Privacy policy
Last updated: 1 August 2026
This privacy policy explains how Sushi Joint / Victoria ApS processes personal data when you visit the website, order food, reserve a table or contact us.
1. Data controller
Sushi Joint / Victoria ApS
CVR no. 42429716
Amager Strandvej 140B, 2300 København S
Phone: 93 89 06 22
Email: kontakt@sushi-joint.dk
2. What information do we process?
Depending on your contact with us, we may process:
- your name, address, email and phone number;
- your order, products, extras, amount, delivery or collection details and order number;
- reservation details, number of guests, time and special requests;
- payment status and limited payment references — not full card details;
- correspondence, complaints and information you send us;
- your IP address, device and browser information and technical log data;
- information about your use of the website and your cookie choices.
Do not enter sensitive information in an ordinary comments field. Depending on the circumstances, allergy information may constitute health data. Only provide it when necessary to handle your order or reservation.
3. Purposes and legal bases
- Orders and reservations: To enter into and perform our agreement with you, including confirmation, preparation, delivery, payment and customer service.
- Accounting and documentation: To comply with bookkeeping, tax and other legal obligations.
- Operation and security: To operate, protect and troubleshoot the website and prevent misuse, based on our legitimate interest in secure operation.
- Statistics and improvements: To understand overall use of the website, based on consent where required.
- Newsletters and marketing: Based on your consent. You can withdraw your consent at any time.
- Allergy information: When you provide the information yourself to protect your or another person’s vital interests and to handle your specific order.
4. Recipients and data processors
We may share relevant information with suppliers who help us provide our services, for example:
- hosting, WordPress/WooCommerce and technical operations providers;
- Flatpay for processing card payments;
- SMS and communications providers, including BulkGate, for order or reservation messages;
- email and newsletter providers, including MailPoet, when that function is used;
- the analytics provider behind the self-hosted Matomo solution;
- delivery, accounting and advisory providers where necessary;
- public authorities where we are legally obliged to do so.
Providers may only process information as agreed and for the stated purposes, unless they act as independent data controllers, such as a payment provider for parts of the payment processing.
5. Transfers outside the EU/EEA
Some technical third-party services, such as Google Maps or external fonts, may involve processing outside the EU/EEA. Where this happens, a valid transfer mechanism is used, such as the European Commission’s standard contractual clauses or an approved certification scheme.
6. Retention
- Order and accounting information is generally retained for five years from the end of the relevant financial year where bookkeeping rules require it.
- Reservation and customer service information is deleted or anonymised when no longer necessary, unless it forms part of an ongoing matter.
- Newsletter information is retained until you unsubscribe, and evidence of consent may be retained for a necessary period.
- Technical logs are retained only as long as necessary for operation, security and troubleshooting.
7. Your rights
Under data protection rules, you may have rights of access, rectification, erasure, restriction, data portability and objection. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing.
Contact kontakt@sushi-joint.dk. We may ask for information necessary to verify your identity.
8. Complaints
Please feel free to contact us first. You also have the right to complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby.
9. Cookies
Read about the website’s cookies, purposes and third-party services in our cookie policy.
10. Changes
This policy may be updated when the website, our providers or the rules change. The current version is always available on this page.

