Privacy policy
Last updated: 27 June 2026
This Privacy Policy describes how Nordwells (the website, we, us or our) collects, uses and shares your personal data when you visit our website, use our services or make purchases via Nordwells.nl (the website), or otherwise communicate with us about the website (collectively referred to as the services). In this Privacy Policy, you/your refers to you as a user of the services, whether you are a customer, a visitor to the website or another person about whom we have collected information in accordance with this Privacy Policy.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example to bring it into line with new procedures or for other operational, legal or regulatory reasons. The revised Privacy Policy will be published on the website, as indicated by the date stated under "Last updated", together with any other measures required under applicable law.
How we collect and use personal data
In order to provide the services, we collect your personal data from various sources as described below. The information we collect and use varies depending on how you interact with us.
In addition to the specific purposes listed below, we may use the information collected about you to communicate with you, to provide or improve the services, to comply with applicable legal requirements, to enforce any applicable terms of use of the service and to protect the services, our rights and the rights of our users and others.
What personal data we collect
The types of personal data we collect about you depend on how you use our website and our services. When we use the term personal data, we are referring to information that identifies you, relates to you, describes you or can in any way be linked to you. The sections below describe the categories and specific types of personal data we collect.
Information we collect directly from you
Information that you provide to us via our services may include:
- Contact details, for example your name, address, telephone number and e-mail address.
- Order details, for example name, billing address, delivery address, payment confirmation, e-mail address and telephone number.
- Account details, for example username, password, security questions and other information used to secure your account.
-
Purchase information, for example the items you view or place in your shopping cart, and information stored in your account such as loyalty points, referrals, gift cards or purchases.
- Saved loyalty points, product reviews, referrals and gift cards
- Customer service information, for example information you choose to share with us when you communicate with us, such as when you send a message via the services.
Certain features of the services may require you to provide certain information about yourself directly to us. You may choose not to share such information, but in that case you may not be able to use or access these features.
Information we collect about your usage
We may also automatically collect certain information about your interaction with the services ("Usage Data"). To do this, we may use cookies, pixels and similar technologies ("Cookies"). Usage Data may include information about how you access and use our website and your account, including information about your device, browser, network connection, IP address and other information about your interaction with the services.
Information we receive from third parties
We may also receive information about you from third parties, including suppliers and service providers who may collect information on our behalf, such as:
- Companies that support our website and our services, such as Shopify.
- Our payment processors, who collect payment information (e.g. bank account details, credit or debit card details, billing address) for the purpose of processing your payment so that we can ship your orders and provide the products or services you have requested, in order to fulfil our agreement with you.
- When you visit our website, open or click on e-mails we send you, or interact with our services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, SDKs, third-party libraries and cookies.
All information we receive from third parties is treated in accordance with this Privacy Policy. See also the section below, Third-party websites and links.
How we use your personal data
- Providing products and services. We use your personal data to provide you with the services in performance of our agreement with you, including processing your payments, shipping your orders, sending you messages relating to your account, your purchases, returns, exchanges or other transactions, creating, maintaining and otherwise managing your account, arranging shipping, facilitating any returns and exchanges and other features relating to your account.
- Marketing and advertising. We may use your personal data for marketing and advertising purposes, such as sending marketing, advertising and promotional communications by e-mail, text message (SMS) or regular post, and to show you advertisements for products or services. This may include using your personal data to better tailor the services and advertising on our website and other websites. If you live in the EEA, the legal basis for this processing of personal data is our legitimate interest in selling our products, in accordance with Article 6 (1) (f) GDPR.
-
Security and fraud prevention. We use your personal data to identify, investigate or take action regarding any fraudulent, unlawful or harmful activities. If you choose to use the services and create an account, you are responsible for keeping your login details secure. We strongly recommend that you do not share your username, password or other access details with anyone else. If you suspect that your account has been compromised, please contact us immediately. If you live in the EEA, the legal basis for this processing of personal data is our legitimate interest in keeping our website secure for both you and other customers, in accordance with Article 6 (1) (f) GDPR.
- Communicating with you and improving the service. We use your personal data to provide you with customer support and to improve our services. This is a legitimate interest for us, as it enables us to be responsive to you, provide effective services and maintain our business relationship with you, in accordance with Article 6 (1) (f) GDPR.
Cookies
Like many others, we use cookies on our website. For more information about the cookies we use to run our store with Shopify, visit https://www.shopify.com/legal/cookies. We use cookies to run and improve our website and our services (including storing information about your activity and preferences), to carry out analytics and to gain a better understanding of how users interact with the services (which serves our legitimate interest in running, improving and optimising the services). We may also allow third parties and service providers to use cookies on our website to better tailor the services, products and advertising on our website and other websites.
Accepting cookies is enabled by default in most browsers, but you can change the settings in your browser yourself so that cookies are deleted or rejected. Please note that your experience may be negatively affected if you delete or block cookies, and certain services, such as certain features and general functionality, may also stop working in whole or in part. It may also be the case that blocking cookies does not completely prevent our exchange of information with third parties, such as our advertising partners.
How we share personal data
In certain circumstances, we may share your personal data with third parties in order to fulfil agreements, for legitimate purposes and for other reasons covered by this Privacy Policy. Some examples of such circumstances:
- Information may be shared with suppliers or other third parties who provide services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, distribution and delivery).
- Information may be shared with business and marketing partners in order to provide services and advertising to you. Our business and marketing partners will use your information in accordance with their own privacy notices.
- When you yourself request or otherwise consent to the sharing of certain information with third parties, for example in order to deliver products to you, or when you use social media widgets or login-based integrations, we may also share your information.
- Information may be shared with our affiliated companies or within our group as part of our legitimate interest in running a successful business.
- Information may be shared in connection with a business transaction, such as a merger or bankruptcy, in order to comply with applicable legal obligations (e.g. in response to subpoenas, search warrants), to enforce applicable terms of use and to protect and defend the services, our rights and the rights of our users and others.
We share personal data from the following categories, and sensitive information about users, for the purposes described above in How we collect and use your personal data and How we share personal data:
| Category | Categories of recipients |
|---|---|
|
|
We do not use or share sensitive personal data without your consent or for the purpose of drawing conclusions about you.
With your consent, we share personal data for the purpose of carrying out advertising and marketing activities as described below.
Third-party websites and links
Our website may contain links to websites or other online platforms operated by third parties. If you follow links to websites that do not belong to our affiliated companies or are not operated by us, you should read their privacy and security policies and other rules and terms. We do not guarantee and are not responsible for the privacy protection or security of such websites, including whether the information on these websites is accurate, complete or reliable. Information that you yourself make available in fully or partially publicly accessible places, including information you share on third-party social networking platforms, may also be seen by others who use the services and/or by users of these third-party platforms, without any restriction on how it may be used by us or by third parties. The inclusion of such links does not in itself imply that we endorse the content of such platforms, or their owners or activities, except as expressly stated in the services.
Information about children
The services are not intended for use by children, and we do not knowingly collect personal data about children. If a child for whom you are the guardian has provided us with his or her personal data, you can contact us using the contact details below to request that it be deleted.
As of the date on which this Privacy Policy took effect, to the best of our knowledge we have not "shared" or "sold" (as defined in applicable law) the personal data of persons under the age of 16.
Security and retention of your data
Please note that no security measure is perfect or impenetrable, and we cannot guarantee complete security. In addition, information you send to us may be unprotected during transmission. We recommend that you do not use insecure methods to send sensitive or confidential information to us.
How long we retain your personal data depends on various factors, such as whether we need it to manage your account, to provide the services, to comply with legal obligations, to resolve disputes or to enforce other applicable contracts and policies.
Your rights
Depending on where you live, you may have some or all of the rights listed below in relation to your personal data. However, these rights are not absolute; they may apply only in certain circumstances, and the law allows us to refuse your request in such cases.
- Right of access/to know: You may have the right to request access to the personal data we hold about you, including information about how we use and share your data.
- Right to erasure: You may have the right to request that we delete the personal data we hold about you.
- Right to rectification: You may have the right to request that we correct the personal data we hold about you if it is inaccurate.
- Right to data portability: In certain circumstances and subject to certain exceptions, you may have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party.
- Right to object to sale, sharing or targeted advertising: You may have the right to instruct us not to "sell" or "share" your personal data, or to indicate that your personal data may not be used for purposes considered "targeted advertising" as defined in applicable privacy legislation. If you visit our website with the GPC signal enabled (depending on where you are located), we will automatically interpret this as a request to opt out of the "sale" or "sharing" of information for the device and browser you use to visit the website.
- Restriction of processing: You may have the right to request that we stop processing your personal data or restrict our processing of it.
- Withdrawal of consent: Where we base the processing of your personal data on consent, you may have the right to withdraw your consent.
-
Objection: If we refuse your request, you may have the right to object to our decision. You can do this by replying to our notice of refusal.
- Managing communication preferences: We may send you marketing e-mails, and you can choose to stop receiving such e-mails by using the unsubscribe function included in all our messages to you. However, if you choose to stop receiving such e-mails, we may still send you messages that do not contain advertising, such as information about your account or orders.
You can exercise these rights where indicated on our website, or by contacting us using the contact details below.
Your standing with us will not be affected by your exercising your rights. We may need to collect information from you to verify your identity, such as your e-mail address or account details, before we can give a full response to your request. Under applicable law, you may appoint a representative to submit requests on your behalf to exercise your rights. Before we accept such a request from a representative, that representative must provide proof that you have authorised them to act on your behalf, and you may also need to verify your identity with us personally. We will respond to your request within the period prescribed by applicable law.
Complaints
If you have any complaints about how we process your personal data, please contact us using the contact details below. If you are not satisfied with how we have handled your complaint, depending on where you live, you may have the right to object to our decision by contacting us using the contact details below. You may also choose to lodge your complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority). Within the EEA, you can find a list of competent data protection authorities here.
International users
Please note that we may transfer, store and process your personal data outside the country in which you live. Your personal data is also processed by staff and external service providers (third parties) and partners in these countries.
If we transfer your personal data outside Europe, we will rely on recognised transfer mechanisms, such as the European Commission's Standard Contractual Clauses or equivalent agreements of the relevant competent authority in the United Kingdom (as applicable), unless the data transfer is to a country deemed to provide an adequate level of protection.
Contact
If you have any questions about our privacy policy or this Privacy Policy, or if you wish to exercise any of your rights, please send an e-mail to support@nordwells.nl.
With regard to applicable data protection legislation, and unless expressly stated otherwise, we are the controller of your personal data.