Skip to content
  1. A new chapter from the man behind Falafel Factory

Privacy policy

Privacy and cookie policy

Last updated: 20 October 2026

This is an English translation of our Danish privacy and cookie policy. If the two versions differ, the Danish version applies.

Here you can read which personal data Kubideh processes when you visit kubideh.dk, write to us or order catering – and what rights you have.

1. Data controller

SSG HOLDING 2009 ApS, which operates Kubideh
CVR 32442064
Nørrebrogade 63, 2200 Copenhagen N, Denmark
Email: kontakt@kubideh.dk · Phone: +45 28 83 66 33

2. What data we process, and why

When you visit kubideh.dk. Shopify, which runs our website, processes technical data such as your IP address, browser, device and the pages you visit. This is necessary to show the site and protect it against misuse. The legal basis is our legitimate interest in a secure website that works (Article 6(1)(f) of the General Data Protection Regulation). We only use cookies for analytics and marketing with your consent – see section 6.

When you write to us or call us through the contact or catering form, by email or by phone, we process the information you give us: your name, email, phone number and your message. For catering also the date, time, number of guests and any wishes for the food.

  • Purpose: to answer your enquiry, give you an offer and carry out a catering agreement.
  • Customer records: when you send a form, you are created as a customer in our customer records at Shopify, so we can keep track of your enquiry and any catering agreement.
  • Legal basis: Article 6(1)(b) (preparing and performing an agreement, e.g. a catering offer) and Article 6(1)(f) (our legitimate interest in answering enquiries).

Allergies for catering. Please just tell us which allergens are involved and how many portions – not who they concern. If you still give us information about a person's health (e.g. an allergy), we only use it to prepare the food safely. The legal basis is your explicit consent (Article 9(2)(a)), and we delete the information when the catering is completed.

Newsletter and marketing. We only send you news and offers if you have actively said yes by ticking the box. The legal basis is your consent (Article 6(1)(a)). Our emails are sent through Shopify, which can register whether an email is opened and whether links are clicked, so we can see what works. You can unsubscribe at any time through the link in our emails or by writing to us.

When you visit the restaurant. If you pay by card, the payment is processed by our payment provider, and we do not receive your full card details. If you ask for a receipt by email, we only use your email to send it.

Accounting. We keep information about agreements and payments because the Danish Bookkeeping Act requires it (Article 6(1)(c)).

3. Who we share data with

We never sell your data. We use the following suppliers (data processors), who process data on our behalf:

  • Shopify International Ltd. (Ireland) – website, forms, customer records and emails. Shopify may transfer data to Shopify Inc. in Canada, which the European Commission has found to provide an adequate level of protection, and to sub-processors in other countries, e.g. the USA, on the basis of the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
  • Simply.com A/S (Denmark) – email and domain.

Other data controllers:

  • Meta Platforms Ireland Ltd. – only if you accept marketing (see section 6). Meta may transfer data to Meta Platforms Inc. in the USA under the EU-US Data Privacy Framework.
  • Shopify also uses information about your use of the site together with other Shopify data to improve its services, advertising and personalisation (Shopify Network Intelligence). Here Shopify is itself the data controller under its own privacy policy at privacy.shopify.com.

Apart from this, we only share data with e.g. our accountant, advisers or the authorities when the law requires it, or when it is necessary to establish, exercise or defend a legal claim.

4. How long we keep data

  • We delete enquiries and information in our customer records no later than 24 months after our last contact with you, unless we have an agreement with you.
  • We delete information about allergies when the catering is completed.
  • We keep information about agreements and payments for 5 years after the end of the financial year they relate to (Danish Bookkeeping Act).
  • We keep your newsletter subscription for as long as you are subscribed. We keep documentation of your consent for up to 2 years after you have unsubscribed.
  • Cookies are usually stored from the length of the session up to one year, depending on the type. You can always delete them in your browser.

5. Your rights

You have the right to access the data we process about you and to have it corrected or deleted. You can also object to the processing, have it restricted and receive your data (data portability). If you have given consent, you can always withdraw it – this does not affect the processing before you withdrew it. Write to kontakt@kubideh.dk, and we will reply within one month at the latest.

We do not use your data for automated decisions.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk.

6. Cookies

When you visit kubideh.dk, small files (cookies and similar technologies) are stored in your browser. The first time you visit the site, we ask for your consent, and you can always change or withdraw your choice through the "Cookie settings" link at the bottom of the page.

The categories are the same as in our cookie banner:

  • Required (no consent needed): make the site work, e.g. language, security and remembering your cookie choice. Provided by Shopify (e.g. _shopify_essential, localization and _tracking_consent). We also remember in your browser whether you have closed the welcome message from Kubideh, so it is not shown again.
  • Personalisation (only with consent): remembers your choices on the site to make your next visit easier.
  • Analytics (only with consent): Shopify measures how the site and our forms are used, so we can improve them.
  • Marketing (only with consent): Meta (Facebook/Instagram) measures the effect of our ads and may show you relevant ads. Information about your visit is sent to Meta from your browser (Meta Pixel) and from Shopify's servers (Meta's Conversions API). For the collection and transfer to Meta, we and Meta are joint data controllers; Meta's further processing follows Meta's own privacy policy. Shopify may also use marketing cookies, see section 3.

The map of our address is an image on our own site and sets no cookies. If you click the link to Google Maps, Google's privacy policy applies. Videos are played from Shopify's servers. Links to Facebook and Instagram are ordinary links and set no cookies until you click them.

7. Security

The site uses an encrypted connection (HTTPS), and only the people who need your data have access to it.

8. Changes

We update this policy when things change. The latest version is always here.