Privacy Policy

Last updated: 21 January 2025

Welcome to Norden. This Privacy Policy explains how we collect, use, disclose and protect your personal data when you visit or use https://wearnorden.com (the "Site") and when you purchase our products. We have written this in plain English and in accordance with UK law and good industry practice for luxury apparel retailers.

1. Who we are

Controller: Norden (trading as "Norden").

Contact email: contact@norden.com

Registered office / address: 5401 S Kirkman Rd, Orlando, FL 32819, USA.

Opening hours for enquiries: 9:00 — 18:00, Monday to Friday (local time).

If you have any questions about this policy or our data practices, please contact us at the email above. This policy supplements any additional notices that may appear at the point we collect personal data (for example during checkout or when signing up for marketing).

2. The personal data we collect

We may collect and process the following categories of personal data:

• Identity & account data: name, title, date of birth (if provided), account username and password.
• Contact data: billing and delivery address, email address, telephone number.
• Transaction data: purchase history, payment method (payment card details are processed by our payment provider and we do not store full card numbers).
• Technical & usage data: IP address, device and browser type, pages visited, referral source, cookies and similar tracking data.
• Marketing & communications data: preferences and consents for receiving marketing communications.
• Customer service data: correspondence and any records of queries, returns or complaints.

We collect most of the above directly from you when you provide information on our Site or contact our customer service. We also obtain some information automatically through cookies and similar technologies. See our Cookies section below for details.

3. How we use your personal data (purposes & lawful bases)

We only process personal data where we have a lawful basis to do so under the UK GDPR. Typical lawful bases we rely on include:

• Performance of a contract (to fulfil your orders, deliver goods, process payments and handle returns).
• Legal compliance (to comply with financial, tax or other legal obligations).
• Legitimate interests (for fraud prevention, improving our Site, analytics, and direct marketing where we have balanced our interests with yours).
• Consent (where we ask for your clear permission for things such as marketing emails or non-essential cookies).

Examples of specific uses:

• Process and deliver your orders, manage payments and refunds.
• Provide customer support and respond to enquiries.
• Send transactional messages such as order confirmations and delivery updates.
• Send marketing communications where you have consented or where we reasonably rely on legitimate interest — you can opt out at any time.
• Personalise and improve our Site, products and communications (analytics, A/B testing).
• Detect and prevent fraud and abuse.

4. Cookies and tracking technologies

We use cookies and similar technologies to operate and improve our Site, remember preferences, provide personalised content and advertising, and measure performance. Some cookies are strictly necessary; others require your consent.

When you first visit the Site you will be asked to accept cookies. You can change your choices via our cookie banner or your browser settings. For details of the categories of cookies we use and their purposes, see our separate Cookie Policy.

5. Sharing your personal data

We may share personal data with third parties only where necessary and under contractual safeguards, including:

• Payment processors and fraud prevention providers.
• Delivery and logistics partners (to fulfil orders).
• Marketing and analytics providers (where you have consented or allowed by legitimate interests).
• IT and hosting providers who store and back up data on our behalf.
• Professional advisers and regulators where required by law.

We require these providers to keep your data secure and only use it for the purposes we specify. Where required by law, we will provide further information about the categories of recipients and the purpose of transfers.

6. International transfers

Some of our service providers may transfer or access personal data outside the UK. Where such transfers occur we implement appropriate safeguards (for example, standard contractual clauses, adequacy decisions, or other measures permitted under UK GDPR) to ensure an adequate level of protection. If you would like details of the safeguards we use, please contact contact@norden.com.

7. How long we keep your data (retention)

We retain personal data only for as long as necessary for the purpose for which it was collected, including to comply with our legal obligations, resolve disputes and enforce our agreements. Typical retention periods:

• Order and transactional data: retained for the period required for tax and accounting purposes (usually up to 6 years).
• Account information: retained while your account is active and for a reasonable period after inactivity.
• Marketing consents & preferences: retained until you withdraw consent or request deletion.

If you would like details about retention for a specific category of data, contact contact@norden.com.

8. Your rights

Under the UK GDPR you have rights in relation to your personal data, including:

• The right to be informed about how your personal data is used.
• The right of access to a copy of your personal data.
• The right to rectification of inaccurate data.
• The right to erasure (the "right to be forgotten") in certain circumstances.
• The right to restrict or object to processing, including profiling and direct marketing.
• The right to data portability where processing is based on consent or contract and carried out by automated means.
• The right to withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, please contact contact@norden.com. If you are not satisfied with our response you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK: ico.org.uk.

9. Security

We apply industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, misuse or destruction. These measures include secure hosting, encryption (for data in transit), access controls and regular security reviews. While we take reasonable steps to protect data, no internet transmission is completely secure — please take care with your account details.

10. Children

Our Site is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have unintentionally collected data from a child under 16, please contact us at contact@norden.com and we will promptly delete the data where required.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes we will highlight them on the Site and update the "Last updated" date at the top of this page.

12. Contact & supervisory authority

If you have any questions, requests or a complaint about our privacy practices please contact:

Email: contact@norden.com

Phone: +55 (61) 9022-7350

Address: 5401 S Kirkman Rd, Orlando, FL 32819, USA

Opening hours: 9:00 — 18:00, Monday to Friday (local time)

This policy is modelled on typical privacy notices published by major luxury outerwear retailers and summarises standard fair processing principles used in the UK e-commerce sector. For legal certainty, consider asking a qualified lawyer to review this policy and to add your company number and any processor-specific details (payment providers, shipping partners) where appropriate.