PEPNORD
How PepNord collects, uses and protects personal information.
This privacy policy applies to pepnord.com (the “Website”), operated by PepNord. We are committed to protecting privacy and handling personal information in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data-protection laws.
We may collect and process contact details, delivery information, order details, payment references and technical data such as IP address, browser type and pages visited. Payment-card details are handled by the payment provider and are not stored by PepNord.
Information is used to process and fulfil orders, provide customer support, send order and shipping updates, improve the Website, meet legal obligations and prevent fraud. We do not use personal data for automated decisions that produce legal or similarly significant effects.
We process personal information where necessary to perform a contract, pursue legitimate interests such as service improvement and fraud prevention, comply with legal obligations such as accounting requirements, or where consent has been provided.
We share information only with service providers needed to operate our services, including payment providers such as Stripe, delivery partners such as PostNord, Instabox and Budbee, and providers supporting hosting and operations. We do not sell or rent personal information. Providers are required to protect the data they handle.
The Website uses essential cookies and local storage to remember the shopping cart, language selection and session state. We do not use third-party advertising cookies. Browser controls can be used to manage stored data, although disabling essential storage may affect Website functions.
We retain personal information only for as long as needed for the purposes described here or to comply with law. Order records are retained for applicable tax and accounting periods. Deletion requests remain subject to legal retention requirements.
Under the GDPR, you may have rights to access, correct or erase personal information, restrict or object to processing, receive data in a portable format and withdraw consent. Contact support@pepnord.com to make a request. You may also lodge a complaint with the relevant supervisory authority.
We use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure or loss. Payment transactions are encrypted and processed through PCI-compliant payment providers.
Information is primarily processed within the EU/EEA. If a provider transfers data outside the EU/EEA, appropriate safeguards are required, such as an adequacy decision or standard contractual clauses.
We may update this policy from time to time. The current version is always available on this page. Material changes will be communicated through the Website where appropriate.
For privacy questions or to exercise your rights, contact support@pepnord.com.