Privacy Policy – Nordem Studio

Last updated: 14 July 2026

1. Introduction

This Privacy Policy describes how Nordem Studio, the trading name of ABSC 2026 LTD, collects, uses, stores, shares and protects the personal data of users who:

• visit the website www.nordemestudio.com;
• make a purchase;
• create an account;
• subscribe to marketing communications;
• contact customer service;
• interact with our advertisements;
• use the services and features available on the website.

This Privacy Policy applies to customers and users residing, among other countries, in the United States, the United Kingdom, Canada, Australia and New Zealand.

By using the website or providing us with personal data, you confirm that you have read this Privacy Policy.

2. Data Controller

The controller responsible for the processing of personal data is:

ABSC 2026 LTD
Trading name: Nordem Studio
Company registration number: 17089571
Registered in England and Wales

Registered office:

71–75 Shelton Street, Covent Garden
London, WC2H 9JQ
United Kingdom

Website: www.nordemestudio.com
Email for privacy-related matters: contact@nordemstudio.com

In this Privacy Policy, the terms “Nordem Studio”, “we”, “us” and “our” refer to ABSC 2026 LTD.

3. Personal Data We Collect

Depending on how you interact with Nordem Studio, we may collect the following categories of personal data.

3.1 Identification and Contact Data

We may collect:

• first and last name;
• email address;
• telephone number;
• billing address;
• delivery address;
• country, state, province, territory or region of residence;
• company or tax information that you voluntarily provide.

3.2 Order Information

We may collect:

• order number;
• products purchased;
• selected variants, quantities and characteristics;
• amount, currency, discounts and promotions used;
• delivery information;
• order status;
• requests for changes, cancellations, returns or refunds;
• information relating to warranties, defects or technical support.

3.3 Payment Information

Payments are processed through authorised payment service providers.

We may receive information such as:

• payment method used;
• payment status;
• transaction identifier;
• currency;
• partial card information, such as the card type or last digits;
• fraud-prevention check results.

Nordem Studio does not normally receive or store the complete card number, CVV code or other complete payment credentials.

3.4 Customer Account Data

If you create an account, we may collect:

• email address;
• protected login credentials;
• order history;
• saved addresses;
• customer preferences;
• information associated with your profile.

3.5 Customer Service Communications

When you contact us, we may collect:

• the content of emails or messages;
• photographs and videos submitted;
• records relating to customer support requests;
• product information;
• serial number, batch number or model;
• proof of purchase;
• information required to manage complaints, returns or warranties.

Please do not send us personal data that is not necessary for handling your request.

3.6 Technical and Browsing Data

When you visit the website, we and our technology providers may automatically collect:

• IP address;
• device type;
• operating system;
• browser;
• language;
• time zone;
• device identifiers;
• pages visited;
• products viewed;
• source of the visit;
• date and time of access;
• interactions with the website;
• products added to the shopping cart;
• abandoned shopping carts;
• technical errors;
• approximate geographical location derived from the IP address.

3.7 Marketing and Advertising Data

With your consent or where permitted by law, we may collect:

• marketing preferences;
• newsletter subscriptions;
• interactions with emails and messages;
• advertisements viewed;
• clicks and conversions;
• campaigns through which you reached the website;
• advertising identifiers;
• information about website usage associated with cookies or similar technologies.

3.8 Reviews and User-Provided Content

When you publish a review or send us content, we may collect:

• name or pseudonym;
• rating;
• review text;
• images or videos;
• product purchased;
• date of publication;
• confirmation of a verified purchase, where applicable.

We do not intentionally collect sensitive or special-category personal data, such as health, biometric, religious, political or sexual orientation information.

4. How We Collect Personal Data

We may obtain personal data:

• directly from you;
• when you place an order;
• when you create an account;
• when you complete a form;
• when you contact customer service;
• when you request a return or refund;
• automatically through cookies and similar technologies;
• from Shopify and providers that support our store;
• from payment service providers;
• from carriers and logistics partners;
• from advertising platforms;
• from social networks;
• from fraud-prevention services;
• from publicly available sources, where permitted by law.

5. Purposes and Legal Bases for Processing

We use personal data only where we have a valid legal basis or other lawful justification under applicable privacy legislation.

5.1 Order Management

We use personal data to:

• process payment;
• confirm the order;
• prepare and ship products;
• provide tracking information;
• complete delivery;
• manage changes, cancellations, returns and refunds;
• provide after-sales support.

Legal basis: performance of the contract and steps taken before entering into a contract.

Where another legal framework applies, we process this information because it is necessary to provide the products and services requested by the customer.

5.2 Customer Service and Warranties

We use personal data to:

• respond to questions;
• resolve problems;
• assess defects or damage;
• manage warranties;
• send replacement parts;
• arrange repairs, replacements or refunds.

Legal basis: performance of the contract, compliance with legal obligations and our legitimate interest in providing customer support.

5.3 Legal, Tax and Accounting Obligations

We may process personal data to:

• issue invoices;
• maintain accounting records;
• comply with tax obligations;
• comply with consumer protection legislation;
• cooperate with competent authorities;
• handle legal or regulatory requests.

Legal basis: compliance with a legal obligation.

5.4 Security and Fraud Prevention

We may use personal data to:

• verify the authenticity of orders;
• detect unauthorised payments;
• prevent fraud and abuse;
• protect the website and customer accounts;
• prevent cyberattacks;
• enforce our Terms and Conditions;
• defend our legal rights.

Legal basis: legitimate interests, compliance with legal obligations and the establishment, exercise or defence of legal claims.

5.5 Website and Service Improvement

We may use technical and statistical data to:

• analyse how the website operates;
• identify errors;
• improve navigation;
• evaluate the performance of products and pages;
• develop new features;
• understand general customer preferences.

Legal basis: legitimate interests or consent, where consent is required for non-essential cookies and technologies.

5.6 Marketing Communications

We may use your email address or telephone number to send:

• newsletters;
• offers;
• promotions;
• product communications;
• shopping cart reminders;
• review requests;
• marketing campaigns.

Legal basis: your consent or our legitimate interests where expressly permitted by applicable law.

You may withdraw your consent or unsubscribe at any time by using the link included in our communications or by contacting:

contact@nordemstudio.com

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5.7 Personalised Advertising

With your consent, we may use cookies or similar technologies to:

• display relevant advertisements;
• measure conversions;
• create advertising audiences or segments;
• limit repeated advertisements;
• evaluate campaign effectiveness;
• reach users who have previously visited the website.

These activities may involve advertising partners such as Meta, Google or other platforms where their tools are active on our store.

Legal basis: consent, unless another lawful basis is permitted under applicable legislation.

6. Cookies and Similar Technologies

The website uses cookies, pixels, tags, scripts and similar technologies.

These tools may be classified as:

• strictly necessary cookies;
• functional cookies;
• analytics cookies;
• personalisation cookies;
• advertising cookies.

Strictly necessary cookies enable the operation of the website, shopping cart, checkout, payments, security systems and basic preferences.

Analytics and advertising cookies are used, where required, only after obtaining the user’s consent.

You may manage or withdraw your preferences through the cookie banner or the privacy preferences section available on the website.

Disabling certain cookies may limit some website features.

Further information is available in our Cookie Policy.

Shopify allows us to configure the cookie banner, regional privacy preferences and options relating to the sale, sharing or use of personal data through its customer privacy settings.

7. Shopify

The Nordem Studio store is hosted on the Shopify platform.

Shopify provides the technological infrastructure that allows us to:

• display products;
• manage the shopping cart and checkout;
• receive orders;
• manage customer accounts;
• process payment information;
• prevent fraud;
• provide technical and security services.

Shopify may process personal data on our behalf and, in certain circumstances, for its own purposes, in accordance with its own terms and privacy notices.

Some personal data may be stored or processed in the countries in which Shopify, its affiliates or its service providers operate.

8. Who We Share Personal Data With

We may share personal data only where necessary with the following categories of recipients.

8.1 Platform and Technology Providers

Including:

• Shopify;
• hosting providers;
• Shopify application providers;
• cybersecurity services;
• website management services;
• database and storage providers.

8.2 Payment Service Providers

We share the necessary personal data with banks, payment networks and payment service providers available during checkout.

These parties may carry out fraud-prevention checks and security controls.

8.3 Logistics Providers

We may share your name, address, telephone number, email address and order information with:

• warehouses;
• suppliers;
• fulfilment centres;
• delivery carriers;
• freight forwarders;
• customs operators;
• tracking service providers.

This information is used to prepare, ship and deliver the order.

8.4 Customer Support and Communication Services

We may use providers for:

• email management;
• live chat;
• customer service;
• newsletters;
• notifications;
• review requests;
• technical support.

8.5 Analytics and Advertising Services

With the user’s consent, we may share online identifiers and usage data with:

• advertising platforms;
• social networks;
• analytics tools;
• attribution services;
• conversion measurement tools.

8.6 Professional Advisers

We may share personal data with:

• accountants;
• tax advisers;
• lawyers;
• auditors;
• insurers;
• business advisers;
• compliance service providers.

8.7 Public Authorities

We may disclose personal data where required by:

• tax authorities;
• courts;
• law enforcement agencies;
• customs authorities;
• consumer protection authorities;
• data protection or privacy authorities;
• other legally competent authorities.

8.8 Corporate Transactions

In the event of a merger, acquisition, sale, restructuring or transfer of the business, personal data may be disclosed to potential purchasers and their advisers, subject to applicable safeguards.

9. Sale and Sharing of Personal Data in the United States

Nordem Studio does not sell personal data in direct exchange for money.

However, the use of advertising cookies, pixels and personalised advertising tools may be classified under certain United States privacy laws as:

• sale of personal data;
• sharing of personal data;
• targeted advertising;
• cross-context behavioural advertising.

Where applicable, United States residents may opt out of these activities through:

• the cookie banner;
• the “Privacy Preferences” section;
• the “Do Not Sell or Share My Personal Information” option;
• a request sent to contact@nordemstudio.com.

Where required by law and technically supported, we will treat Global Privacy Control signals as a valid opt-out request.

Applicable state privacy laws may provide rights to access, delete and correct personal data and to opt out of its sale, sharing or use for targeted advertising.

10. International Transfers

Nordem Studio operates through service providers located in different countries.

As a result, personal data may be transferred to or processed in:

• the United Kingdom;
• the United States;
• Canada;
• Australia;
• New Zealand;
• the European Economic Area;
• countries in which Shopify, delivery carriers, technology providers or business partners operate.

When personal data is transferred outside its country of origin, we use appropriate safeguards where required, including:

• adequacy decisions or recognised countries;
• approved standard contractual clauses;
• agreements or addenda recognised under United Kingdom legislation;
• contractual privacy protections;
• technical and organisational safeguards;
• other legally valid transfer mechanisms.

The protections used will depend on the country of origin, the destination country and the applicable privacy legislation.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with legal obligations.

In general:

• order, invoice and transaction information may be retained for up to 10 years, depending on applicable tax and accounting obligations;
• account information is retained while the account remains active and afterwards for the period necessary to manage legal obligations or disputes;
• customer service communications may be retained for up to 3 years after the request is closed;
• return, refund and warranty information may be retained for the duration of the customer relationship and applicable legal limitation periods;
• fraud-prevention and security information may be retained for up to 5 years, unless longer retention is necessary;
• marketing information is retained until consent is withdrawn or after an extended period of inactivity;
• opt-out preferences may be retained to prevent future unwanted marketing communications;
• cookie retention periods are indicated in the cookie banner or Cookie Policy.

We may retain certain personal data for longer where necessary to:

• comply with a legal obligation;
• establish, exercise or defend a legal claim;
• prevent fraud;
• manage a dispute;
• respond to requests from authorities.

12. Data Security

We implement reasonable technical and organisational measures to protect personal data against:

• unauthorised access;
• loss;
• destruction;
• alteration;
• misuse;
• accidental disclosure;
• cyberattacks.

These measures may include:

• secure connections;
• access controls;
• authentication;
• permission restrictions;
• security monitoring;
• fraud-prevention systems;
• contracts with service providers;
• internal incident-management procedures.

No electronic transmission or storage system is completely secure. We cannot therefore guarantee absolute security.

13. Automated Decision-Making and Fraud Prevention

We may use automated tools to analyse the risk associated with an order or transaction.

These tools may consider factors such as:

• IP address;
• billing and delivery addresses;
• transaction characteristics;
• payment method;
• previous orders;
• technical or security indicators.

An order may be suspended or subject to manual review where a high level of risk is detected.

Where required by applicable law, the user may request human intervention, express their point of view or challenge a significant decision based exclusively on automated processing.

14. Rights of Residents in the United Kingdom

If you reside in the United Kingdom, you may exercise, where provided by law:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right to withdraw consent;
• the right not to be subject to certain decisions based solely on automated processing;
• the right to lodge a complaint with a supervisory authority.

To exercise a right, send a request to:

contact@nordemstudio.com

The request must clearly specify the right you wish to exercise.

We may ask you to provide reasonable information to verify your identity and protect personal data from unauthorised access.

We will respond without undue delay and, generally, within one month of receiving the request. This period may be extended in complex cases where permitted by law.

15. Right to Object to Direct Marketing

You may object at any time to the use of your personal data for direct marketing purposes.

You may do so by:

• selecting “Unsubscribe” in our emails;
• changing the available preferences;
• contacting contact@nordemstudio.com.

After you object, we may retain your email address on a suppression list to ensure that further marketing communications are not sent.

We may continue to send communications that are strictly necessary in relation to orders, security, payments, deliveries, returns or warranties.

16. Rights of United States Residents

Depending on your state of residence and the applicability of the relevant legislation, you may have the right to:

• know the categories of personal data collected;
• know the sources and purposes of processing;
• obtain access to specific personal data;
• correct inaccurate personal data;
• request deletion;
• obtain a portable copy of personal data;
• opt out of the sale or sharing of personal data;
• opt out of targeted advertising;
• limit the use of certain sensitive personal information;
• not be discriminated against for exercising your rights;
• appeal the refusal of a request, where provided by law.

You may submit a request to:

contact@nordemstudio.com

Before responding, we may verify the identity of the person making the request.

You may also use an authorised agent where permitted by law. In this case, we may request evidence of the agent’s authorisation.

We do not knowingly collect or use sensitive personal information for the purpose of inferring personal characteristics about users.

17. Notice for California Residents

During the preceding 12 months, we may have collected the following categories of personal information:

• identifiers;
• contact information;
• commercial information;
• purchase information;
• internet activity;
• device information;
• approximate geographical location;
• professional information voluntarily provided;
• inferences relating to commercial interests.

We may use and disclose this information for the purposes described in this Privacy Policy.

We do not sell personal information in exchange for money.

Personalised advertising and certain analytics tools may, however, be considered a “sale” or “sharing” under California privacy legislation.

We will not discriminate against users for exercising a right granted by law.

We do not currently offer financial incentives in exchange for the collection, sale or retention of personal information.

18. Rights of Residents in Canada, Australia and New Zealand

Depending on the country, province or territory in which you reside and the applicability of the relevant legislation, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete information;
• withdraw consent, subject to legal or contractual restrictions;
• object to or complain about certain processing activities;
• request information about how your personal data is used or disclosed;
• lodge a complaint with the competent privacy authority.

Canada

Residents of Canada may have rights under applicable federal, provincial or territorial privacy legislation.

Depending on the applicable law, you may request access to or correction of personal information and withdraw consent where processing is based on consent.

Australia

Residents of Australia may have rights under the Privacy Act 1988 and the Australian Privacy Principles, where applicable.

You may request access to or correction of personal information and submit a complaint about how your personal information has been handled.

New Zealand

Residents of New Zealand may have rights under the Privacy Act 2020 and applicable privacy principles.

You may request access to or correction of your personal information and submit a complaint to the competent privacy authority.

Requests may be sent to:

contact@nordemstudio.com

We may request reasonable information to verify your identity before processing the request.

19. Children

The Nordem Studio website and products are not specifically intended for children under the age of 16.

We do not knowingly collect personal data from children under the age of 16 without the authorisation of a parent or legal guardian where required.

Orders must be placed by adults or with the consent and supervision of a legal guardian.

If you believe that a child has provided us with personal data without authorisation, contact us at:

contact@nordemstudio.com

We will take reasonable steps to delete the personal data unless a legal obligation requires us to retain it.

20. Links to External Websites

The website may contain links to:

• social networks;
• payment platforms;
• supplier websites;
• external services;
• third-party applications.

Nordem Studio does not control the privacy practices of these third parties.

We recommend reviewing their respective privacy policies before providing personal data.

21. Complaints

For any concern regarding the processing of personal data, you may contact us at:

contact@nordemstudio.com

We will seek to review and resolve the complaint promptly.

You may also have the right to lodge a complaint with the competent privacy or data protection authority in your country, state, province or territory.

Examples include:

• in the United Kingdom: the Information Commissioner’s Office;
• in Canada: the Office of the Privacy Commissioner of Canada or the competent provincial authority;
• in Australia: the Office of the Australian Information Commissioner;
• in New Zealand: the Office of the Privacy Commissioner;
• in the United States: the competent state Attorney General, privacy authority or other applicable regulator.

Exercising this right does not affect your ability to use any other available administrative or judicial remedy.

22. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect:

• legislative changes;
• changes to our services;
• new service providers;
• changes to the technologies used;
• updates to our data-processing practices;
• organisational changes.

The updated version will be published on the website together with the relevant update date.

Where changes are significant, we may provide an additional notice through the website or by other appropriate means.

23. Contact Information

To exercise your rights or request information about the processing of personal data:

Email: contact@nordemstudio.com
Website: www.nordemestudio.com

Data controller:

ABSC 2026 LTD
Trading name: Nordem Studio
Company registration number: 17089571
71–75 Shelton Street, Covent Garden
London, WC2H 9JQ
United Kingdom