Privacy Policy

01

Who we are

North & Noble is a clothing company designing and selling modern essentials from Portland, Oregon. We are the data controller for the personal data collected through this website.

• Address: 1825 NW Glisan St, Portland, OR 97209, United States
• Phone: +1 (503) 555-0148
• General enquiries: hello@northandnoble.com
• Data Protection Officer: privacy@northandnoble.com

02

Data we collect

Through the contact form we collect what you type into it: your name, email address, the subject you pick and the body of your message. Through the newsletter form we collect your email address and nothing else.

We do not collect special categories of data under Art. 9 GDPR — no health, religious, political, biometric or sexual-orientation data.

The forms on this template do not send data anywhere. They show a confirmation in your browser and stop there. Once a form is wired to a real server, this policy has to be updated to describe where the data actually goes.

03

Purpose and legal basis

We process contact-form data under Art. 6(1)(b) GDPR — performance of a contract, or steps taken at your request before entering into one. In practice: answering your question, advising on sizing, handling an order or a return, and arranging a fitting.

Newsletter subscription rests on your consent under Art. 6(1)(a) GDPR. That consent is given by ticking the box on the form and can be withdrawn at any time, with no effect on processing carried out before the withdrawal.

04

Cookies and browser storage

This site uses only what it needs to function. There are no advertising cookies, no third-party tracking pixels and no behavioural analytics.

Your cookie choice and your demo shopping cart are kept in your browser’s localStorage, on your own device, and are never sent to a server. You can clear either one at any time by clearing site data in your browser.

If we add a measurement tool later, it will load only after you press “Accept” on the cookie bar.

05

Sharing your data

We do not sell, rent or trade personal data. It is not shared with third parties beyond the purposes set out in section 03, except where the law or a competent authority requires it.

The site embeds no social widgets and no third-party scripts capable of reading what you type into a form.

06

Storage and security

Everything travelling between your browser and our server is encrypted in transit over HTTPS/TLS.

Form data is kept only as long as the purpose it was collected for requires, and is deleted once that purpose ends — at most 24 months for an enquiry that does not lead to an order. Only the staff handling your request can access it.

07

Your rights under the GDPR

In respect of your personal data you have the following rights:

• Right of access — to know what we hold about you (Art. 15)
• Right to rectification — to have incorrect or incomplete data corrected (Art. 16)
• Right to erasure — to have data deleted when it is no longer needed (Art. 17)
• Right to restriction of processing — to have processing paused (Art. 18)
• Right to data portability — to receive your data in a machine-readable format (Art. 20)
• Right to object — to object to the processing of your data (Art. 21)

Send a request to privacy@northandnoble.com and we will answer within 30 days. You also have the right to lodge a complaint with the data protection supervisory authority (DPA) where you live.

08

Contact our DPO

Any question about this policy, or about how we handle your data, goes to our data protection contact: privacy@northandnoble.com, or by post to 1825 NW Glisan St, Portland, OR 97209, United States.