Privacy notice

What the seller does with your personal data when you look around or buy in this shop, and what you can ask for.

Who is responsible

The controller of your data is the seller below ("we" on this page). Write to us about anything on this page.

Seller

Northlight

What is kept, and why

• When you order: your name, e-mail address, phone number, delivery address (and your billing details - a billing name and address, a company name and a tax number - if you add them), what you bought, how you paid, and the messages about your order. We need them to fulfil the contract (GDPR Art. 6(1)(b)), and we keep the invoicing data for as long as accounting and tax law requires (Art. 6(1)(c)).
• If you sign in to this shop with an e-mail link: your e-mail address, your saved addresses and your wishlist (Art. 6(1)(b)). An account not used for 24 months is deleted.
• When you write through the contact form: your name, e-mail address and message, so that we can answer you (Art. 6(1)(b) and (f)).
• When you review a product: the name you give, your rating and your words, shown with the product once we approve it (Art. 6(1)(a)).
• When you ask to be told that a product is back: your e-mail address and the product, to send you that e-mail; it carries a link to stop it (Art. 6(1)(a)).
• When you look around: the shop counts page views, carts and orders with a code made from your browser's address and type, which changes every day. The address itself is never stored, and the code cannot tell anyone who you are or link you to another day. No cookie is used for it (Art. 6(1)(f): our interest in knowing how the shop is used).

Cookies

The shop uses only the cookies it needs to work: your language, your cart, your sign-in, a checkout safeguard, a discount or gift card code you entered, the products you compare, and whether you list products as a grid or a list. While you fill in the checkout, your browser keeps what you typed in its own storage until you order; it never leaves your device. Each cookie is listed in Storefront Ninja's privacy notice.

Who else receives data

• Storefront Ninja (Human Hygiene Kft., Hungary) runs the shop for us and keeps its data on our behalf, as our processor, on servers in Finland, inside the EU. It sends the shop's e-mails through Amazon Web Services (Frankfurt), or through Resend (United States) when AWS cannot take a message. The details: Storefront Ninja's privacy notice.
• The carrier delivering your order receives your name, delivery address and phone number.

Your rights

You can ask us for a copy of your data, to correct or delete it, to restrict its use or to receive it in a portable form, and you can object to a use based on our interest. A consent can be withdrawn at any time, without affecting what was done before. If you have an account here, you can download or delete it yourself: Privacy.

If you think your data is mishandled, you can complain to the data protection authority of the EU country where you live, work or where it happened, or go to court.