Privacy policy

1. Who we are

NORDIC HS LTD is the controller of the personal information described in this policy. Company number: 17467932. Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. For privacy enquiries or requests relating to your personal information, contact info@nordic-hs.com.

2. Information we collect

Depending on how you use the website, we may collect your name, email address, telephone number, delivery address, order details, product enquiries, promotional or affiliate code used, correspondence with us, stock-notification requests and information you voluntarily provide through our forms or WhatsApp contact.

We may also receive limited technical information needed to operate and secure the website, such as IP address, browser/device information, timestamps, form-submission metadata and security or anti-spam information generated by our hosting and form providers.

3. How we use your information

We use personal information to respond to enquiries; process, review and administer order requests; send order confirmations, invoices and payment instructions; arrange delivery; provide customer support; send requested stock-availability notifications; administer promotional and affiliate codes; maintain appropriate transaction and business records; prevent misuse, fraud and security incidents; comply with legal, regulatory, tax and accounting obligations; and establish, exercise or defend legal claims where necessary.

4. Our lawful bases

We process information where it is necessary to take steps at your request before entering into a contract or to perform a contract with you, for example when reviewing an order request and arranging an accepted order. We also process information where necessary to comply with legal obligations and, where appropriate, for our legitimate interests in operating, securing and administering Nordic HS, handling customer service, maintaining business records and protecting our legal rights. Where the law requires consent for a particular activity, we will rely on consent and you may withdraw it at any time.

5. Orders and payments

When you proceed to payment, you are redirected to Stripe-hosted Checkout. Stripe processes payment information, fraud-prevention information and the contact and delivery information required to complete the transaction. We receive order, payment-status, contact and delivery information from Stripe, but we do not receive or store your full card number. We use order information to fulfil the purchase, provide support, handle refunds or disputes and maintain legally required business records.

6. Stock notifications and contact forms

If you request a stock notification, we use the email address supplied to manage that request and contact you about the relevant product. Information submitted through the contact form is used to respond to and administer your enquiry. We do not treat a customer-service enquiry or stock request as consent to unrelated electronic marketing.

7. Who we share information with

We use service providers where reasonably necessary to operate the business. These include Netlify for website hosting and form processing, Stripe for payment processing and fraud prevention, and Resend for transactional order emails. We may also share relevant information with delivery or postal providers, professional advisers, IT/security providers and accounting or record-keeping services. We may disclose information where required by law or where reasonably necessary to protect our rights, customers, systems or business.

Service providers process information under their own applicable terms and privacy arrangements and, where relevant, on our instructions as service providers.

8. International transfers

Some technology or communications providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism or rely on another permitted basis for the transfer.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, tax, accounting, dispute-resolution and record-keeping requirements. Enquiries that do not lead to an order are periodically reviewed and deleted when no longer required. Order, invoice and transaction records are normally retained for up to six years, or longer where required for tax, accounting, dispute-resolution or other legal purposes. Stock-notification details are retained only while reasonably necessary to administer the notification or until the request is withdrawn.

10. Security

We take reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. No internet-based service can guarantee absolute security, but access to personal information is limited to those who reasonably need it for legitimate business purposes.

11. Cookies, local storage and similar technologies

The website may use browser storage or similar technology where necessary to provide functionality requested by you. For example, the shopping cart and promotional-code functionality may store information in your browser so that your selections can be retained while you move between pages.

We do not currently intend to use advertising or behavioural-tracking cookies. If we introduce analytics, advertising pixels or other non-essential tracking technologies, this policy and our cookie information will be updated and appropriate consent controls will be implemented where required.

12. Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to request access to your personal information, correction of inaccurate information, deletion, restriction of processing, objection to certain processing and portability of information. Where processing relies on consent, you may withdraw that consent without affecting processing that took place before withdrawal.

To exercise a right, contact info@nordic-hs.com. We may need to verify your identity before acting on a request.

13. Complaints

Please contact us first if you have a concern about how we handle personal information so that we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO), the UK's data-protection regulator.

14. Children

This website and its products are intended for purchasers aged 18 or over. We do not knowingly seek to collect personal information from children through the website.

15. Automated decision-making

We do not currently use personal information submitted through this website to make solely automated decisions that produce legal or similarly significant effects.

16. Changes to this policy

We may update this privacy policy when our services, suppliers, data uses or legal obligations change. The current version will be published on this page with an updated revision date.

17. Contact

For privacy questions or data-rights requests, email info@nordic-hs.com.