Privacy policy
PRIVACY POLICY
Last updated: August 25, 2026
1. INTRODUCTION
Nordic Nook is operated by NORDIC NOOK LTD, a company registered in England and Wales under company number 17334617 (“Nordic Nook”, “we”, “us” or “our”).
Nordic Nook operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).
Nordic Nook is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, store, process and disclose your personal information when you visit or use our website, make a purchase or other transaction, create or use an account, communicate with us, or otherwise interact with our Services.
For the purposes of applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, NORDIC NOOK LTD is the data controller of personal information processed by us, except where another organisation acts as a separate controller for its own processing activities.
If there is a conflict between our Terms of Service and this Privacy Policy concerning the collection, use, processing or disclosure of personal information, this Privacy Policy will apply in relation to those privacy matters.
Please read this Privacy Policy carefully to understand how your personal information is handled.
2. PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you.
Personal information does not include information that has been anonymised or de-identified so that it can no longer reasonably identify you.
Depending on how you interact with our Services, we may collect or process categories of personal information including:
* Contact information, such as your name, billing address, shipping address, telephone number and email address.
* Order and transaction information, such as products you view, add to your cart, purchase, return, cancel or otherwise interact with, together with information about your transactions.
* Payment and financial information necessary to process transactions, such as payment method, payment confirmation and transaction details. Payment information may be processed directly by our payment service providers rather than stored directly by Nordic Nook.
* Account information, where applicable, such as login details, preferences and account settings.
* Communications you send to us, including customer service enquiries, return or refund requests, complaints and other correspondence.
* Device and technical information, such as your device type, browser, network connection, IP address and other online identifiers.
* Usage information relating to how you access, browse, navigate or otherwise interact with our website and Services.
* Marketing and preference information, including your communication preferences and, where applicable, information about your interaction with marketing communications.
3. SOURCES OF PERSONAL INFORMATION
We may collect personal information:
* directly from you when you place an order, create an account, contact us, subscribe to communications or otherwise provide information to us;
* automatically when you use our website or Services, including through cookies and similar technologies;
* from Shopify and other service providers that help us operate our business;
* from payment processors, fulfilment providers, delivery and logistics providers and other organisations involved in completing your order;
* from marketing, analytics and advertising partners where permitted by applicable law; and
* from other third parties where permitted or required by law.
4. HOW WE USE YOUR PERSONAL INFORMATION
We may use personal information for the following purposes:
Providing and Fulfilling Our Services
We use personal information to:
* process and manage orders;
* process payments and payment confirmations;
* arrange fulfilment, shipping and delivery;
* provide tracking and order-related information;
* process cancellations, returns, refunds and other appropriate remedies;
* provide customer support;
* manage customer accounts where applicable;
* communicate with you about your order or our Services; and
* provide and improve the shopping experience.
Improving Our Services
We may use information to understand how customers interact with our website, improve our products and Services, troubleshoot technical issues, analyse store performance and improve the customer experience.
Marketing and Advertising
Where permitted by applicable law and, where required, with your consent, we may use personal information to send marketing or promotional communications, show relevant advertising and measure the effectiveness of our marketing.
You may opt out of promotional email communications at any time by using the unsubscribe option provided in those communications.
Even if you opt out of marketing communications, we may still send non-promotional communications necessary to manage your orders, account, customer service requests or other transactions.
Security and Fraud Prevention
We may process personal information to:
* protect our customers, business and Services;
* verify transactions;
* detect, investigate and prevent fraud;
* identify potentially illegal, malicious or unauthorised activity;
* maintain the security of our website and systems; and
* enforce our Terms and policies.
Legal and Regulatory Purposes
We may process personal information where necessary to:
* comply with applicable laws and regulations;
* meet tax, accounting and record-keeping obligations;
* respond to valid requests from courts, regulators, law enforcement or other authorised public bodies;
* establish, exercise or defend legal claims; and
* enforce or investigate potential violations of our Terms or policies.
5. LAWFUL BASES FOR PROCESSING
Under applicable data protection law, we rely on one or more lawful bases when processing personal information.
Depending on the circumstances, these may include:
Contract
We may process personal information where necessary to enter into or perform a contract with you, including to process your order, receive payment, arrange fulfilment and delivery, provide customer service and handle cancellations, returns and refunds.
Legal Obligation
We may process personal information where necessary to comply with legal or regulatory obligations, including tax, accounting, consumer protection and other applicable requirements.
Legitimate Interests
We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.
These legitimate interests may include:
* operating and improving our business and Services;
* maintaining the security of our website;
* preventing fraud and misuse;
* understanding store performance;
* providing effective customer service; and
* protecting our legal and commercial interests.
Consent
Where required by law, we may process personal information based on your consent, including for certain marketing activities, cookies or similar technologies.
Where processing is based on consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
6. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information to third parties where reasonably necessary to operate our business, fulfil orders, provide our Services or comply with legal obligations.
These third parties may include:
* Shopify, which provides our ecommerce platform;
* payment processors and financial service providers;
* fulfilment providers;
* shipping, logistics and delivery providers;
* technology, hosting, cloud storage and IT service providers;
* analytics providers;
* customer support providers;
* marketing and advertising partners where permitted by law;
* professional advisers, including accountants, lawyers or other advisers where necessary; and
* government bodies, regulators, law enforcement authorities, courts or other parties where disclosure is required or permitted by law.
We may also disclose information where you direct or consent to the disclosure.
If our business undergoes a merger, acquisition, restructuring, sale of assets or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.
7. RELATIONSHIP WITH SHOPIFY
Our Services are hosted and supported by Shopify.
Shopify collects and processes personal information relating to your access to and use of our Services in order to provide and improve its services and enable us to operate our online store.
Information submitted through our Services may be transmitted to and processed by Shopify and other service providers, including organisations located outside the country in which you reside.
Certain Shopify features may use information obtained from interactions with our store, other merchants and Shopify to provide or improve Shopify services and features.
In circumstances where Shopify acts as an independent data controller for its own processing activities, Shopify is responsible for that processing in accordance with its own privacy practices.
You can learn more about Shopify’s privacy practices through the Shopify Consumer Privacy Policy and Shopify Privacy Portal made available by Shopify.
8. FULFILMENT, SHIPPING AND DELIVERY PROVIDERS
To fulfil and deliver orders, we may provide relevant personal information to fulfilment, logistics and delivery providers.
This information may include:
* your name;
* delivery address;
* telephone number;
* email address where necessary;
* order details; and
* other information reasonably necessary to fulfil or deliver your order.
These providers may process information in countries outside the United Kingdom where necessary to fulfil or deliver an order.
We only disclose information reasonably necessary for these purposes and handle international transfers in accordance with applicable data protection requirements.
9. THIRD-PARTY WEBSITES AND LINKS
Our Services may contain links to websites or online services operated by third parties.
If you follow a link to a third-party website or service, that third party may process your information according to its own privacy policy and practices.
We do not control and are not responsible for the privacy, security, accuracy or practices of third-party websites or services.
We encourage you to review the relevant privacy policies before providing personal information to third parties.
10. COOKIES AND SIMILAR TECHNOLOGIES
Our website and service providers may use cookies and similar technologies to operate the website, remember preferences, understand how visitors interact with our Services, maintain security, analyse performance and, where permitted, support advertising or marketing activities.
Where required by applicable law, non-essential cookies or similar technologies will be used in accordance with applicable consent requirements.
You may be able to manage certain cookie preferences through the cookie or privacy controls made available on our website and through your browser settings.
Disabling certain cookies may affect the functionality or performance of parts of our Services.
11. CHILDREN’S DATA
Our Services are not intended for children, and we do not knowingly collect personal information from children in circumstances where such collection would be unlawful.
If you are a parent or guardian and believe that a child has provided us with personal information inappropriately, please contact us using the details provided below.
We will take appropriate steps in accordance with applicable law.
12. SECURITY OF YOUR INFORMATION
We take reasonable organisational and technical measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Please do not send highly sensitive or confidential information through unsecured communication channels.
13. RETENTION OF PERSONAL INFORMATION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.
The period for which information is retained depends on factors including:
* the nature of the information;
* whether the information is required to fulfil or manage an order;
* whether we need it to maintain a customer account;
* tax, accounting and legal record-keeping obligations;
* fraud prevention and security requirements;
* dispute resolution;
* enforcement of agreements; and
* the establishment, exercise or defence of legal claims.
When personal information is no longer reasonably required, we will take appropriate steps regarding its deletion, anonymisation or other lawful handling.
14. YOUR DATA PROTECTION RIGHTS
Depending on applicable law and the circumstances, you may have rights relating to your personal information.
These may include:
Right of Access
You may have the right to request access to personal information we hold about you.
Right to Rectification
You may have the right to ask us to correct inaccurate or incomplete personal information.
Right to Erasure
In certain circumstances, you may have the right to request deletion of your personal information.
Right to Restriction
In certain circumstances, you may have the right to ask us to restrict how we process your personal information.
Right to Object
You may have the right to object to certain processing, including certain processing based on legitimate interests and direct marketing.
Right to Data Portability
In certain circumstances, you may have the right to receive personal information in a structured, commonly used and machine-readable format and to request that it be transferred to another organisation where applicable.
Right to Withdraw Consent
Where we rely on consent, you may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights Relating to Automated Decision-Making
Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.
15. EXERCISING YOUR RIGHTS
To exercise an applicable data protection right, please contact us at:
Email: support@nordicnook.uk
WhatsApp: +44 7477 206339 (messages only — no calls)
We may need to request reasonable information to verify your identity before processing certain requests.
We will respond within the timeframe required by applicable law.
Data protection rights are not absolute and may be subject to legal conditions, limitations or exemptions.
We will not discriminate against you for exercising your applicable data protection rights.
16. MARKETING COMMUNICATIONS
Where you have subscribed to or otherwise lawfully receive marketing communications from us, you may unsubscribe from promotional emails at any time by using the unsubscribe option included in those communications.
You may also contact us regarding your marketing preferences.
Opting out of marketing does not prevent us from sending communications necessary to process orders, provide customer support, issue important service information or otherwise fulfil our contractual or legal obligations.
17. INTERNATIONAL TRANSFERS
Some of our service providers, fulfilment providers, technology providers or other partners may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we will handle such transfers in accordance with applicable data protection law.
Where required, appropriate safeguards may include:
* a finding that the destination provides an adequate level of data protection;
* recognised contractual safeguards, including applicable standard contractual clauses or UK-approved transfer mechanisms; or
* another lawful international transfer mechanism permitted under applicable data protection law.
18. COMPLAINTS
If you have concerns or complaints about how we collect, use or otherwise process your personal information, please contact us first at:
Email: support@nordicnook.uk
WhatsApp: +44 7477 206339 (messages only — no calls)
We will take your concerns seriously and aim to address them appropriately.
If you are in the United Kingdom and remain dissatisfied with how your personal information has been handled, you may also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority responsible for data protection.
Your right to contact the ICO is not affected by contacting us first.
19. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to:
* our business practices;
* our Services;
* the technologies or service providers we use;
* legal or regulatory requirements; or
* other operational reasons.
When we update this Privacy Policy, we will update the “Last updated” date and provide any additional notice required by applicable law.
20. CONTACT US
If you have questions about this Privacy Policy, our privacy practices or how we handle your personal information, or if you wish to exercise an applicable data protection right, please contact:
Nordic Nook
Operated by:
NORDIC NOOK LTD
Company number:
17334617
Registered in:
England and Wales
Email: support@nordicnook.uk
WhatsApp: +44 7477 206339 (messages only — no calls)
Registered office:
71–75 Shelton Street
Covent Garden
London
WC2H 9JQ
United Kingdom
For the purposes of applicable data protection law, NORDIC NOOK LTD is the data controller of personal information processed by us, except where another organisation acts as a separate controller for its own processing activities.
IMPORTANT:
Our registered office is not a customer-facing retail location, parcel collection point or returns address.
Please do not visit or send product returns to our registered office.
For product returns, please contact us first and follow the return instructions provided in our Refund & Returns Policy.