NordicSign

01 Introduction

NordicSign ("we", "us", or "our") provides electronic signature and document workflow services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have in relation to it.

This policy applies to our website, applications, and any related services that link to it. By using NordicSign, you acknowledge that you have read and understood this policy.

02 Information we collect

We collect information in three ways:

Information you provide. Account details such as your name, email address, company name, and password; billing and payment information; and any documents, messages, or signature data you upload or create through the service.
Information collected automatically. IP address, device and browser type, operating system, referring URL, pages viewed, and timestamps of your activity.
Information from third parties. Identity verification results, payment confirmations, and authentication data from providers you choose to connect.

03 How we use information

To provide, operate, and maintain the service.
To create and manage accounts and process transactions.
To verify identity and maintain the audit records required for legally binding electronic signatures.
To respond to support requests and send service-related notices.
To detect, prevent, and investigate fraud, abuse, and security incidents.
To improve and develop our products and features.
To send marketing communications where you have consented, with the option to unsubscribe at any time.

04 Legal bases for processing

Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

Performance of a contract — to deliver the service you have signed up for.
Legal obligation — to retain signature and audit records and to comply with applicable law.
Legitimate interests — to secure our platform, prevent fraud, and improve our services.
Consent — for marketing communications and non-essential cookies. You may withdraw consent at any time.

05 Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. Essential cookies are required for the service to function; all others are used only with your consent.

You can control cookies through your browser settings. Disabling essential cookies may prevent parts of the service from working.

06 How we share information

We do not sell your personal data. We share it only in the following circumstances:

With service providers who process data on our behalf, such as hosting, payment, and email providers, under contractual confidentiality obligations.
With professional advisers such as auditors and lawyers.
With authorities where required by law, or to protect our rights, property, or the safety of our users.
In connection with a merger, acquisition, or sale of assets, in which case we will notify you of any change in ownership.

07 Data retention

We retain personal data for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Completed signature records and their associated audit trails may be retained for the period required by applicable e-signature law, even after you close your account.

08 Your rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your personal data.
Restrict or object to certain processing.
Receive your data in a portable format.
Withdraw consent where processing is based on consent.
Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by law.

09 International transfers

Your data is primarily stored within the European Economic Area. Where we transfer data outside the EEA, we put appropriate safeguards in place, such as the European Commission's Standard Contractual Clauses, to ensure your data receives an equivalent level of protection.

10 Security

We use technical and organisational measures designed to protect your data, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11 Children's privacy

The service is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us so we can remove it.

12 Changes to this policy

We may update this policy from time to time. When we make material changes, we will notify you by email or through the service before the changes take effect. The "Last updated" date above always reflects the current version.

13 Contact us

If you have questions about this policy or how we handle your data, please get in touch using the details below.