Informativa sulla privacy

This Privacy Policy explains how nordal.shop collects, uses, stores, discloses, and otherwise processes personal information when you visit our website, purchase products, contact us, or otherwise interact with our online store.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with nordal.shop and our related e-commerce services.

For customers and visitors located in Italy and the European Economic Area, personal data is processed subject to applicable data protection legislation, including the General Data Protection Regulation where applicable.

2. Information We May Collect

Depending on how you interact with nordal.shop, we may collect:

Identity Information

This may include:

• Name;
• Billing name;
• Shipping recipient name.

Contact Information

This may include:

• Email address;
• Telephone number where provided;
• Billing and shipping information.

Order Information

This may include:

• Products purchased;
• Product quantities;
• Order number;
• Order value;
• Order history;
• Shipping method;
• Delivery status;
• Returns and refund information.

Payment Information

Payments may be processed by Shopify and third-party payment providers.

Depending on the payment method selected, payment providers may process card details, account details, transaction identifiers, billing information, fraud-prevention information, and related financial data.

nordal.shop does not necessarily receive or store complete payment card details.

Device and Usage Information

When you use our website, certain technical information may be collected automatically, including:

• IP address;
• Device type;
• Browser type;
• Operating system;
• Website interactions;
• Referral information;
• Session information;
• Cookie identifiers;
• Approximate location derived from technical information;
• Pages viewed;
• Shopping cart activity.

3. How We Use Personal Information

We may process personal information to:

• Process orders;
• Accept and administer payments;
• Deliver purchased products;
• Send order confirmations;
• Provide shipping and tracking information;
• Process returns and refunds;
• Respond to customer enquiries;
• Detect and prevent fraud;
• Protect website security;
• Maintain business and transaction records;
• Comply with tax, accounting, legal, and regulatory requirements;
• Improve website functionality;
• Analyze website performance;
• Personalize customer experience where permitted;
• Send marketing communications where legally permitted;
• Manage consent and privacy preferences;
• Establish, exercise, or defend legal claims.

4. Legal Bases for Processing

Where the GDPR applies, personal information may be processed on one or more of the following legal bases.

Performance of a Contract

We may process personal data where necessary to process an order, receive payment, deliver products, provide customer support, or otherwise perform our contractual obligations.

Legal Obligations

We may process personal data where necessary to comply with accounting, taxation, consumer protection, fraud prevention, record-keeping, regulatory, or other legal obligations.

Legitimate Interests

We may process information where necessary for legitimate business purposes, provided those interests are not overridden by the rights and interests of affected individuals.

Examples may include fraud prevention, cybersecurity, service improvement, business administration, and protecting legal rights.

Consent

Where required, we may rely on consent for certain marketing activities, advertising technologies, analytics tools, cookies, or other processing.

Consent may be withdrawn where applicable.

5. Shopify

Our online store is powered by Shopify.

Shopify provides the technology that enables us to operate the online storefront, checkout, order management functions, and related e-commerce services.

Shopify may process personal data in connection with these services according to its applicable contractual terms and privacy practices.

Depending on the processing activity, Shopify and other service providers may act as processors, service providers, or independent controllers as applicable.

6. Service Providers

We may share personal information with service providers where reasonably necessary to operate our business.

These may include:

• Shopify;
• Payment processors;
• Shipping carriers;
• Fulfilment providers;
• Hosting and infrastructure providers;
• Customer support providers;
• Analytics providers;
• Fraud prevention services;
• Security providers;
• Marketing providers where permitted;
• Professional advisers;
• Tax and accounting providers.

We share only information reasonably necessary for the relevant purpose and subject to applicable data protection requirements.

7. Legal Disclosures

Personal information may be disclosed where reasonably necessary to:

• Comply with applicable law;
• Respond to valid legal processes;
• Comply with court orders;
• Cooperate with regulatory authorities;
• Investigate fraud;
• Protect customers;
• Protect nordal.shop;
• Enforce contractual rights;
• Establish or defend legal claims.

8. Business Transactions

If all or part of our business is involved in a merger, acquisition, restructuring, financing transaction, sale, or transfer of assets, personal information may be disclosed or transferred as part of the transaction where permitted by law.

9. Cookies and Tracking Technologies

nordal.shop may use cookies and similar technologies to operate the website and provide online services.

Cookies may be used for purposes such as:

• Shopping cart functionality;
• Checkout;
• Authentication;
• Security;
• Remembering preferences;
• Website analytics;
• Measuring performance;
• Advertising and marketing where permitted.

Where consent is legally required for non-essential cookies or tracking technologies, such technologies should be activated only in accordance with applicable consent requirements.

The Italian Data Protection Authority publishes specific guidance concerning cookies and other tracking technologies.

10. Marketing Communications

Where legally permitted, nordal.shop may send marketing communications to customers who have provided the necessary consent or where another valid legal basis exists.

Customers may unsubscribe from marketing emails using the unsubscribe mechanism provided in the relevant communication or by contacting:

info@nordal.shop

Unsubscribing from marketing does not prevent us from sending transactional communications relating to active orders, payments, returns, refunds, security, or other service-related matters.

11. International Data Transfers

Some service providers may process personal data in countries outside Italy or the European Economic Area.

Where applicable law requires safeguards for international transfers, appropriate mechanisms may be used, including adequacy decisions, standard contractual clauses, or other lawful safeguards.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• Providing purchased products and services;
• Maintaining transaction records;
• Complying with legal obligations;
• Resolving disputes;
• Preventing fraud;
• Enforcing agreements.

Retention periods may vary depending on the category of information and applicable legal requirements.

13. Data Security

We use reasonable organizational and technical measures designed to protect personal information from unauthorized access, disclosure, alteration, destruction, or misuse.

No internet-based system can guarantee absolute security. Customers should protect account credentials and contact us if they suspect unauthorized activity.

14. Your Privacy Rights

Where the GDPR applies, individuals may have rights including:

• The right to request access to personal data;
• The right to request correction of inaccurate personal data;
• The right to request deletion in applicable circumstances;
• The right to request restriction of processing;
• The right to data portability where applicable;
• The right to object to certain processing;
• The right to withdraw consent where processing is based on consent;
• Rights relating to certain automated decision-making where applicable;
• The right to lodge a complaint with a competent supervisory authority.

Requests may be submitted to:

info@nordal.shop

We may request reasonable information to verify identity before fulfilling certain privacy requests.

15. Italian Supervisory Authority

Individuals in Italy may have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali, the Italian data protection supervisory authority.

16. Children's Privacy

nordal.shop is intended for individuals legally capable of entering into online transactions or persons acting with appropriate parental or guardian authorization.

We do not knowingly seek to collect personal information from children contrary to applicable law.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, services, technology, or legal obligations.

The updated version will be published on nordal.shop with an appropriate effective or revision date.

18. Contact Us

Questions concerning this Privacy Policy or requests relating to personal information may be sent to:

nordal.shop
Email: info@nordal.shop