LEGAL / PRIVACY
Privacy Policy
23 September 2026
This policy explains how Nord Codex AB (NordCodex), based in Malmö, Sweden, handles personal data when you use this website or contact us about a project.
1. Data we collect
We collect information you choose to send through project and consultation forms, such as your name, business email, company, phone number, preferred date and project message.
- Contact and consultation details
- Technical information needed to protect the website from abuse
- Administrator account and authentication data for restricted site management
2. Why we use it
We use submitted information to evaluate and respond to enquiries, prepare requested discussions, operate the website, prevent abuse and secure administrative functions.
- Steps requested before entering a contract
- Legitimate interests in operating and securing the website
- Legal obligations where they apply
3. Security verification
Public forms may use Cloudflare Turnstile to distinguish legitimate visitors from automated abuse. Verification tokens are validated server-side and are not stored in browser storage by NordCodex.
4. Service providers
We may use infrastructure, hosting, authentication, security, scheduling and email-delivery providers to operate the site. They process data only as needed to provide those services and under their applicable contractual and privacy safeguards.
We use Cloudflare Web Analytics to measure visits and page performance on our public website.
5. International transfers
Some providers may process data outside Sweden or the EEA. Where required, we rely on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.
6. Retention
We keep personal data only for as long as it is reasonably needed for the purpose it was collected for, to maintain security records, resolve disputes or meet legal obligations. Data that is no longer needed should be deleted or anonymized.
7. Your rights
Depending on the circumstances, GDPR may give you rights to access, correct, erase, restrict or object to processing, and to receive portable data. You may also complain to the Swedish Authority for Privacy Protection (IMY).
8. Contact about privacy
Use the Contact page for questions or requests about your personal data or privacy. Please state what your request concerns so we can route it to the appropriate person.