Privacy Policy

Hjortborg Solutions ApS Vestergade 65D, 2. 4. 8000 Aarhus C, Denmark CVR 45227561 Email: info@nordicstealth.com

All enquiries regarding this privacy policy should be directed to the above.

We set no cookies. The site stores five small values in your browser's own storage so it can remember your language, your consent choice, whether you have already reserved, and whether you have seen the opening animation and the reservation dialog during this visit. None of them contain personal data, none are sent to a server, and none are shared with third parties.

Visit statistics, only with your consent: if you allow statistics in the banner, we load Vercel Web Analytics from our hosting provider Vercel Inc. The service sets no cookies. It records pages visited, referring page, country, browser, operating system and device type, and recognises your visit through a temporary hash of the request that is discarded after 24 hours. The measurement script is fetched only after you have said yes, never before. The legal basis is your consent, GDPR Article 6(1)(a), and you can withdraw it at any time under "Cookie settings" at the bottom of the page. If you decline, the service is not loaded. Transfers to the United States take place under the EU-U.S. Data Privacy Framework.

We use no marketing cookies and no Meta pixel, and no data is sent to Meta, Google or any other ad network. If that changes, we will ask for a new, explicit consent first. The complete list of what is stored, for how long and why is set out in the cookie policy.

When you reserve a spot or write to us through the contact form, we collect:

• Your name • Your email address • Your phone number (optional) • Your country, derived from the dialling code of your phone number if you give one • Your Instagram handle (optional, reservation only) • Your company name (optional, contact only) • The message you write (contact only)

Reservation data is used solely to contact you with order details and founder pricing. Contact form data is used solely to respond to your enquiry. Neither is sold, shared, or used for marketing without your explicit consent.

Legal basis: GDPR Article 6(1)(b). Processing necessary to take steps at your request prior to entering into a contract.

If you answer the two questions about the product, we store your answer. Answered from the "Your opinion" page, it is stored without an email address. Answered right after a reservation, it is stored together with the email address you reserved with. Legal basis: Article 6(1)(f), our legitimate interest in understanding demand. You can ask us to delete the answer by writing to info@nordicstealth.com.

Retention: contact enquiries are deleted after 2 years. Reservations are deleted no later than 12 months after launch, unless the reservation becomes an order. If it does, the data is kept for 5 years after the end of the financial year under bookkeeping law.

Withdrawal function: if you use "Withdraw from contract" on this site, we collect your order number, name, email and, where given, the date you received the goods. The data is used to register your withdrawal, send you the statutory receipt and process the refund. Legal basis: Article 6(1)(c) (the Danish Consumer Contracts Act, section 20 a) and 6(1)(b). It is retained for 5 years under bookkeeping law.

Under GDPR you have the right to:

• Access the personal data we hold about you • Rectify inaccurate data • Request erasure of your data • Restrict processing of your data • Data portability

To exercise any of these rights, contact info@nordicstealth.com. We will respond within 30 days.

You may also lodge a complaint with the Danish Data Protection Authority (Datatilsynet): www.datatilsynet.dk

Your data is transmitted over HTTPS and stored securely. We use these processors:

• Vercel Inc. (USA): hosting of the site and, only with your consent, visit statistics • Notion Labs, Inc. (USA): private databases holding pre-orders, contact enquiries, survey responses and withdrawals, accessible only to Hjortborg Solutions ApS • Resend, Inc. (USA): delivery of confirmation and receipt emails, and launch emails to those who have reserved

Transfers to the United States take place under the EU-U.S. Data Privacy Framework or the EU standard contractual clauses. All data is handled in accordance with the providers' security practices.

We may update this policy as our services evolve. The date of the most recent revision is shown at the top of the page. Continued use of the site after changes constitutes acceptance of the updated policy.