Last updated 25 October 2026
This explains what personal data thebaggpack.com handles, why, and what rights you have. The short version: I collect only what’s needed to take payment and deliver your download.
Who is responsible
- Mathias B. Nielsen, trading as BAGG
- Denmark
- Email: [email protected]
- Instagram: @bagg.beats
What I collect and why
- When you buy: your name, email address, billing country and payment details are collected by Stripe at checkout. I receive the order details (such as your name, email, the amount and the date) and never see your full card number. I use them to deliver your download, send a receipt, handle support and keep accounts. Legal basis: performing the sale, and my legal duty to keep accounting records.
- When you download: the site asks Stripe to confirm that your order was paid before it hands over the file. Nothing else about you is stored.
- When you ask for your download again: the email address you enter is used to look up your order in Stripe and to send you a link. To stop repeated requests, a one-way scrambled version (hash) of the address is kept for 10 minutes. The form uses Cloudflare Turnstile to block bots.
- When you browse: Cloudflare, which hosts this site, processes technical data such as your IP address to deliver pages and protect against abuse. Legal basis: my legitimate interest in running a secure website.
- When you email or message me: I keep the messages and your contact details so I can answer you.
Cookies and tracking
This site sets no cookies of its own and uses no analytics or advertising trackers. Stripe’s checkout and Cloudflare may set technical cookies that are needed for payment and security.
Who else handles your data
- Stripe processes payments and sends receipts. It has its own privacy policy.
- Cloudflare hosts the site, stores the download file, and runs Turnstile.
- Resend delivers the emails that contain your download link.
These providers may process data outside the EU/EEA, under safeguards such as the EU Standard Contractual Clauses. I don’t sell your data or share it for marketing.
How long I keep it
Order and accounting records are kept for as long as bookkeeping law requires (in Denmark, five years after the end of the financial year). Support messages are deleted when they’re no longer needed.
Your rights
You can ask to see the data I hold about you, have it corrected or deleted, restrict or object to how it’s used, or receive a copy. Some records I’m required to keep, so I can’t always delete them. To use any of these rights, email [email protected]. You can also complain to your national data protection authority; in Denmark that’s Datatilsynet (datatilsynet.dk).
Changes
If this policy changes, the new version will be published here with a new date.