providers
• accounting and business administration systems
• analytics and website service providers
• legal, accounting and other professional advisers
• public authorities where required by law

We only share information that is reasonably necessary for the relevant purpose.

This is also why I have added customs brokers and customs authorities. Once you collect EORI and use it to ship goods into the UK, the Privacy Policy should reflect what actually happens with that information. ICO specifically requires disclosure of recipients or categories of recipients where applicable.

7. International Transfers

Scenic Props ApS is established in Denmark, and some of our service providers may process personal data in countries outside the United Kingdom.

Where UK data protection law requires safeguards for an international transfer, we use an appropriate lawful transfer mechanism, such as applicable UK adequacy regulations or appropriate contractual safeguards.

The UK now has its own international-transfer framework, so I prefer this formulation to the existing blanket reference to EU-style "Standard Contractual Clauses (SCCs)". ICO's current guidance expressly distinguishes UK adequacy regulations and appropriate safeguards.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal requirements.

In particular:

order, payment and invoice information is retained as required by applicable accounting and tax laws
customs and shipping information is retained as required for delivery, record-keeping and compliance purposes
customer correspondence is retained for as long as reasonably necessary for customer service and business purposes
analytics and cookie-related information is retained in accordance with the settings and retention periods of the relevant services

When personal data is no longer required, it is deleted or anonymised where appropriate.

9. Cookies

We use cookies and similar technologies for the operation of the Website and, where applicable, to understand how the Website is used.

Cookies and similar technologies that are not strictly necessary are used only where permitted under applicable law and, where required, with your consent.

You can manage or withdraw your consent through the cookie settings available on the Website.

You can also control cookies through your browser settings.

Det er bedre end kun at skrive "Under UK law (PECR)", og det er fortsat i overensstemmelse med ICO's aktuelle vejledning: ikke-nødvendige cookies kræver som udgangspunkt forudgående samtykke, mens nødvendige cookies kan være undtaget.

10. Analytics & Website Tools

We may use analytics and website tools, including:

• Google Analytics
• Ahrefs
• Hotjar

These services help us understand how visitors use the Website, identify technical or usability issues and improve our services.

Some of these services may use cookies or similar technologies. Where consent is required, they are used only after you have provided that consent.

Some service providers may process personal data outside the United Kingdom. Where applicable, such transfers are handled as described in Section 7 above.

Jeg bruger bevidst "may use" her. Så lover Privacy Policy ikke, at alle tre nødvendigvis kører på alle tidspunkter. Men cookie consent skal selvfølgelig også teknisk forhindre ikke-nødvendige tracking-teknologier, indtil samtykke foreligger, hvor dette kræves.

11. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures include, where appropriate:

• secure HTTPS connections
• access controls
• system maintenance and updates
• appropriate organisational and technical security measures

12. Your Rights

Depending on the circumstances and the applicable legal basis for processing, you may have rights under UK data protection law, including the right to:

• request access to your personal data
• request correction of inaccurate personal data
• request deletion of personal data
• request restriction of processing
• object to certain processing
• request data portability where applicable
• withdraw consent at any time where processing is based on consent

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your personal data has been processed in breach of applicable UK data protection law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our Website, services, business practices or legal requirements.

The current version will always be available on this Website.

14. Contact

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have questions about how we process your personal data, please contact us.