NordBalance explains how personal data flows through zaltyrexvikux.world, why we process it, how long we keep it, and which rights you can exercise under United Kingdom and European data-protection frameworks.
This Privacy Policy applies to visitors and customers who interact with NordBalance through the website, email, or related channels we operate. It should be read together with the Cookie Policy and Terms of Service. We describe processing in plain language while referencing the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR) where they apply.
We do not sell your personal data. Where we rely on legitimate interests, we balance our business needs against your rights and offer an easy way to object when the law requires.
Categories of personal data
Depending on how you engage with us, we may process identifiers such as your name, email address, delivery address, and phone number when you choose to provide them. We also process communication content that you send through forms or email, technical data such as IP address, browser type, device identifiers, and approximate location derived from IP, as well as usage data like pages viewed and interaction timing.
If you engage with optional analytics or marketing tools, additional pseudonymous identifiers may be generated in line with your cookie consent. Payment data is handled by payment-service providers under their own terms when checkout features are enabled.
Purposes and legal bases
Activity
Purpose
Legal basis
Customer enquiries and order handling
Respond to questions, confirm details, coordinate fulfilment
Performance of a contract; legitimate interests in operating a commerce service
Website reliability and security
Monitor traffic, detect abuse, maintain uptime
Legitimate interests; legal obligations in security incidents
Analytics or marketing cookies
Measure engagement, improve pages, and deliver relevant messaging
Consent where required by PECR and UK GDPR
Accounting and regulatory requests
Meet tax, audit, or law-enforcement requests
Legal obligation
Product improvement
Aggregate reporting on feature usage without identifying individuals where possible
Legitimate interests with appropriate safeguards
You may withdraw consent for consent-based processing at any time without affecting the lawfulness of processing based on consent before its withdrawal. If processing is necessary for a contract or legal obligation, we may need to retain certain data until those duties end.
Cookies and similar technologies
We distinguish strictly necessary cookies that support core site functions from optional analytics or marketing cookies. Strictly necessary cookies may be deployed without consent under PECR when they are essential to provide a service you requested. Optional categories are described in the Cookie Policy and controlled through the cookie banner and settings modal.
Recipients and processors
We share personal data with service providers who host infrastructure, transmit email, analyse traffic, or process payments. Contracts require processors to follow documented instructions, implement appropriate security, and assist with rights requests. We may disclose information when required by law or to protect rights, safety, and property.
International transfers
If data is transferred outside the United Kingdom or European Economic Area, we rely on appropriate safeguards such as the UK International Data Transfer Agreement, standard contractual clauses approved for UK use, or adequacy regulations, supplemented by transfer impact assessments where appropriate.
Retention periods
Enquiry records are kept for up to twenty-four months unless a dispute or legal obligation requires longer retention. Security logs may roll over after shorter intervals. Accounting and tax records follow statutory timelines. Marketing records are refreshed or deleted when no longer needed for the original purpose.
Security measures
We apply access controls, encryption in transit for HTTPS connections, least-privilege administration, vendor review, and staff training. No system is perfectly secure; we assess risks proportionally to the sensitivity of data and update controls as threats evolve.
Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, and objection, and you may withdraw consent where processing is consent-based. You may lodge a complaint with the Information Commissioner’s Office in the United Kingdom. We respond within statutory timelines and may ask for reasonable identity verification.
Children
This website is not directed at children under sixteen. We do not knowingly collect personal data from children without parental authority.
Changes to this policy
We may update this Privacy Policy to reflect legal, technical, or organisational changes. The last updated date at the top adjusts automatically when you load the page. Material changes will be communicated through a prominent notice on the website when practical.
Contact
Questions about this Privacy Policy or data requests can be sent to talk@zaltyrexvikux.world or by post to the address above.