Privacy Policy

PRIVACY POLICY

At Nordi Paw, we value your privacy and are committed to protecting
your personal data in accordance with the EU General Data Protection
Regulation (GDPR) and international privacy laws.

Last updated: 17.4.2026

––––––––––––––––––––––––––––––––––––––––––––––––
1. DATA CONTROLLER
––––––––––––––––––––––––––––––––––––––––––––––––

Nordi Paw 
Address: Liljatie 12 a, 01300, Vantaa, Finland
VAT number: FI31483906
Email: info@nordipaw.com

––––––––––––––––––––––––––––––––––––––––––––––––
2. WHAT DATA WE COLLECT
––––––––––––––––––––––––––––––––––––––––––––––––

When you place an order:
- Name
- Delivery and billing address
- Email address and phone number
- Payment details (processed securely by our payment providers —
  we never see or store your card number)

When you browse our website:
- IP address
- Browser type, language, and operating system
- Pages viewed, products clicked, and items added to cart
- Referral source (how you arrived on our site)
- Cookie identifiers (see section 7)

––––––––––––––––––––––––––––––––––––––––––––––––
3. HOW WE USE YOUR DATA AND LEGAL BASIS
––––––––––––––––––––––––––––––––––––––––––––––––

We process your data for the following purposes, each based on
a specific legal ground under GDPR Article 6:

Purpose: Processing and delivering your order
Legal basis: Contract (Article 6(1)(b))

Purpose: Customer service and order communication
Legal basis: Contract (Article 6(1)(b))

Purpose: Fraud prevention and security
Legal basis: Legitimate interest (Article 6(1)(f))

Purpose: Marketing emails and newsletters
Legal basis: Consent (Article 6(1)(a)) — you can withdraw at any time

Purpose: Website analytics and performance
Legal basis: Consent (Article 6(1)(a)) — managed via cookie banner

Purpose: Personalised advertising (Meta, Google, similar networks)
Legal basis: Consent (Article 6(1)(a)) — managed via cookie banner

––––––––––––––––––––––––––––––––––––––––––––––––
4. WHO WE SHARE YOUR DATA WITH
––––––––––––––––––––––––––––––––––––––––––––––––

We share only the data necessary for these services to function:

- Shopify (e-commerce platform, order management) — USA
- Shipping carriers (delivery of your order) — various
- Payment providers (secure payment processing) — EU/USA
- Email provider (order confirmations and marketing) — EU/USA
- Meta, Google (advertising and analytics — with your consent) — USA
- Review platforms (display of customer reviews, if applicable) — EU

We never sell your personal data to third parties.

International data transfers: Some of these service providers are
located outside the European Economic Area. When we transfer data
outside the EEA, we rely on legal safeguards such as Standard
Contractual Clauses approved by the European Commission.

––––––––––––––––––––––––––––––––––––––––––––––––
5. HOW LONG WE KEEP YOUR DATA
––––––––––––––––––––––––––––––––––––––––––––––––

- Order records: 6 years (accounting law requirement)
- Marketing subscriber data: Until you unsubscribe
- Website analytics: Up to 14 months
- Cookies: See section 7 for details

You can request earlier deletion of data that is not legally
required to keep. See section 6.

––––––––––––––––––––––––––––––––––––––––––––––––
6. YOUR RIGHTS
––––––––––––––––––––––––––––––––––––––––––––––––

Under GDPR, you have the right to:

- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to our processing of your data
- Request your data in a portable format
- Withdraw consent at any time
- Lodge a complaint with a data protection authority

To exercise any of these rights, email info@nordipaw.com. We'll
respond within 30 days.

If you believe we are not handling your data correctly, you also
have the right to contact the Finnish Data Protection Ombudsman:
tietosuoja.fi

––––––––––––––––––––––––––––––––––––––––––––––––
7. COOKIES
––––––––––––––––––––––––––––––––––––––––––––––––

We use cookies and similar technologies for:

- Essential site functionality (cart, checkout, login)
- Analytics (to understand how our website is used)
- Advertising (to show relevant ads on other websites)

When you first visit our website, a cookie banner lets you accept
or reject non-essential cookies. You can revisit this choice at
any time through "Cookie Settings" in our footer.

You can also manage cookies through your browser settings or by
using the Global Privacy Control (GPC) signal, which we honour
automatically.

See our "Your Privacy Choices" page for more details.

––––––––––––––––––––––––––––––––––––––––––––––––
8. CHILDREN'S PRIVACY
––––––––––––––––––––––––––––––––––––––––––––––––

Our website is intended for adults. We do not knowingly collect
data from children under 16. If you believe a child has submitted
data to us, please contact us and we will delete it.

––––––––––––––––––––––––––––––––––––––––––––––––
9. UPDATES TO THIS POLICY
––––––––––––––––––––––––––––––––––––––––––––––––

We may update this Privacy Policy occasionally. The most recent
version is always available on our website. Significant changes
will be communicated by email if you have an account with us.

––––––––––––––––––––––––––––––––––––––––––––––––
10. CONTACT
––––––––––––––––––––––––––––––––––––––––––––––––

For any privacy-related questions, email info@nordipaw.com.