Privacy Policy
This Privacy Policy describes how Yab Yum Clothing Company ApS (“GABBA”, “we”, “us” or “our”) collects, uses and shares personal data when you visit gabba.com, make a purchase from us, contact us or otherwise interact with our services.
DATA CONTROLLER AND CONTACT INFORMATION
Yab Yum Clothing Company ApS is the data controller responsible for the processing of personal data described in this Privacy Policy.
Yab Yum Clothing Company ApS
Birkemosevej 16
6000 Kolding
Denmark
CVR: 70122219
Email: info@gabba.com
Phone: +45 7553 6666
If you have questions about this Privacy Policy, our processing of your personal data or wish to exercise your data protection rights, you can contact us using the details above.
PERSONAL DATA WE COLLECT
The personal data we collect and process depends on how you interact with us and our website.
Website and device information
When you visit our website, we may collect information about your device and how you interact with the website. This may include your IP address, browser and device information, cookie identifiers, pages and products viewed, searches, referring websites and information about how you use and interact with the website.
We use this information to operate and improve our website, understand how it is used, measure performance and, where you have provided the required consent, for analytics, personalisation and advertising.
Order and transaction information
When you place an order, we collect information necessary to process and fulfil your purchase. This may include your name, email address, telephone number, billing and delivery address, order details, purchase history, delivery information and payment-related information.
Payment methods and payment service providers may vary depending on your country or region and are displayed at checkout. Relevant payment and transaction information may be processed by the payment service provider selected at checkout.
We use order and transaction information to process and fulfil orders, arrange delivery, communicate with you about your purchase, process returns, refunds and complaints, maintain accounting and transaction records, and prevent and detect fraud.
Customer service information
When you contact us, we process the information you provide in connection with your enquiry. This may include your name, email address, telephone number, order number, correspondence and any images or other documentation you provide, for example in connection with a return, complaint or product claim.
We use this information to respond to your enquiry and provide customer service.
Marketing and communication information
If you subscribe to our marketing communications, we process information such as your email address, marketing preferences and consent status.
Where the necessary consents have been provided, we may also use information about your purchases and your interactions with our website and marketing communications to personalise and improve the marketing we send to you, create customer segments and measure the performance of our marketing.
You can unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails.
Reviews and feedback
After a purchase, we may use relevant contact and order information to invite you to provide feedback or review your shopping experience through a review service provider.
Product safety information
Where necessary, we may use customer and purchase information to identify and contact customers in connection with product safety warnings, recalls or other product safety matters relating to products they have purchased from us.
INFORMATION REQUIRED TO COMPLETE A PURCHASE
When you place an order, certain personal data is necessary for us to enter into and perform our contract with you. This includes information required to process your order, payment and delivery.
If you do not provide the information required during checkout, we may be unable to process or fulfil your order.
Where providing personal data is optional, this will depend on the relevant service or interaction with us.
LEGAL BASIS FOR PROCESSING
Where the General Data Protection Regulation (“GDPR”) applies, we process your personal data on one or more of the following legal bases, depending on the purpose of the processing:
Performance of a contract
We process personal data where necessary to enter into or perform a contract with you. This includes processing your order, payment and delivery information, communicating with you about your order, and handling returns, refunds and complaints relating to your purchase.
Compliance with legal obligations
We process personal data where necessary to comply with legal obligations that apply to us, including obligations relating to accounting, bookkeeping, taxation, consumer protection and product safety.
Legitimate interests
We may process personal data where this is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms.
Our legitimate interests may include operating and securing our business and website, preventing and detecting fraud, providing customer service, establishing, exercising or defending legal claims, improving our services and understanding the performance of our business.
Consent
Where required, we process personal data based on your consent. This applies, for example, to email marketing and to the use of certain cookies and similar technologies for analytics, personalisation and advertising.
Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
SHARING PERSONAL DATA
We share personal data with service providers and other third parties where necessary to operate our business, provide our services, fulfil orders, process payments, communicate with customers, analyse and improve our website, and carry out marketing activities where permitted.
Depending on how you interact with us and the choices and consents you have provided, recipients may include:
- E-commerce and technology providers, including Shopify, which provides the platform used to operate our online store.
- Marketing and communication providers, including Klaviyo, which we use to manage email marketing and related customer communications.
- Analytics and website optimisation providers, including Google and Hotjar, which help us understand how our website is used and improve its performance and user experience.
- Advertising providers, including Google, Meta and Microsoft, which we use for advertising, campaign measurement and related marketing activities where the required consent has been provided.
- Payment service providers, depending on the payment method available and selected at checkout.
- Warehousing, fulfilment and delivery providers, where necessary to prepare, dispatch and deliver your order or handle a return.
- Accounting, ERP and administrative service providers, where necessary for order administration, accounting and compliance with our legal obligations.
- Review service providers, including Trustpilot, where relevant in connection with invitations to provide feedback about your shopping experience.
- Professional advisers and public authorities, where disclosure is necessary to comply with applicable law, establish, exercise or defend legal claims, prevent fraud or protect our legal rights.
We only share personal data to the extent necessary for the relevant purpose and in accordance with applicable data protection law.
Some of our service providers may process personal data outside the European Economic Area (“EEA”). Information about international transfers is provided below.
Shopify
Our online store is hosted by Shopify. Shopify collects and processes personal data when you visit or make a purchase from our store in order to provide its services to us and to you.
We have enabled Shopify Network Intelligence, which allows Shopify to use information about your interactions with our store together with information from your interactions with Shopify and other merchants to provide and improve services, including personalised experiences, analytics and relevant advertising.
Information may be shared with Shopify and other third parties located in countries other than the country in which you live in order to provide these services.
Where required, the use of your data for personalised advertising and other non-essential purposes is subject to your consent.
You can learn more about how Shopify processes your personal data in the Shopify Consumer Privacy Policy. You can also visit the Shopify Privacy Portal to learn more about your privacy rights and how to exercise them in relation to Shopify.
COOKIES, ANALYTICS AND ADVERTISING
We use cookies and similar technologies, such as pixels, to operate our website, remember your preferences, understand how our website is used and, where you have provided the required consent, to measure and personalise advertising.
Some cookies and similar technologies are necessary for the website to function and may be used without your consent where permitted by applicable law. Other technologies, including those used for analytics, personalisation and advertising, are used only where the required consent has been provided.
We use CookiePilot to manage cookie preferences and consent on our website. You can change or withdraw your cookie consent at any time through the cookie settings available on our website.
Depending on your consent choices, we may use services provided by Google, Meta, Microsoft and Hotjar for purposes such as website analytics, understanding how visitors interact with our website, measuring advertising performance and delivering or improving relevant advertising.
For detailed and up-to-date information about the cookies and similar technologies used on our website, including their providers, purposes and duration, please refer to the cookie information available through our cookie settings.
EMAIL MARKETING AND PERSONALISATION
If you have consented to receive marketing communications from us, we may use your contact information to send you emails about GABBA products, collections, offers and other relevant news.
We use Klaviyo to manage our email marketing, marketing preferences and related customer communication.
Where the necessary consents have been provided, we may use information about your purchase history and your interactions with our marketing communications, such as whether you open an email or click on content, to understand the effectiveness of our communications, create customer segments and make the marketing you receive more relevant to you.
Where website behaviour is used for marketing or personalisation, this will only take place where the required consent to the relevant cookies or similar technologies has also been provided.
You can withdraw your consent to receive email marketing at any time by using the unsubscribe link included in our marketing emails. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
DATA RETENTION
We retain personal data only for as long as necessary for the purposes for which it was collected, or for as long as we are required to retain it under applicable law.
Order and transaction information that forms part of our accounting records is generally retained for the period required under applicable accounting and bookkeeping legislation.
Customer service correspondence and other personal data are retained for as long as reasonably necessary to handle the relevant enquiry, complaint or claim and, where appropriate, to establish, exercise or defend legal claims.
If you have consented to receive marketing communications, we may retain the information necessary to manage your marketing subscription and preferences until you withdraw your consent or unsubscribe. We may retain limited information after withdrawal where necessary to document your consent or ensure that your marketing preferences are respected.
Data collected through cookies and similar technologies is retained in accordance with the retention periods described in our cookie information.
When personal data is no longer necessary for the relevant purpose and we are not legally required to retain it, it will be deleted or anonymised.
FRAUD PREVENTION AND AUTOMATED PROCESSING
We use personal data to help prevent and detect fraud, unauthorised transactions and other misuse of our website and services.
For this purpose, we and our service providers may analyse information relating to orders and transactions, such as contact details, payment and billing information, IP addresses and other information associated with a transaction.
Our e-commerce and payment service providers may use automated systems and machine learning to identify potentially fraudulent or high-risk transactions.
Where required by applicable law, we will not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you, unless such processing is permitted by law and appropriate safeguards are in place.
INTERNATIONAL DATA TRANSFERS
Some of our service providers and their subprocessors may process personal data in countries outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we take steps to ensure that the transfer is made in accordance with applicable data protection law.
Depending on the destination and the service provider, transfers may be based on an adequacy decision adopted by the European Commission or on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or approved Binding Corporate Rules.
Where required, additional safeguards are implemented to ensure an appropriate level of protection for personal data.
You may contact us using the contact details provided in this Privacy Policy if you would like further information about the safeguards applicable to international transfers of your personal data.
YOUR DATA PROTECTION RIGHTS
Where applicable under data protection law, you have certain rights in relation to your personal data.
These may include the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data in certain circumstances;
- request restriction of the processing of your personal data in certain circumstances;
- receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, have it transferred to another data controller;
- object to the processing of your personal data where the processing is based on our legitimate interests; and
- withdraw your consent at any time where processing is based on consent.
You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
These rights may be subject to conditions and limitations under applicable law. For example, we may be required to retain certain information to comply with legal obligations even if you request its deletion.
To exercise any of your rights, please contact us at info@gabba.com. We may ask you to provide information necessary to verify your identity before responding to your request.
If you withdraw consent, this does not affect the lawfulness of processing carried out before the consent was withdrawn.
COMPLAINTS
If you have questions or concerns about how we process your personal data, we encourage you to contact us first at info@gabba.com so that we can try to resolve the matter.
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
Our supervisory authority in Denmark is:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby
Denmark
www.datatilsynet.dk
If you reside in another EU or EEA country, you may also have the right to lodge a complaint with the data protection authority in your country of residence.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our practices, services, technologies or applicable legal and regulatory requirements.
When we update this Privacy Policy, we will revise the “Last updated” date at the top of this page. Where required by applicable law, we will provide additional notice of material changes.
Last updated: 3/9/2026