Privacy policy

At Nordiclyx, we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, share, and protect your information when you visit or make a purchase from nordiclyx.com. All data processing is carried out in strict accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Lithuanian data protection laws.

1. Who We Are (Data Controller) The entity responsible for processing your personal information (the Data Controller) is: Nordiclyx, UAB Company Registration Number: 307625299 VAT Number: LT100020041015 Registered Address: Žemaičių g. 32, Ariogala, LT-60255 Raseinių r., Lithuania For any privacy-related inquiries, you can reach our team at info@nordiclyx.com.

2. Information We Collect & How We Use It We only collect the information necessary to provide you with our products and improve your shopping experience. We process your data under the following legal bases and for the following purposes:

  • Order Fulfillment: When you make a purchase, we collect your name, billing and shipping address, email, phone number, and payment details. We use this to process your transaction, arrange shipping via our partners (such as LP Express / Unisend), and send order updates. Legal basis: Performance of a contract.
  • Customer Support: If you contact us with inquiries, return requests, or warranty claims, we process your contact details and the content of your communication to resolve your issue. Legal basis: Performance of a contract and legal obligation.
  • Account Management: If you choose to create a customer account, we store your login credentials and order history to make future checkouts faster. Legal basis: Performance of a contract.
  • Marketing Communications: If you explicitly opt-in to our newsletter, we will use your email to send you updates, offers, and news about our sauna products. You can unsubscribe at any time using the link at the bottom of our emails. Legal basis: Your consent.
  • Website Analytics & Optimization: We collect technical data (such as your IP address, browser type, and browsing behavior on our site) to ensure the website functions securely and to understand how customers interact with our store. Legal basis: Legitimate interest (for essential functions) and your consent (for analytics).

3. Sharing Your Personal Data We never sell your personal data. We only share your information with trusted third-party service providers who assist us in operating our business. These include:

  • Shopify: Our e-commerce platform provider, which hosts our store and processes backend data securely.

  • Payment Gateways: Secure, licensed processors that handle your credit card and banking details (we do not see or store your full payment card data).

  • Logistics & Shipping Providers: Carriers like LP Express who need your name, address, and phone number to deliver your sauna whisks and accessories.

  • Legal Authorities: We may disclose information if required to do so by law, such as to the State Tax Inspectorate or other regulatory bodies.

4. International Data Transfers Our store is hosted on Shopify, which means some of your data may be transferred to and processed on servers outside the European Economic Area (EEA), such as in the United States or Canada. We ensure that any such transfers are protected by appropriate legal safeguards approved by the European Commission, such as Standard Contractual Clauses (SCCs), to guarantee your data remains secure.

5. Data Retention We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

  • Order and transaction records are kept for up to 10 years to comply with Lithuanian accounting and tax laws.

  • Customer account data is kept as long as your account remains active.

  • Marketing data is kept until you withdraw your consent (unsubscribe).

6. Your GDPR Privacy Rights As an EU resident, you hold the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.

  • Right to Rectification: You can ask us to correct any inaccurate or incomplete data.

  • Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, provided we are not legally required to keep it for tax or accounting purposes.

  • Right to Restrict or Object: You can object to our processing of your data, particularly for direct marketing.

  • Right to Data Portability: You can request your data in a structured, commonly used format to transfer to another service. To exercise any of these rights, please email us at info@nordiclyx.com. We will respond to your request within 30 days. If you believe your rights have been violated, you also have the right to lodge a complaint with the State Data Protection Inspectorate in Lithuania (vdai.lrv.lt).

7. Cookies and Tracking Our website uses cookies to function properly, remember your cart items, and provide analytics.

  • Essential Cookies: Strictly necessary for the website to work (no consent required).

  • Non-Essential Cookies: Used for performance tracking and marketing (requires your consent via our cookie banner). You can manage or disable non-essential cookies at any time through your browser settings or our cookie consent tool.

8. Security Measures We take the security of your data seriously. Our store uses industry-standard SSL/TLS encryption to protect data in transit. Access to your personal information is strictly limited to authorized personnel who need it to perform their job duties.

9. Age Restrictions Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

10. Updates to This Policy We may update this Privacy Policy periodically to reflect changes in our business practices or legal obligations. The latest version will always be posted on this page.

Last updated: October 10, 2026