Privacy Policy
What this is
Flamant Emporista helps you find things worth buying, based on your taste — not on what brands have paid to promote. This policy explains what data we collect, why we collect it, and what you can do with it.
We are required by EU law to document this clearly. We've tried to write it like human beings.
Who we are
Flamant ApS
Copenhagen, Denmark
hello@flamant.dk
We are the data controller for your personal data under the EU General Data Protection Regulation (GDPR).
What we collect and why
Your account
When you create an account, we store:
- Your email address
- Your hashed password (we never see your actual password)
- The date you created your account
Why: To let you log in and to tie your taste profile to you. Legal basis: contract (Art. 6(1)(b) GDPR).
Your taste profile
When you interact with the product — rating things, saving items, dismissing suggestions — we record those signals and build a taste profile from them. This is the core of what the product does.
This includes:
- Items you've saved
- Things you've liked or disliked
- Products you've clicked through to buy
Why: To improve recommendations over time. Your taste data never leaves Flamant to be used for advertising. Legal basis: explicit consent (Art. 6(1)(a) GDPR). You will confirm this at signup.
Consent records
When you sign up, we record that you consented — the date, the version of this policy you agreed to, and a hash of your email address. This record is retained even after you delete your account, because it is the evidence of your original consent. It is anonymised — your account no longer exists, but the consent record is kept as a legal document.
Legal basis: legal obligation (Art. 5(2) GDPR).
Affiliate click data
When you click through to a retailer and make a purchase, we earn a small commission. To make this work, we record which product link you clicked and when.
We store:
- Which product you clicked
- When you clicked it
- Your anonymised user ID (not your email or name)
We retain this for up to 1 year. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — specifically, operating a sustainable business model that doesn't rely on advertising.
What we do NOT collect
- We do not track your behaviour across other websites
- We do not sell your data
- We do not use your data to train advertising models
- We do not use third-party advertising cookies
- We do not share your taste profile with retailers or brands
Cookies
We use one first-party session cookie to keep you logged in. Nothing else.
If a retailer's affiliate network requires a tracking cookie when you click through (to attribute your purchase back to Flamant so we receive our commission), that cookie is set by the retailer's domain, not ours. See the Cookie Policy for the full list of affiliate partners and their cookie policies.
Where your data lives
All data is stored in the European Union. Our database provider is Supabase (Frankfurt region, AWS eu-central-1). No personal data leaves the EU.
How long we keep your data
| Data type | How long |
|---|---|
| Your account and taste profile | Until you delete your account |
| Feedback signals (likes, dislikes) | Up to 2 years, or until you delete your account |
| Affiliate click data | Up to 1 year, or until you delete your account |
| Consent records | Indefinitely — anonymised proof of your original consent |
| Deletion audit log | Indefinitely — proof that we deleted your data when asked |
Your rights
Under GDPR, you have the right to:
Access your data. You can request a copy of everything we hold about you. Email hello@flamant.dk with the subject line "Data access request."
Delete your account. You can delete your account and all associated data from the account settings screen. Deletion is permanent and immediate. We retain only the anonymised consent record and deletion audit log described above.
Correct inaccurate data. If something we hold about you is wrong, email us and we'll fix it.
Object to processing. If you believe we are processing your data unlawfully, email us. You also have the right to complain to your national data protection authority.
Data portability. You can request your taste profile data in a structured format. Email hello@flamant.dk.
Changes to this policy
If we make material changes, we will ask you to review and re-confirm your consent before collecting new data under the updated terms. We will not retroactively apply material changes without your consent.
The version number at the top of this document changes whenever the policy changes. The date it took effect is listed alongside it.
Contact
For any question about your data:
hello@flamant.dk
For formal complaints in Denmark:
Datatilsynet — www.datatilsynet.dk