Legal
Privacy policy
The short version: we only process the personal data you send us when you make an inquiry, we use it solely to answer and handle that inquiry, and we never sell it or use it for advertising. The details — in plain language.
Who is responsible for your data
The data controller is NORDLABELS spółka z ograniczoną odpowiedzialnością (NORDLABELS sp. z o.o.), with its registered seat at Konwaliowa 10, 05-805 Kanie, Poland, NIP 5342714834, VAT PL5342714834, KRS 0001254509 ("NordLabels", "we"). For anything in this policy, write to contact@nordlabels.com.
What we collect, why, and for how long
| Data | Where it comes from | Why we process it | Legal basis | Kept for |
|---|---|---|---|---|
| Name, company, e-mail, phone (optional), country, your inquiry text and any files you attach | The inquiry form, or an e-mail you send us | To answer your inquiry, prepare a quote and handle the resulting order | Taking steps prior to a contract, and performing it (GDPR Art. 6(1)(b)) | 24 months after our last contact, or as long as an active order requires |
| Order and invoicing records | Orders you place | Bookkeeping and tax obligations | Legal obligation (Art. 6(1)(c)) | 5 years, as required by Polish accounting and tax law |
| Basic technical logs (IP address, requested page, timestamp) | Our web server | Keeping the site secure and diagnosing faults | Legitimate interest (Art. 6(1)(f)) | 30 days |
We do not use your data for marketing, we do not build profiles, and we do not make automated decisions about you.
Who sees your data
Inquiries go into our own customer-management system, run by us. Beyond that, your data is handled only by the service providers we need to operate: our e-mail provider (Microsoft 365, operated by Microsoft Ireland Operations Limited) and our hosting provider (Cloudflare, Inc.), each bound by a data-processing agreement. We never sell personal data and never share it with advertisers.
Where your data is processed
Your data is processed within the EU/EEA wherever possible. Some providers may process data outside the EEA — Cloudflare (website delivery and security) and Microsoft (Microsoft 365 e-mail) — under the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
Your rights
You can ask us at any time to: see the data we hold about you, correct it, delete it, restrict how we use it, hand it over in a portable format, or object to processing based on legitimate interest. Write to contact@nordlabels.com — we answer within one month. You also have the right to complain to your data-protection authority; in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
Security
The site is served over HTTPS, inquiry data is stored on access-controlled systems, and only the people who handle quotes and orders can read it.
Cookies
This site sets no cookies and runs no tracking — the full story is in our cookie policy.
Changes to this policy
If we change how we handle personal data, we update this page first and change the date below.
Last updated: 8 August 2026