Privacy Policy

This Privacy Policy describes how your personal data is collected, used and deleted while you (hereinafter you) visit our website www.nordichomeplans.com, and use any services or purchase any products provided via the website and its subdomains.

The controller of your personal data is NordicHomePlans OÜ, an Estonian company with the registry code 14047011, address Narva mnt 7, Tallinn, Harju maakond 10117, Estonia, email hello@nordichomeplans.com (hereinafter NordicHomePlans, we, or us).

Any references or links to third-party websites, services or products are subject to separate privacy policies and terms that NordicHomePlans does not control nor is responsible for. Please read third-party policies additionally to understand their scope. NordicHomePlans never knowingly adds any references or links to third parties that have a negative impact on your privacy, but we cannot take responsibility for their actions if those third parties are not our service providers.

General Provisions
1. NordicHomePlans ensures that the processing of personal data is in accordance with the legislation regarding the protection and security of personal data (including the General Data Protection Regulation of the European Union, GDPR), other personal data protection legislation, and good business practices.
2. NordicHomePlans considers the privacy of individuals and the protection of their data important and makes the best efforts to ensure the security and protection of the information system and other data carriers.
Definitions
1. Order means a purchase order submitted by the Client to purchase one or more Plans from NordicHomePlans.
2. Plan means a set of construction drawings provided to Clients by NordicHomePlans that define a house’s construction specifications, including the floor plan and related technical drawings, the exact scope of which is determined on the Website.
3. Website means the website with the domain name www.nordichomeplans.com, including its subdomains.
4. Processing of personal data means viewing, collecting, saving, storing, altering, transmitting, or receiving personal data and other activities related to personal data.
Purpose and Legal Basis for Processing Personal Data
1. NordicHomePlansonly processes personal data necessary to provide the Plans and related services, including making the Website available.
2. In general, the legal basis for such a purpose is carried out in accordance with: Article 6(1)(a) of the GDPR (you have consented to the specific data processing), Article 6(1)(b) of the GDPR (necessary for the performance of the contract or taking steps at your specific request prior to entering into a contract), Article 6(1)(c) of the GDPR (processing is necessary for compliance with a legal obligation), or Article 6(1)(f) of the GDPR (necessary for legitimate interests provided that those interests are not outweighed by your rights and interests).
3. NordicHomePlans is processing the following personal data:

Processing activity	Data categories	Purpose	Legal basis
Order processing and Plan delivery	Full name, Address, Email, Other specifications	To supply you with ordered Plans	Contractual obligation
Processing payments	Financial data, Pricing data, Bank account data	Accounting law obligations	Legal obligation
Website and related product maintenance and quality	IP address, Device information such as the type and operation system, Browser information such as browser name and version, Geolocation	Providing the Platform and functionalities	Contractual obligation
Web visitor analytics	Online identifiers (including cookie identifiers and IP addresses)	Website visitor statistics	Consent
User communication and request resolving	Name, E-mail, User request content and communication	Client support	Contractual obligation
Newsletters and offers	User Name, Phone number, E-mail address	Marketing	Consent. You can opt-out of our marketing emails at any time

How We Collect Personal Data
1. The personal data we process is provided to us directly by you in order to submit Orders and purchase Plans and to use our Website.
2. In addition, we may also collect your personal data indirectly. When visiting our Website, we and our service providers may collect certain data using tracking technologies like cookies, web beacons and similar technologies. The use of web cookies is described on our website in the cookie banner.
3. Indirectly collected data may fall under the terms of third-party privacy policies while they act as independent data controllers. Please read those separately.
Disclosure of Personal Data
1. NordicHomePlans employees and business partners have access to personal data to the extent necessary for the performance of their work duties and are covered by confidentiality obligations. Any data you provide will not be publicly displayed or shared with third parties.
2. NordicHomePlans engages third-party service providers to provide, run, and maintain the Website on our behalf. These service providers have access to your personal data only to the extent necessary to perform their services, and they are contractually obligated to maintain the confidentiality and security of your information.
3. We may disclose your personal data if required to do so by law or in good faith belief that such action is necessary to comply with legal obligations, such as platform exchange of tax information or anti-money laundering obligations.
4. We share your personal data with:

Categories of Recipients	Reason for Sharing	Territory
Service providers	We work with service providers that work on our behalf which may need access to certain personal data to provide their services to us. These companies include those we have hired to operate the technical infrastructure that we need to provide service and assist in protecting and securing our systems and services as well as for business management and marketing. Mailchimp – Emails and campaigns Google analytics – Data analytics Namecheap – Website hosting	EEA
Payment providers	For payment services we use Stripe and PayPal. Payment service providers process your data separately as data controllers and thus their privacy policy applies.	EEA
Advertising partners	We work with advertising partners to enable us to customize the advertising content you may receive. These partners help us deliver more relevant ads and promotional messages to you, which may include interest-based advertising, contextual advertising, and generic advertising (Google, X, Hotjar, Mailchimp, Instagram, Facebook, LinkedIn, Pinterest). We and our advertising partners process certain personal data to help us understand your interests or preferences so that we can deliver advertisements that are more relevant to you. When doing this, we take into account the data protection requirements regarding your consent and opt-out.	EEA

Transmission of Personal Data
1. NordicHomePlans processes personal data in the European Union (EU) and within the European Economic Area (EEA). NordicHomePlans receives, transmits, and processes personal data only digitally.
2. If we use service providers that process your data outside the EEA, we make sure that the transfer of your personal data is carried out in accordance with applicable privacy laws and, in particular, that appropriate contractual, technical, and organisational measures are in place (e.g. additional safeguards through Standard Contractual Clauses).
Security of Personal Data
1. We have taken necessary technical and organizational security measures to protect your personal data against accidental or unlawful destruction, loss or alteration and against unauthorized disclosure, abuse, or other processing in violation of applicable laws.
Retention of Personal Data
1. The storage period of personal data depends on the legal obligations to store data (i.e. accounting regulations), contractual obligations, legitimate interest to provide the best services, or your explicit consent:

Data type	Purpose	Retention time
Order history	To manage Order history for statistics, possible disputes, and applying discounts for recurring purchases	Retained for 3 years after the purchase
Financial data	Accounting law obligations	7 years after the end of the current fiscal year
IP address, Device information such as the type and operation system, Browser information such as browser name and version, Geolocation	Providing the Website and functionalities	Until account deletion and cookie retention time
Online identifiers (including cookie identifiers and IP addresses)	Website visitor statistics	Until cookie retention time or request for data deletion
Name, E-mail, User request content and communication	Client support	Two months after communication
User Name, Phone number, E-mail address	Marketing	Until withdrawal of consent

Rights of the Data Subject
1. You as the data subject shall at all times have the right:
  1. to be informed and to access personal data (you may get information regarding your personal data processed by us, accessed via the Website);
  2. to data portability (you have the right to receive your personal data from us in a structured, commonly used and machine-readable format and to independently transmit those data to a third party);
  3. to erasure (you have the right to have personal data we process about you erased from our systems if the personal data are no longer necessary for the related purposes);
  4. to object and restrict (you have the right to object to the processing of your personal data and restrict it in certain cases);
  5. to rectification (you have the right to make corrections to your personal data);
  6. to withdraw consent (if you have given us consent to process your personal data, you may withdraw said consent at any time).
2. In order to exercise these rights, please contact us at hello@nordichomeplans.com. The application shall be responded to within a maximum of 30 calendar days.
Additional Provisions
1. With your explicit consent, we may send you our newsletter and marketing offers. You may opt out of these messages. Please note that email marketing messages, if used, include an opt-out mechanism within the message itself (e.g. an unsubscribe link in the messages we send to you). Clicking on the link will opt you out of further messages. You may also opt-out on your account settings in case this option is available. We may also use social media tools to market our products and services. As social media and web analytics providers act as separate data controllers, there might be consent or opt-out requirements also on their side.
2. If you have questions or concerns about our use of your personal information, feel free to contact us at hello@nordichomeplans.com. You may also lodge a complaint to the supervisory authority, the Estonian Data Protection Inspectorate, info@aki.ee.
3. NordicHomePlans has the right to change the conditions for processing personal data. In the event, that there are substantial changes, NordicHomePlans will provide at least 1 (one) month’s notice in advance through the Website before the substantial changes take effect.