Privacy Policy
PRIVACY POLICY – NORDIC ATELIER
Last updated: October 24, 2026
At Nordic Atelier ("we", "us" or "our"), we value your privacy and the protection of your personal information.
This Privacy Policy explains how we collect, use, store, protect and share personal information when you visit our website nordic-atelier.se, make a purchase, contact our customer service team or use our other services (collectively, the "Services").
We process personal information in accordance with applicable data protection law, including the EU General Data Protection Regulation (GDPR) where applicable.
Please read this policy to understand how we handle your information and what rights you may have.
1. PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with our website and Services.
Information you provide directly to us
We may collect the following information:
When you make a purchase:
- First and last name.
- Shipping address.
- Billing address.
- Email address.
- Phone number.
- Order information and purchase history.
When you create a customer account:
- Name and contact details.
- Login details.
- Account settings and order history.
When you contact customer service:
- Name and contact information.
- Order number.
- Messages and other information you choose to provide.
- Information needed to handle returns, complaints or refunds.
When you subscribe to our newsletter:
- Email address.
- Any marketing preferences.
- Information about your consent where consent is required.
Information collected automatically
When you visit our website, we may collect technical information such as:
- IP address.
- Browser type and version.
- Operating system and device type.
- Pages visited and products viewed.
- Time and duration of visits.
- Referring website.
- Information about interactions with our website.
- Cookie identifiers and similar technical information.
This information may be collected through cookies and similar technologies in accordance with your privacy choices and applicable law.
Information from third parties
We may receive personal information from service providers that help us operate our business, for example:
Shopify: For ecommerce, order management, payment functions and store services.
Payment providers: To confirm payments, process transactions and prevent fraud.
Shipping and logistics partners: To manage and deliver orders.
Meta (Facebook and Instagram): For advertising, measurement and marketing where these features are used and the processing is permitted.
Google Ads and Google Analytics: For advertising, analytics and measurement where these services are used and any required consent has been obtained.
We may also use other providers that assist us with customer service, security, order handling and website operations.
2. HOW WE USE YOUR PERSONAL INFORMATION
We process personal information for the following purposes.
Processing and delivering orders
We use information to:
- Process and administer orders.
- Handle payments.
- Send order confirmations.
- Arrange deliveries.
- Send delivery and tracking information.
- Handle returns, complaints and refunds.
- Communicate with you about your order.
Customer service and communication
We use contact details and relevant order information to answer questions and help you with our products and services.
Improving the website
We may analyse how the website is used in order to:
- Improve functionality and user experience.
- Identify technical problems.
- Improve product information and navigation.
- Evaluate our services.
Where analytics require consent, we process the relevant information only after valid consent has been provided.
Marketing and advertising
We may use personal information to:
- Send newsletters and promotional offers.
- Show relevant advertisements.
- Measure advertising performance.
- Personalise marketing using information that we are permitted to use.
We follow applicable rules on electronic marketing and consent.
You can unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
Security and fraud prevention
We process relevant information to:
- Protect customer accounts and orders.
- Prevent fraud.
- Detect unauthorised access.
- Investigate security incidents.
- Protect our customers and our business.
Legal obligations
We may need to process and retain certain personal information to comply with legal obligations, including accounting, tax, consumer protection and the establishment, exercise or defence of legal claims.
3. LEGAL BASIS FOR PROCESSING
Where the GDPR applies, we process personal information on one or more of the following legal bases:
Performance of a contract: Where processing is necessary to receive, process and deliver your order or provide a service you requested.
Legal obligation: Where we must process information to comply with accounting, tax, consumer-protection or other legal requirements.
Legitimate interests: Where processing is necessary for legitimate purposes such as security, fraud prevention or customer service, after balancing our interests against your rights.
Consent: Where we require your permission for certain cookies, advertising technologies or marketing activities.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
4. HOW WE USE COOKIES
Cookies are small text files that may be stored on your device when you visit our website.
We use cookies and similar technologies to make the website function, improve our services and, where permitted, analyse traffic and show relevant advertising.
Necessary cookies
These are required for core website functions such as:
- Shopping cart.
- Secure checkout.
- Login.
- Security and fraud prevention.
- Saving certain technical settings.
Necessary cookies are used without prior consent where permitted by law.
Analytics cookies
These help us understand how visitors use the website.
We may use services such as Google Analytics to analyse traffic and improve the user experience.
Where consent is required, analytics cookies are used only after you have approved them.
Marketing and advertising cookies
We may use advertising technologies from providers such as Meta and Google Ads to measure campaigns and show relevant advertising.
Where consent is required, these technologies are activated only after you have provided consent.
Third-party cookies
Some cookies may be provided by external service providers such as Shopify, Meta and Google.
Those providers may process information under their respective terms and privacy policies.
Managing cookies
You can manage cookies by:
- Changing your privacy or cookie settings on our website where such settings are offered.
- Blocking or deleting cookies in your browser.
- Withdrawing previously given consent where this option is available.
Please note that certain functions, including the shopping cart or login, may be affected if necessary cookies are blocked.
Simply continuing to use the website is not treated as consent to non-essential cookies where valid consent is required by law.
5. HOW WE SHARE PERSONAL INFORMATION
We do not sell your personal information as a separate commodity.
We may, however, share information with service providers and other recipients where necessary for the purposes described in this policy.
Ecommerce platform
Shopify provides the technical platform used for our online store.
Payment providers
Information required to process payments may be shared with relevant payment providers.
Shipping and logistics partners
We share necessary contact and delivery information with carriers and logistics companies in order to deliver orders.
Marketing and analytics providers
We may share certain information with providers such as Meta and Google for advertising and analytics where this is consistent with applicable law and your privacy choices.
Legal obligations
We may disclose information where required by law or by a valid order from a competent authority.
Business transactions
In connection with a sale, merger or restructuring of the business, personal information may need to be transferred in accordance with applicable data protection law.
6. INTERNATIONAL TRANSFERS OF PERSONAL INFORMATION
Because Nordic Atelier uses international ecommerce and service providers, personal information may be processed in countries other than the country where you live.
This may include countries outside the EU and EEA, including the United States.
Where the GDPR applies and personal information is transferred outside the EU/EEA, we use appropriate transfer mechanisms and safeguards where required by law.
Such mechanisms may include adequacy decisions or the European Commission's Standard Contractual Clauses, where applicable.
We take relevant measures to protect personal information during international processing.
Using our Services alone does not constitute consent to international transfers where a separate legal basis is required.
7. HOW LONG WE RETAIN YOUR INFORMATION
We retain personal information only for as long as necessary for the purposes for which it was collected or for as long as required by law.
The retention period may depend on:
- Whether you have an active customer account.
- Whether the information is needed for order handling.
- Whether there are ongoing returns or complaints.
- Accounting and tax requirements.
- The need to establish, exercise or defend legal claims.
- Whether you have given or withdrawn consent.
When information is no longer required, we delete or anonymise it unless continued retention is required by law.
8. HOW WE PROTECT YOUR PERSONAL INFORMATION
We use reasonable technical and organisational security measures to protect personal information against unauthorised access, loss, alteration and unlawful use.
These measures may include access controls, secure connections and protections provided by our technical service providers.
Despite our security measures, no transmission or storage of information can be guaranteed to be completely risk-free.
If you believe your personal information has been compromised, please contact us at:
9. YOUR RIGHTS UNDER THE GDPR
If the GDPR applies to the processing of your personal information, you may, depending on the circumstances, have the following rights:
Right of access
You may request information about the personal information we process about you and obtain a copy of that information.
Right to rectification
You may request correction of inaccurate or incomplete information.
Right to erasure
In certain circumstances, you may request deletion of your personal information.
The right to erasure is not absolute. Some information may need to be retained because of legal obligations.
Right to restriction
In certain circumstances, you may request that the processing of your personal information be restricted.
Right to data portability
Under certain conditions, you may request personal information in a structured, commonly used and machine-readable format.
Right to object
In certain circumstances, you may object to processing based on legitimate interests.
You have the right to object at any time to the processing of your personal information for direct marketing.
Right to withdraw consent
Where processing is based on your consent, you may withdraw it at any time.
Right to lodge a complaint
You may lodge a complaint with the relevant data protection authority if you believe that your personal information is being processed in breach of applicable data protection law.
How to exercise your rights
Send your request to:
We may need to verify your identity before handling certain requests in order to protect your personal information.
We respond within the time limits required by applicable law. Under the GDPR, the general rule is that a response should be provided within one month, with a possible extension in certain circumstances.
10. MARKETING AND NEWSLETTERS
If you sign up for our newsletter, we may send information about products, offers and promotions.
We send electronic direct marketing in accordance with applicable law, including consent requirements where consent is required.
You may unsubscribe at any time using the unsubscribe link in our emails.
You may also contact:
Order confirmations, delivery updates and other communications that are necessary to handle a purchase are not the same as marketing communications.
11. THIRD-PARTY WEBSITES
Our website may contain links to external websites and services.
Those websites may have their own privacy policies and terms.
We recommend reviewing their information about personal-data processing before providing personal information to them.
This Privacy Policy applies to our own processing of personal information in connection with Nordic Atelier's Services.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when our services, practices or legal obligations change.
The latest version will be published on this page together with the date of the latest update.
If applicable law requires us to notify you specifically of a change, we will do so in an appropriate manner.
13. CONTACT US
If you have questions about this Privacy Policy, our processing of personal information or wish to exercise your rights, please contact us.
Store name: Nordic Atelier
Contact address: Meentstraat 23, 6533 XG Nijmegen, Netherlands
Email: support@nordic-atelier.se
Contact form: Click here
Phone: +31 6 20639786
Operated by: Raes-Media
VAT registration number: BE1011.205.204
Address: Stroombanklaan 86, 8400 Oostende, Belgium
CUSTOMER SERVICE HOURS
Monday to Friday: 09:00–17:00 (CET)
We aim to respond to customer service enquiries within 24 hours.