Last Updated: January 15, 2025

This Privacy Policy describes how Nordic Farma (hereinafter referred to as the "Site" or "we" in all its forms) collects, uses, and discloses your personal data when you visit our Site, use our services, or make purchases at nordicfarma.com (the "Site") or otherwise communicate with us regarding the Site (collectively referred to as the "Services"). In this Privacy Policy, "you" and "your" refer to you as a user of the Services, whether you are a customer, a website visitor, or another individual whose data we have collected in accordance with this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect, among other things, changes in our practices as well as operational, legal, or regulatory reasons. We will publish the updated Privacy Policy on the Site, update the "Last Updated" date, and take other actions required by applicable law.

How We Collect and Use Your Personal Data

To provide the Services, we collect personal data about you from various sources, as described below. The data we collect and use varies depending on how you interact with us.

In addition to the specific purposes described below, we may use the data we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce applicable terms and conditions, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Data We Collect

The types of personal data we collect about you depend on how you interact with our Site and use our Services. When we use the term "personal data," we refer to information that identifies you or relates to, describes, or can be associated with you. The following sections describe the categories and specific types of personal data we collect.

Information We Collect Directly from You

Information you submit to us directly through our Services may include:

• Contact details, such as your name, address, phone number, and email address.

• Order details, such as your name, billing address, shipping address, payment confirmation, email address, and phone number.

• Account details, such as your username, password, security questions, and other information used for account security purposes.

• Purchase information, such as items you view and place in your cart, as well as items stored in your account, such as loyalty points, reviews, recommendations, or gift cards and purchases.

• Loyalty points/reviews/recommendations/gift cards stored in your account.

• Customer support details, such as information you choose to include in communications with us, such as when you send a message through the Services.

Certain features of the Services may require you to provide specific information about yourself directly. You may choose not to provide this information, but doing so may prevent you from using these features.

Information We Collect About Your Use

We may also automatically collect certain information about your interactions with the Services ("Usage Data"). To do this, we may use cookies, pixels, and similar technologies ("Cookies"). Usage Data may include information about how you use our Site and your account, including device details, browser information, network connection details, IP address, and other information about your interactions with the Services.

Information We Receive from Third Parties

We may also receive information about you from third parties, such as vendors and service providers who collect information on our behalf. These may include:

• Companies that support our Site and Services, such as Shopify.

• Our payment processors, who collect payment information (e.g., bank account, credit or debit card details, billing address) to process your payment, fulfill your order, and provide you with requested products or services in accordance with our contractual obligations.

When you visit our Site, open or click on emails we send you, or otherwise interact with our Services or advertisements, we or third parties we work with may automatically collect certain data using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.

All information we receive from third parties is processed in accordance with this Privacy Policy. See also the section "Third-Party Websites and Links" below.

How We Use Your Personal Data

• Providing Products and Services: We use your personal data to provide you with the Services and fulfill our contractual obligations with you. This includes processing your payments, fulfilling your orders, sending you notifications about your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and managing your account, arranging delivery, facilitating returns, and enabling other account-related features and functions.

• Marketing and Advertising: We may use your personal data for marketing and promotional purposes, including sending marketing communications via email, SMS, or mail and displaying advertisements for products or services. This may involve tailoring the Services and the advertisements you see on our Site and other websites. If you reside in the European Economic Area, the legal basis for these processing activities is our legitimate interest in selling our products under GDPR Article 6(1)(f).

• Security and Fraud Prevention: We use personal data to detect, investigate, and take action against fraudulent, illegal, or harmful activities. If you choose to use the Services and register an account, you are responsible for keeping your account credentials secure. We recommend that you do not share your username, password, or other access credentials with anyone. If you believe your account has been compromised, contact us immediately. If you reside in the European Economic Area, the legal basis for these processing activities is our legitimate interest in securing our website for you and other customers under GDPR Article 6(1)(f).

• Communicating with You and Improving Services: We use personal data to provide customer support and improve our Services. This aligns with our legitimate interests in responding to you, providing effective services, and maintaining our business relationship with you under GDPR Article 6(1)(f).

Cookies

Like many websites, we use Cookies on our Site. For more details on the Cookies we use in connection with our store's operation via Shopify, visit https://www.shopify.com/legal/cookies. We use Cookies to enhance and improve our Site and Services (including remembering your activities and preferences), perform analytics, and better understand user interactions. We may also allow third parties and service providers to use Cookies on our Site to tailor services, products, and advertisements.

Most browsers automatically accept Cookies by default, but you can configure your browser to delete or reject Cookies. Note that deleting or blocking Cookies may negatively impact your experience and may cause some Services, such as certain features and functionalities, to not work correctly or be unavailable.

How We Share Personal Data

Under certain circumstances, we may share your personal data with third parties for contract fulfillment, legal purposes, and other reasons as outlined in this Privacy Policy. Such circumstances may include the following, involving the following parties:

• Vendors or other third parties performing services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and delivery).
• Business and marketing partners, including Shopify if applicable, who provide services and advertising. Shopify, for example, may be used to support personalized advertising through third-party services. Our business and marketing partners use your data according to their own privacy policies.
• When you direct us to share specific information with third parties or otherwise give your consent for such disclosure, such as for product delivery or when using social media widgets or login integrations with your permission.
• With our affiliates and within our corporate group to support our business operations based on our legitimate interests.
• In business transactions, such as mergers or bankruptcy, to comply with legal obligations (including responding to legal challenges, subpoenas, and similar requests), to enforce applicable terms of use, and to protect or defend the Services, our rights, and the rights of our users or others.

We have shared or share the following categories of personal data and sensitive personal data for the purposes described in the sections above:

We do not use or disclose sensitive personal data without your consent, nor do we use it to infer characteristics about you.

If cookie banners are enabled:
With your consent, we share personal data for advertising and marketing purposes as described below.

If data sale opt-out is enabled:
We have "sold" and "shared" (as defined under applicable law) personal data for advertising and marketing purposes in the past 12 months as follows:

User-Generated Content

The Services may allow you to post product reviews and other user-generated content. If you choose to submit user-generated content to any public area of the Services, that content becomes public and accessible to everyone.

We do not control who accesses the information you choose to share publicly, nor can we ensure that third parties who access such information will respect your privacy or keep the data secure. We are not responsible for the privacy or security of any information you make publicly available or for the accuracy, use, or misuse of any information you share or receive from third parties.

Third-Party Websites and Links

Our Site may contain links to third-party websites or other online platforms. If you follow links to websites not operated by our partners or controlled by us, you should review their privacy and security policies and other terms. We do not guarantee the privacy, security, accuracy, completeness, or reliability of third-party sites, nor are we responsible for them.

Information you disclose on public or semi-public channels, including social media platforms, may be visible to other users of the Services and/or users of those third-party platforms without restrictions on its use by us or third parties. The inclusion of such links does not constitute an endorsement of the content or owners of those platforms unless stated otherwise in the Services.

Children’s Information

The Services are not intended for children, and we do not knowingly collect personal data from children. If you are a parent or guardian of a child who has provided us with personal data, you may contact us using the details below to request deletion of the data.

As of the effective date of this Privacy Policy, we do not "share" or "sell" (as defined under applicable law) personal data of individuals under 16 years of age.

Data Security and Retention

Please note that no security measures are perfect or impenetrable, and we cannot guarantee "absolute security." Additionally, any data you send to us may not be secure during transmission. We recommend that you do not use unsecured channels to send sensitive or confidential information to us.

The retention period of your personal data depends on various factors, such as whether the data is necessary to maintain your account, ensure the provision of Services, comply with legal obligations, resolve disputes, or enforce applicable agreements and policies.

Your Rights

Depending on your place of residence, you may have some or all of the rights listed below. These rights are not absolute and may only apply under certain circumstances. In some cases, we may refuse your request if permitted by law.

• Right to Access/Know: You may have the right to request access to the personal data we hold about you, including information on how we use and share your data.
• Right to Delete: You may have the right to request that we delete the personal data we hold about you.
• Right to Correct: You may have the right to request that we correct inaccurate personal data we hold about you.
• Right to Data Portability: You may have the right to receive a copy of the personal data we hold about you and request, in some cases and subject to certain exceptions, that we transfer it to a third party.
• Right to Opt-Out of Sale, Sharing, or Targeted Advertising: You may have the right to request that we do not "sell" or "share" your personal data or restrict processing for "targeted advertising" as defined under applicable privacy laws.

If you visit our Site with Global Privacy Control enabled, we will automatically treat this as a request to opt out of the "sale" and "sharing" of your data for the device and browser used to visit the Site.

• Right to Restrict Processing: You may have the right to request that we stop processing your personal data or restrict its use.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you may have the right to withdraw that consent.
• Right to Appeal: You may have the right to appeal our decision if we refuse to process your request. You can do so by responding directly to our refusal.
• Managing Communication Preferences: We may send you promotional emails, and you can opt out at any time using the unsubscribe option in the emails. If you opt out, we may still send you non-promotional messages related to your account and orders.

You may exercise these rights in the relevant sections of the Site or by contacting us using the details below.

We will not discriminate against you for exercising these rights. We may need to collect certain information, such as your email or account details, to verify your identity before processing your request. Where permitted by law, you may appoint an authorized representative to submit requests on your behalf. Before accepting such a request, we require proof that the representative is authorized to act for you, and we may need to verify your identity directly. We will respond to your request in a timely manner as required by applicable law.

If you use Shopify's advertising services, such as Shopify Audiences, to tailor ads you see on third-party websites, you can opt out of personalized advertising through Shopify-supported third-party services by visiting Shopify Privacy.

Complaints

If you wish to file a complaint regarding the way we process your personal data, please contact us using the contact details provided below. If you are not satisfied with our response to your complaint, you may have the right, depending on your place of residence, to appeal our decision by contacting us using the details below or by lodging a complaint with your local data protection authority.

International Users

Please note that we may transfer, store, and process your personal data outside your country of residence. Employees, third-party service providers, and partners in these countries may also process your personal data.

If we transfer your personal data outside of Europe, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or, where applicable, equivalent agreements approved by the competent authority in the United Kingdom, unless the data is transferred to a country deemed to provide an adequate level of protection.

Contact Us

If you have any questions about our privacy practices or this Privacy Policy please send us an email at info@nordicfarma.com 

Within the scope of applicable data protection laws and unless otherwise stated, we act as the data controller for your personal data.