Privacy policy

This Privacy Policy explains how NORDSIA collects, uses and protects your personal information when you use our website and services.

Last updated: 29 October 2026

Data controller

• Company: NORDSIA
• Contact: contact@nordsia.fr

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and, for customers in the United Kingdom, the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

Information we collect

Depending on how you use our services, we may collect:

• Contact details: name, address, phone number, email address
• Payment information: card details, PayPal account, transaction details (handled through Shopify and its secure payment providers; we never store your full card details)
• Account information: username, password, preferences
• Purchase history: products viewed, added to basket, ordered or returned
• Technical data: IP address, device type, browser, cookies, browsing logs
• Communications: emails or calls with our customer service team

How we collect information

• Directly from you (orders, account creation, contact form)
• Automatically as you browse (cookies, analytics tools)
• Through Shopify and our service providers (payment, delivery, marketing)

How we use your information

We use your data to:

• Process your orders, payments and deliveries
• Manage your customer account and preferences
• Communicate with you (emails, customer service, notifications)
• Personalise your shopping experience
• Send you promotional offers (only if you have given your consent)
• Keep our services secure and prevent fraud
• Comply with our legal and accounting obligations

Legal bases for processing

• Performance of a contract: to process and deliver your orders and manage your account
• Consent: for marketing emails and non-essential cookies (advertising and analytics)
• Legitimate interests: to improve our website, keep it secure and prevent fraud
• Legal obligation: to meet our accounting, tax and legal requirements

Sharing your information

Your information may only be shared with:

• Shopify (store hosting and e-commerce infrastructure)
• Payment providers (Shopify Payments, PayPal, Klarna, etc.)
• Carriers (to deliver your orders)
• Marketing and advertising partners (Google, Meta, etc.), only if you have given your consent
• Public authorities, where required by law

We never sell your data to third parties.

Shopify and international transfers

Our store is hosted by Shopify, which operates in Canada and the United States. This means your data may be transferred outside the United Kingdom and the European Union.

These transfers are protected by appropriate safeguards, such as adequacy decisions, standard contractual clauses and, for UK data, the UK International Data Transfer Addendum.

You can read Shopify's privacy policy here: https://www.shopify.com/legal/privacy

How long we keep your data

• Account data: for as long as your account is active
• Order data: for the legally required period (10 years for accounting and tax purposes)
• Marketing data: until you unsubscribe or withdraw your consent

Cookies and similar technologies

We use cookies to:

• Make the website work properly (login, basket, checkout)
• Analyse traffic and improve your experience
• Show you personalised advertising

We use certain services provided by Google (Google Analytics, Google Ads, Google Tag Manager). These services may automatically collect information through cookies or similar technologies to measure audiences, personalise advertising and improve our website.

Non-essential cookies are only used with your consent. You can accept, reject or change your choices at any time through our cookie banner or your browser settings.

Your rights

Under data protection law, you have the following rights:

• Right of access: to obtain a copy of your data
• Right to rectification: to correct your information
• Right to erasure: to ask us to delete your data
• Right to restrict processing: to limit how we use your data
• Right to object: to refuse the use of your data for marketing purposes
• Right to data portability: to receive your data in a readable format
• Right to withdraw consent: at any time, where processing is based on consent

To exercise your rights, contact us at contact@nordsia.fr. We will respond within one month.

If you are based in the United Kingdom and are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk.

Security

We take all appropriate measures to protect your information. However, no system is 100% secure. We recommend that you keep your login details safe and avoid using unsecured networks when shopping.

Children's data

Our website and services are not intended for children. We do not knowingly collect information about anyone under the age of 16.

Changes to this policy

We may update this policy at any time to reflect legal or technical changes. The date of the last update is shown at the top of this page.

Contact

For any question about this Privacy Policy or to exercise your rights:

NORDSIA
contact@nordsia.fr