Privacy Policy
1. GENERAL INFORMATION
At ScandiSpirit, we take your privacy seriously. This privacy policy explains how we collect, use, store and protect your personal data when you visit our website, shop with us or otherwise interact with us.
ScandiSpirit is a brand owned by Noctura Commerce Limited.
We currently offer our products to customers in Norway and the United Kingdom. If we later offer products or services in other markets, the processing of personal data will be subject to the applicable data protection laws of the relevant market.
For customers in Norway, the General Data Protection Regulation (GDPR), as incorporated into the EEA Agreement, and other applicable Norwegian data protection laws apply.
For customers in the United Kingdom, applicable UK data protection laws apply, including the UK GDPR and the Data Protection Act 2018.
Your statutory rights under applicable data protection laws are not affected by this privacy policy.
2. RESPONSIBLE PARTY
The responsible party for the processing of personal data is:
Noctura Commerce Limited
ScandiSpirit
RM 602, 6/F, KAI YUE COMM BUILDING
NO. 2C ARGYLE STREET
MONGKOK, KOWLOON
HONG KONG
Company registration number: 81238349
Email: support@scandispirit.com
Noctura Commerce Limited is responsible for the processing of personal data carried out in connection with ScandiSpirit.
If applicable data protection laws require us to appoint a representative in a specific market, details of the relevant representative will be made available in this privacy policy.
3. PERSONAL DATA WE PROCESS
Depending on how you use our website and our services, we may process the following categories of personal data:
- Name
- Email address
- Billing and delivery addresses
- Phone number
- Order and purchase history
- Information about products you have purchased
- Payment-related information necessary to complete a payment
- IP address
- Information about the device and browser you are using
- Information about how you use our website
- Information collected through cookies and similar technologies
- Correspondence and customer service inquiries
- Other information you voluntarily provide to us
4. HOW WE COLLECT PERSONAL DATA
We may collect personal data in the following ways:
- When you place an order
- When you create or use features on our website
- When you contact customer service
- When you sign up for our newsletter or other marketing communications
- When you use our website
- Through cookies, pixels and similar technologies, where this is permitted and may require consent
- Through payment, delivery and other service providers involved in fulfilling your order
5. PURPOSES OF PROCESSING
We may process personal data for the following purposes:
- To process and deliver orders
- To process payments
- To fulfill our agreements with customers
- To communicate with customers about orders and customer service
- To handle returns, complaints and other customer inquiries
- To manage and improve our website
- To analyze usage of our website and our services
- To prevent fraud, misuse and security incidents
- To send marketing where this is permitted and where valid consent or another valid legal basis exists
- To comply with legal and accounting obligations
- To protect our rights and interests
6. LEGAL BASIS
We process personal data based on one or more of the following legal grounds, depending on the purpose of the processing:
- Performance of a contract – when processing is necessary to fulfill a contract with you or to take steps at your request prior to entering into a contract
- Consent – when you have voluntarily provided your consent to specific processing
- Legitimate interest – when processing is necessary for our or a third party's legitimate interests, and your interests or fundamental rights do not take precedence
- Legal obligation – when processing is necessary to comply with a legal obligation
For customers in the United Kingdom, we rely on corresponding legal bases under the UK GDPR where relevant.
7. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies to ensure our website functions correctly, remember necessary settings, analyze website usage and, where permitted, support marketing.
Necessary cookies may be used when they are required for our website or a service you have requested to function.
Non-essential cookies and similar technologies are only used where this is permitted under applicable law and, where consent is required, after you have provided valid consent.
You can change or withdraw your consent at any time through the cookie settings on our website.
For customers in the United Kingdom, the relevant rules on cookies and electronic communications also apply, including the Privacy and Electronic Communications Regulations (PECR).
We may use both cookies and other technologies, such as tracking pixels, scripts and similar tools. Such technologies are treated the same as cookies where applicable law requires this.
8. ANALYTICS AND MARKETING TOOLS
Where permitted and subject to consent, we may use analytics and marketing tools, including:
- Google Analytics
- Meta Pixel (Facebook Pixel)
These tools may process information about how visitors use our website, such as details about visits, device, browser, actions on the website and other technical information.
The purpose may be to analyze traffic, understand how the website is used, improve our services and measure or tailor marketing.
Non-essential tracking is not used until required consent has been obtained where applicable law requires this.
For customers in the United Kingdom, the requirements of the UK GDPR and PECR also apply.
9. PAYMENT SERVICES
We use third-party payment services to process payments.
Depending on which payment method you choose, this may include, among others:
- Shopify Payments
- Klarna
- Apple Pay
- Visa
- Mastercard
The payment provider may process payment and transaction information necessary to complete the payment.
In some cases, payment providers may be independent responsible parties for the processing they carry out. Where this is the case, their own privacy policies and terms and conditions will also apply.
10. SHARING OF PERSONAL DATA
We only share personal data with others when it is necessary to operate our business, deliver our services, fulfill orders, comply with legal obligations or for another valid legal basis.
Personal data may be shared with the following categories of recipients:
- Shopify and providers that support our e-commerce platform
- Payment providers
- Shipping and logistics partners
- IT, hosting and operational service providers
- Analytics and marketing service providers
- Customer service and communication service providers
- Accounting and professional advisors
- Public authorities where we are legally required to disclose information
We require providers that process personal data on our behalf to handle the information securely and lawfully, and only in accordance with the agreed purposes.
11. INTERNATIONAL DATA TRANSFERS
Some of our service providers may process or store personal data outside of Norway, the EEA or the United Kingdom.
When personal data is transferred to a country outside the relevant protection framework, we ensure that the transfer takes place in accordance with applicable data protection laws.
This may be done based on, among other things:
- An adequacy decision
- Standard Contractual Clauses (SCC)
- UK International Data Transfer Agreement (UK IDTA)
- UK Addendum to the EU Standard Contractual Clauses
- Other legal transfer mechanisms or exceptions available under applicable law
For customers in the United Kingdom, we comply with the requirements of the UK GDPR for international data transfers.
Where necessary, relevant assessments and security measures will be carried out before or in connection with an international data transfer.
12. STORAGE AND DELETION OF PERSONAL DATA
We only store personal data for as long as necessary for the purposes for which it was collected, or for as long as we are legally required to retain it.
How long data is retained depends, among other things, on:
- The purpose of the processing
- The duration of the customer relationship
- Legal retention requirements
- The need to document transactions and agreements
- The need to resolve any disputes or legal claims
Data that must be retained due to accounting, tax or other legal requirements is stored for as long as applicable law requires.
When personal data is no longer needed, it will be securely deleted or anonymized, unless further retention is required by law.
13. YOUR PRIVACY RIGHTS
Depending on which data protection laws apply to the processing, you may have the right to:
- Access to the personal data we hold about you
- Rectification of inaccurate or incomplete personal data
- Erasure of personal data where the conditions for this are met
- Restriction of processing
- Data portability
- Object to certain types of processing
- Withdraw your consent at any time where processing is based on consent
- Opt out of direct marketing
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, you can contact us at:
We may request necessary information to verify your identity before processing your request.
14. DIRECT MARKETING
We may send marketing via email or other electronic channels where this is permitted under applicable law and where we have a valid legal basis for doing so.
If marketing is based on consent, you can withdraw your consent at any time.
You can also opt out of marketing communications at any time by following the unsubscribe instructions in the relevant message.
For customers in the United Kingdom, we also comply with applicable rules under PECR.
15. COMPLAINTS TO SUPERVISORY AUTHORITIES
If you believe that personal data is being processed in violation of applicable data protection laws, you can contact us first so that we have the opportunity to investigate the matter.
You also have the right to lodge a complaint with the relevant supervisory authority.
For customers in Norway, you can contact:
The Norwegian Data Protection Authority (Datatilsynet)
https://www.datatilsynet.no/
For customers in the United Kingdom, you can contact:
Information Commissioner's Office (ICO)
https://ico.org.uk/
You may also have the right to lodge a complaint with the supervisory authority in the country or jurisdiction where you live, work or believe a breach of data protection laws has occurred.
16. DATA SECURITY
We use appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, destruction, alteration, misuse or other unlawful processing.
However, no method of data transmission or storage is completely secure. We therefore cannot guarantee absolute security for personal data.
17. CHILDREN'S PRIVACY
Our website is not specifically targeted at children.
We do not knowingly collect personal data from children where applicable law requires parental or guardian consent.
If we become aware that we have received personal data from a child in violation of applicable rules, we will take necessary measures in accordance with applicable law.
18. CHANGES TO THIS PRIVACY POLICY
We may update this privacy policy if there are changes to our business, our services, how we process personal data or applicable law.
The current version will always be available on our website.
In the event of material changes, we will provide additional information or notify you in an appropriate manner where required by applicable law.
19. CONTACT
If you have questions about this privacy policy or our processing of personal data, you can contact us:
Noctura Commerce Limited
ScandiSpirit
RM 602, 6/F, KAI YUE COMM BUILDING
NO. 2C ARGYLE STREET
MONGKOK, KOWLOON
HONG KONG
Company registration number: 81238349
Email: support@scandispirit.com
Last updated: 16 September 2026