Last updated: 16 October 2026
1. Who we are
Hyperspend is a brand of BigeDirect ApS (CVR 43762125), Nannasgade 28, st., 2200 København N, Denmark. We are the data controller for the personal data described in this policy.
Questions about your data: support@bigedirect.com.
2. What data we collect
When you contact us or apply as a partner (contact, merchant, distributor, introducer and "find a retailer" forms):
- name, email address, company name and website, and anything you write in the form;
- the country your request came from, based on your IP address.
When you buy a voucher:
- your email address, the voucher amount and currency, and the order and voucher reference;
- payment details needed to process the payment, including your name and billing address, which go to our payment provider. Your card is processed by our payment provider; we do not receive or store your full card number;
- for purchases above EUR 200, identity information needed for the identity check.
When you use our website:
- technical data such as IP address, browser type and the pages requested, kept in server logs by our hosting provider for security and troubleshooting.
3. Why we use your data, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Selling and delivering vouchers, refunds and customer support | Contract (Art. 6(1)(b)) |
| Identity checks, anti-money-laundering and fraud prevention | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
| Bookkeeping and accounting | Legal obligation (Art. 6(1)(c)), Danish Bookkeeping Act |
| Answering enquiries and partner applications | Legitimate interests (Art. 6(1)(f)), or steps before entering a contract (Art. 6(1)(b)) |
| Keeping the website secure | Legitimate interests (Art. 6(1)(f)) |
We do not sell your data, and we do not use it for advertising.
4. Who we share it with
We use trusted service providers who process data on our behalf:
- our website hosting and database provider;
- our email delivery provider, for emails such as your voucher PIN;
- our payment service providers, for card payment processing;
- our identity verification provider, for identity checks on purchases above EUR 200;
- our accountants, auditors and legal advisers, where needed.
We share data with partner merchants only as needed to process a redemption (for example, confirming a voucher is valid). We may share data with authorities where the law requires it.
5. Transfers outside the EU/EEA
Some providers (such as our hosting and email delivery providers) may process data outside the EU/EEA, including in the United States. Where they do, we rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Partner and contact form submissions: up to 2 years after our last contact, unless they lead to an agreement.
- Voucher purchase and transaction records: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act.
- Identity check data: as long as anti-money-laundering rules require.
- Server logs: a short period, normally no more than 30 days.
7. Your rights
You have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased, where we no longer need it or have no legal basis to keep it;
- restrict or object to our processing, where the GDPR allows;
- receive your data in a portable format, where the GDPR allows.
To use any of these rights, email support@bigedirect.com. We reply within one month.
You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.
8. Automated decisions
We use automated checks to help detect fraud, such as purchase limits per card. If an automated check blocks your purchase, you can contact us to have it reviewed by a person.
9. Cookies
See our Cookie Policy.
10. Changes
We may update this policy. The latest version is always available on this page.