GDPR Policy

1. Overview

At NordicaLight, we are fully committed to protecting your personal data and respecting your privacy.

This policy explains how we collect, use, and safeguard your personal information in accordance with the General Data Protection Regulation (EU 2016/679) (“GDPR”) and other applicable data-protection laws.

By accessing or using our website https://nordicalight.com, you agree to the terms described below.

2. Data Controller

The data controller responsible for processing your personal data is:

NordicaLight (operated by Nordica Ventures SRL)

Email: contact@nordicalight.com

Registered address: Strada Episcop Roman Ciorogariu 9, Biroul 10, Oradea, 410017, Romania

3. Types of Data We Collect

We may collect and process the following categories of personal information:

Identification data: name, surname, email address, phone number
Delivery data: shipping and billing addresses
Payment data: payment details processed securely via Shopify Payments or authorised partners (we do not store full card numbers)
Browsing data: IP address, browser type, device information, operating system, and cookies related to website activity

4. Purpose of Data Processing

Your personal data is collected and processed solely for legitimate and transparent purposes, including:

Order fulfilment: to process, confirm, and deliver your orders
Customer communication: to send order updates, invoices, or service-related messages
Customer support: to respond to enquiries or handle returns
Website optimisation: to analyse traffic and improve performance
Marketing and newsletters: only with your explicit consent

5. Legal Basis for Processing

We process your personal data under one or more of the following legal bases:

Contract performance – to process and fulfil your purchases
Legal obligation – to meet accounting or regulatory requirements
Consent – for optional marketing or newsletter communications
Legitimate interest – to maintain, secure, and improve our Services

6. Data Retention

Your data is retained only for as long as necessary to:

Fulfil the purposes for which it was collected; or
Comply with legal, tax, or accounting obligations.

After this period, data is securely deleted or anonymised.

7. Your GDPR Rights

Under the GDPR, you have the following rights:

Right of Access – obtain a copy of your personal data.
Right to Rectification – correct inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”) – request deletion where lawful.
Right to Restrict Processing – limit use of your data.
Right to Data Portability – receive data in a structured, machine-readable format.
Right to Object – opt out of processing for direct marketing or legitimate interest.
Right to Withdraw Consent – revoke consent at any time.

To exercise any of these rights, contact us at contact@nordicalight.com.

We may request verification of identity before processing your request.

8. Data Security

We employ technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or loss.

Our Site uses SSL encryption and is hosted by Shopify Inc., which complies with the Payment Card Industry Data Security Standard (PCI DSS).

9. Data Transfers

We do not transfer personal data outside the European Economic Area (EEA) unless required to fulfil your order (e.g. with logistics or shipping partners).

If transfers occur, they are protected through recognised safeguards such as EU Standard Contractual Clauses (SCCs).

10. Cookies

We use cookies to enhance site performance and provide a tailored experience.

You can manage preferences in your browser or via our on-site consent banner.

For more details, please read our Cookie Policy.

11. Policy Updates

We may revise this Policy to reflect changes in our operations or legal framework.

Any updates will be posted on this page with a new “Last Updated” date.

12. Contact Information

We respond to all GDPR or privacy-related inquiries within 1 business day.

Trading name: NordicaLight

Legal entity: Nordica Ventures SRL

Legal form: Societate cu Răspundere Limitată (SRL)

Company registration number: J2025080221006

CIF/VAT: RO52733888