Privacy Policy

This Privacy Policy explains how Nordic WildFrames (“we”, “us”) collects, uses, discloses, and protects personal data when you visit our website, contact us, or purchase digital products and image licenses.

1) Controller and contact
Controller:
Legal name: Rami Virtanen
Trading as: Nordic WildFrames
Business ID: 3429672-7
Address: Tanskankatu 1 D 37, 20740, Turku
Email: licensing@nordicwildframes.com

2) Personal data we collect
We may collect the following categories of personal data:

A) When you browse the site
- Technical and usage data such as IP address, browser type, device information, pages viewed, timestamps, referrer, and approximate location (derived from IP).
- Cookie/identifier data (see Section 9).

B) When you place an order
- Identity and contact data: name, company name, email address, billing address, phone number (if provided).
- Order data: products purchased, license/package selected, order notes, and invoice/receipt details.
- Delivery-related data: download access or delivery status where available through our e-commerce tools.

C) When you contact us
- Communications: messages, email content, attachments, and any information you choose to share.

D) Payment data
Payments are processed by our payment providers. We do not store full payment card details. Payment providers may process payment identifiers, transaction status, and fraud-prevention signals.

3) Purposes and legal bases (GDPR)
We process personal data only where we have a lawful basis:

A) To provide and deliver our services (Contract)
- Process orders, provide access to digital downloads, deliver license documentation, and provide customer support.

B) To comply with legal obligations (Legal obligation)
- Accounting and tax compliance, record keeping, and responding to lawful requests.

C) To operate, secure, and improve our business (Legitimate interests)
- Fraud prevention, security monitoring, troubleshooting, and improving website performance and customer experience.

D) Marketing communications (Consent or legitimate interests, depending on context)
- If you opt in, we may send marketing emails.
- If you contact us with a business inquiry, we may respond and follow up regarding your request. You can opt out of marketing at any time.

4) Sharing and disclosure
We share personal data only as necessary:

A) Service providers (processors)
We use trusted service providers to operate our store and deliver services, such as:
- We use Shopify to operate our online store, process orders and provide checkout and delivery functionality.
- Payment processors to process payments and help prevent fraud.
- Email and productivity tools to manage business communications.
These providers process personal data on our behalf under contractual terms and only as needed to provide their services.

B) Legal and compliance
We may disclose personal data if required by law or to protect our rights, safety, and security.

C) Business transfers
If our business is reorganized, merged, or sold, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

5) International transfers
Some of our service providers may process data outside the EU/EEA. Where transfers occur, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs) and other contractual measures offered by the provider.

6) Data retention
We retain personal data only as long as necessary:
- Order and billing records: retained for the period required by accounting and tax laws.
- Support communications: retained as needed to handle the matter and for reasonable audit/history, then deleted or anonymized where feasible.
- Technical and cookie data: retained according to cookie lifetimes and our platform settings.

7) Your rights (EU/EEA)
If GDPR applies, you may have rights to:
- Access your personal data.
- Correct inaccurate data.
- Delete data (where applicable).
- Restrict processing or object to processing (especially where based on legitimate interests).
- Data portability (for data you provided, where processing is based on contract or consent).
- Withdraw consent (where processing is based on consent).

To exercise your rights, contact us at licensing@nordicwildframes.com

You also have the right to lodge a complaint with your data protection authority. In Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

8) Security
We use reasonable administrative, technical, and organizational measures to protect personal data. However, no method of transmission or storage is 100% secure.

9) Cookies and similar technologies
We use cookies and similar technologies to:
- Enable essential site functionality (e.g., cart, checkout, security).
- Remember preferences and improve usability.

You can manage cookies through your browser settings and, where applicable, our cookie banner/settings. Disabling some cookies may affect site functionality.

10) Children
Our services are not directed to children. We do not knowingly collect personal data from children.

11) Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date.

12) Contact
Privacy questions or requests:
Email: licensing@nordicwildframes.com
Address: Tanskankatu 1