Northbased

Privacy Policy

Last updated: January 4th, 2025

1. Information We Collect

The personal information we collect varies depending on your interactions with us and the Services you use. This may include:

  • Names
  • Phone numbers
  • Email addresses
  • Contact preferences
  • Authentication data
  • Billing addresses
  • Debit/credit card numbers

We do not process sensitive information, such as health data or racial/ethnic origin. All personal information provided must be accurate and complete, and you are responsible for notifying us of any changes.

2. How We Use Your Information

We process your personal information for several purposes, including:

  • Delivering requested services.
  • Responding to inquiries and providing support.
  • Sending administrative information regarding our products and services.
  • Managing orders, payments, returns, and exchanges.
  • Enhancing user experience and improving our services.
  • Marketing and promotional communications (where applicable and with your consent).

We will only process your data based on lawful grounds, including the necessity of processing for the performance of a contract, your consent, compliance with a legal obligation, or legitimate interests pursued by Northbased or a third party.

3. Cookies

Cookies are small data files stored on your device that facilitate communication with the issuing website. They can contain various types of information, including login credentials and user preferences. Northbased uses cookies for website functionality, including session cookies and analytics. We also use third-party services that may deploy cookies. You may manage your cookie preferences or opt out of non-essential cookies through your browser settings.

For more detailed information, please refer to our Cookie Policy.

4. Your Rights

Under the GDPR and applicable U.S. data protection laws, you have specific rights regarding your personal information, including:

  • The right to access and obtain a copy of your personal data.
  • The right to rectify any inaccuracies in your data.
  • The right to request the deletion of your data, subject to certain conditions.
  • The right to restrict processing of your data.
  • The right to object to the processing of your data, including for direct marketing purposes.
  • The right to data portability, which allows you to obtain and reuse your personal data across different services.

California Consumer Privacy Act (CCPA) Rights

If you are a California resident, you are entitled to the following rights under the CCPA:

  • The right to know what personal information is being collected about you.
  • The right to request access to your personal information.
  • The right to request the deletion of your personal information.
  • The right to opt out of the sale of your personal information.
  • The right to non-discrimination for exercising your rights.

To exercise these rights, California residents can contact us at legal@northbased.net.

5. Exercising Your Rights

To exercise your rights under the GDPR or CCPA, please contact us by email at legal@northbased.net. We will respond to your request in accordance with applicable law, typically within 30 days.

If you submit a request through an authorized agent, we may require a signed authorization from you and additional verification details.

6. Data Retention

We will retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy or as required by applicable law. Personal data that is no longer required will be deleted or anonymized securely. We will not retain your personal information for more than two years without a legitimate business need.

When there is no ongoing need to process your personal information, we will either delete or anonymize it. If deletion is not feasible (e.g., due to backup storage), we will securely store the information and prevent further processing until deletion is possible.

7. Data Transfers

If we transfer your personal data outside the European Economic Area (EEA) or the United States, we will take appropriate safeguards to ensure your data is protected, such as through the use of standard contractual clauses, Privacy Shield (if applicable), or other lawful mechanisms as required under the GDPR and other applicable privacy laws.

9. Children's Privacy

We do not knowingly collect personal information from individuals under the age of 16 (or a higher age in certain jurisdictions). If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly. If you believe we may have collected personal information from a child, please contact us at legal@northbased.net.

10. Request Verification

Upon receiving your request, we will verify your identity to ensure you are the individual associated with the information in our system. We will only use the personal information provided in your request for verification purposes. If we cannot verify your identity with the information we have, we may request additional details for security and fraud prevention.

11. Contact Information

For questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at:

Northbased
Email: legal@northbased.net

12. Danish Authorities

If you have concerns about how Northbased processes your personal information, you may submit a complaint to the Danish Data Protection Authority, Datatilsynet. More information can be found at datatilsynet.dk/english.