Free shipping over € 50Join
Last updated: July 2026
nord nails ("we", "us") is the data controller for the personal data described in this policy.
We are not legally required to appoint a Data Protection Officer. For any question about your data, please use the contact above.
We only process data we need to handle your order, your account or your contact with us.
For an account
For an order
For our loyalty programme (tegoed)
For a review
For support and contact
Technical data
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Fulfilling your order | Account, order, address, payment status | Contract (art. 6.1.b) |
| Creating and managing your account | Account and login data | Contract (art. 6.1.b) |
| Tax and accounting | Invoices and order data | Legal obligation (art. 6.1.c) + Dutch tax law (art. 52 AWR) |
| Loyalty programme and birthday reward | Points, order data, optional date of birth | Consent (art. 6.1.a) |
| Showing reviews | Shortened name, rating, text | Consent (art. 6.1.a) |
| Friend invite (referral) | Email of inviter and invitee | Consent (art. 6.1.a) |
| Answering your questions | Contact details and content | Legitimate interest: customer support (art. 6.1.f) |
| Security and fraud prevention | IP, session, log files | Legitimate interest: protecting customers and webshop (art. 6.1.f) |
| Newsletter / marketing email | Email, preferences | Consent (art. 6.1.a), revocable at any time |
| Transactional email (order confirmation, etc.) | Contract (art. 6.1.b) | |
| Website and product analytics (with consent) | Usage events, device/browser info, IP, pseudonymous ID | Consent (art. 6.1.a), revocable at any time |
| Advertising and conversion measurement (with consent) | Ad click ID, conversion events, hashed email | Consent (art. 6.1.a), revocable at any time |
| Anonymous website usage measurement (without consent) | IP and user-agent, converted server-side into a daily-rotating hash and then discarded; no identifier stored on your device | Legitimate interest: understanding and improving our webshop (art. 6.1.f) |
We do not sell data. We only share what is strictly necessary with service providers we have data processing agreements with. The parties listed below process data inside the EU, or apply Standard Contractual Clauses when processing takes place outside the EU.
| Party | Purpose | Location |
|---|---|---|
| Onze e-commerce backend | Accounts, orders and prices | EU |
| Onze CMS-provider | CMS for website content | EU |
| Odoo | Back-office, accounting and transactional email | EU (Odoo Cloud) |
| Stripe Payments Europe | Processing card, iDEAL and Bancontact payments | EU (Ireland) |
| PayPal (Europe) S.à r.l. | Processing PayPal payments | EU (Luxembourg) |
| PostNL and DHL | Actually delivering your parcel | EU |
| Cloudflare | CDN, image optimisation and security | Global; SCCs apply |
| Algolia | Search (only when active) | EU/US; SCCs apply |
| PostHog (EU) | Website and product analytics | EU (PostHog Cloud EU, Frankfurt); SCCs apply for sub-processor access outside the EU |
| Google Ireland Ltd. | Advertising and conversion measurement (Google Ads) | EU/US; SCCs apply |
In addition, a legal obligation (such as a court order or tax audit) may require us to share data with the competent authorities.
Without your consent we place only functional cookies (listed below), no analytics, tracking or advertising cookies. If you accept analytics in our cookie bar, we also use PostHog (website and product analytics) and Google Ads (advertising and conversion measurement). If you decline, we may still measure anonymous, aggregate visitor numbers using PostHog's cookieless mode, which stores nothing on your device and sets no cookies. You can change your choice at any time via "Cookie settings" in the footer.
| Cookie | Purpose | Lifetime |
|---|---|---|
_medusa_country | Remembers your country for currency | 30 days |
_medusa_locale | Remembers your language choice | 30 days |
_medusa_cart_id | Remembers your basket | 30 days |
_medusa_jwt | Keeps you logged in to your account | session / 7 days |
_nn_cookie_consent | Remembers your cookie choice | 12 months |
Under the Dutch Telecommunications Act, purely functional cookies do not require consent. The cookie bar informs you about these cookies and you can re-open your choice at any time via "Cookie settings" in the footer.
| Category | Retention | Reason |
|---|---|---|
| Invoices and order data | 7 years | Dutch tax retention (art. 52 AWR) |
| Account data | Until you delete your account | Contract |
| Loyalty records | Until you delete your account | Consent and contract |
| Date of birth | Until you remove it or close your account | Consent |
| Reviews | Indefinitely, anonymised after account deletion | Legitimate interest: transparency for other customers |
| Newsletter list | Until you unsubscribe + 12 months evidentiary period | Demonstrating lawfulness of past sends |
| Support emails | 1 year after last contact | Customer service and proof |
| Cookie choice | 12 months | Provability of consent |
We apply technical and organisational measures, including:
Under the GDPR you have the right to:
You can exercise these rights by emailing privacy@nordnails.nl. To prevent abuse, we may ask you to confirm your identity through a secure channel.
You can handle many requests yourself from "My account":
If you have a complaint about how we handle your data, we would like to discuss it with you first. If we cannot reach a solution together, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): autoriteitpersoonsgegevens.nl.
We may update this privacy policy from time to time, for example when our webshop changes or when legislation requires it. The most recent version is always available on this page.
Questions about this privacy policy or about your data? Get in touch: