Privacy Policy

This policy explains how NBB Media Oy (Nordic Beauty Bank) processes personal data through nordicbeautybank.com and direct enquiries. It is intended to meet the requirements of the EU General Data Protection Regulation (GDPR) and Finnish privacy and electronic communications law.

1. Data controller

NBB Media Oy (Nordic Beauty Bank)
Business ID: 3448055-9
Finland
Email: hello@nordicbeautybank.com

2. Personal data we process

We may process the personal data that is necessary for the purposes described below, including:

• information you submit through the contact form or email, such as name, email address, company/brand and message;
• client and business communication information;
• billing and accounting information required for client engagements;
• basic technical information needed to operate and secure the website; and
• your cookie preference, stored locally in your browser.

3. How and why we use personal data

We use personal data to respond to enquiries and prepare proposals; provide our services and manage client relationships; handle invoicing and statutory accounting; and operate and secure the website.

The legal bases under the GDPR are: taking steps before entering into a contract or performing a contract; complying with legal obligations; and pursuing our legitimate interest in operating a functional and secure website. Where optional cookies or similar technologies are used, we rely on your consent.

4. Marketing

We do not use contact-form information for unrelated marketing without an appropriate legal basis. You can object to direct marketing at any time by emailing hello@nordicbeautybank.com.

5. Cookies and similar technologies

Necessary technologies may be used to operate the website and remember your privacy choices. Optional analytics or marketing technologies, if introduced, will only operate after legally required consent has been given. You can review or change your choice at any time through Cookie Settings or in our Cookie Policy.

6. Third-party providers

We do not sell personal data. Trusted service providers may process limited personal data on our behalf where necessary to provide website hosting, email, IT or other business services. The typefaces on this site are loaded from Google Fonts, which means your browser sends certain technical data (such as IP address and browser information) to Google when a page loads.

7. International transfers

Some service providers may process personal data outside the EU/EEA. Where this happens, we use appropriate safeguards required under the GDPR.

8. Retention

We keep personal data only for as long as necessary for the purpose it was collected, unless a longer period is required by law. Enquiry data is retained for up to 24 months from the last contact if no engagement follows. Client and accounting records are kept for the periods required by Finnish accounting and tax law. Your cookie preference is stored in your browser until you clear it or until consent is renewed.

9. Data security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. Access to data is limited to those who need it for their work.

10. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request erasure, restriction or objection where applicable;
• receive your data in a portable format where processing is based on consent or contract and carried out automatically;
• withdraw consent at any time where processing relies on consent; and
• lodge a complaint with the relevant supervisory authority.

To exercise any right, contact us at hello@nordicbeautybank.com. We respond within one month.

11. Complaints

If you believe your data has been handled unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) or with the supervisory authority in your country of residence.

12. Changes to this policy

We may update this policy when our processing practices or legal requirements change. The current version is always published on this page.