Privacy Policy

How we handle your data

Last updated: May 2026. Compliant with EU GDPR (Regulation 2016/679).

What we collect

  • Order data: name, email, phone, shipping/billing address, payment card details (stored by our PCI-compliant payment processor, not by us).
  • Account data (if you create an account): email, password (hashed), order history, saved addresses, wishlist.
  • Usage data: pages visited, products viewed, referring URL, browser info — collected via cookies for analytics and improvement.
  • Marketing preferences: if you sign up for our newsletter, we store your email and consent record.

Why we collect it

  • To fulfil your orders (legal basis: contract).
  • To improve the site and products (legal basis: legitimate interest, for anonymised analytics).
  • To send you marketing (legal basis: your consent, withdrawable anytime).
  • To comply with tax and customs laws (legal basis: legal obligation).

Who we share it with

  • Shipping carriers (PostNL, DHL, DPD) — to deliver your order.
  • Payment processors (Stripe, Klarna, PayPal, Mollie) — to process payments.
  • Email and analytics tools (Shopify, Google Analytics, Klaviyo) — under data processing agreements.

We never sell your data.

Your rights under GDPR

  • Access — request a copy of all data we hold on you.
  • Rectification — ask us to correct anything that's wrong.
  • Erasure — ask us to delete your data ("right to be forgotten").
  • Portability — receive your data in a machine-readable format.
  • Objection — opt out of marketing at any time.
  • Restriction — limit how we process your data.

Email privacy@nordaa.com to exercise any of these rights. We respond within 30 days.

How long we keep data

  • Order records: 7 years (required by tax law).
  • Account data: until you delete your account.
  • Marketing data: until you unsubscribe.
  • Analytics data: 14 months maximum.

Cookies

We use cookies for essential site functions (remembering your cart, login state) and, with your consent, for analytics and marketing. See our cookie banner to manage your choices.

Data Protection contact

For any data-related concern: privacy@nordaa.com

You also have the right to lodge a complaint with your national data protection authority (in the Netherlands: Autoriteit Persoonsgegevens).