Nordic TCG protects your privacy. We only collect the information that is necessary to be able to offer our services and handle your data with the greatest care. We never sell or share your data with third parties for commercial purposes (marketing).
1. What information do we collect?
When you shop with us, we collect the information required to fulfill the contract:
Name, address, and contact information (e-mail and phone number).
Order history and payment status.
IP address and browser information (for security and analysis).
2. Purposes of data processing
We process your data to:
Manage and deliver your orders.
Communicate about your order (e.g. delivery notifications).
Fulfill legal obligations (e.g. the Accounting Act).
Improve our website via anonymized statistics (Google Analytics).
3. Sharing data with third parties
In order to operate our store, we share necessary data with the following partners:
PrestaShop: Our e-commerce platform. They handle your data for technical support and secure operation.
Hosterion: Our web hosting, where the database is stored securely within the EU.
Payment providers (Klarna & Stripe): When making a payment, your name, address and order details are shared with the selected partner to process the payment and prevent fraud.
Logistics (PostNord & DHL): We share your contact and address details to be able to send your packages.
Google Analytics: Used to analyze how the website is used. The data is anonymized and cannot be linked to you as an individual without your consent.
4. Storage periods
We save your data as long as you are a customer with us. If you choose to close your account, we will delete your personal data, with the exception of information that we are required by law (e.g. the Accounting Act) to retain for seven (7) years.
5. Your rights (GDPR)
Under the GDPR, you have the right to:
Get an extract: Request a copy of the personal data we hold about you.
Correct information: Ask us to correct incorrect information.
Be erased: Request that we delete your personal data ("right to be forgotten").
Object: Object to how we use your data.
To exercise your rights, please contact us at info@nordictcg.se.
6. Supervisory authority
If you believe that we are processing your personal data incorrectly, you have the right to file a complaint with the Swedish Data Protection Authority (IMY).
7. Changes
We reserve the right to update this policy. The latest version is always available at nordictcg.se.
