Privacy Policy

Last updated: August 31, 2026

This Privacy Policy describes how NBI Blockchain Association (“we,” “us,” “our” or the “Company”) collects, uses, stores, shares and protects personal information when you visit our online store, place an order, contact us or otherwise use our services.

Please read this Privacy Policy carefully before using our website or providing personal information.

1. Company Information

The business responsible for processing personal information in connection with our online store is:

NBI Blockchain Association
CVR number: 45938328

Registered address:
C/O Steen Hansen
Jagtvej 155A
2200 København N
Denmark

Email: hansen@nbi.ku.dk
Telephone: 50168173

For the purposes of applicable data protection law, NBI Blockchain Association may act as the controller of personal information processed in connection with our online store and customer relationships.

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

• Visit or browse our online store;
• Create or manage a customer account;
• Place or manage an order;
• Make a payment;
• Contact customer support;
• Request a return, replacement or refund;
• Subscribe to marketing communications;
• Submit a product review;
• Participate in promotions or surveys; or
• Otherwise interact with our website or services.

Our online store, customer service functions and related services are collectively referred to as the “Services.”

3. Personal Information We Collect

The personal information we collect depends on how you interact with our Services.

3.1 Identity Information

We may collect information such as:

• Full name;
• Customer or account identifier;
• Information necessary to verify your identity; and
• Other identification information you voluntarily provide.

3.2 Contact Information

We may collect:

• Billing address;
• Shipping or delivery address;
• Postal code;
• City;
• Country or region;
• Email address;
• Telephone number; and
• Communication preferences.

3.3 Account Information

If customer accounts are available, we may process:

• Email address;
• Account name;
• Account settings;
• Saved delivery information;
• Communication preferences;
• Order history; and
• Authentication information necessary to access your account.

Passwords and authentication credentials may be handled through Shopify or other authorized technology providers.

3.4 Order and Transaction Information

When you place or manage an order, we may collect:

• Products ordered;
• Order number;
• Product quantities;
• Product variants or specifications;
• Purchase price;
• Billing information;
• Delivery information;
• Delivery status;
• Returns information;
• Refund information; and
• Customer service correspondence.

3.5 Payment Information

Depending on the payment method selected at checkout, payment-related information may include:

• Selected payment method;
• Payment status;
• Billing information;
• Payment transaction identifiers;
• Partial payment information; and
• Payment confirmation details.

Full card or payment account details may be processed directly by authorized payment providers rather than stored by us.

We do not require customers to send passwords, full payment card details or payment account login credentials by email.

3.6 Customer Service Information

If you contact us regarding a product, order, return or other matter, we may collect:

• Your name;
• Email address;
• Telephone number;
• Order number;
• Product information;
• Photographs;
• Videos;
• Complaint details;
• Return or refund reasons;
• Messages sent to us; and
• Records of our responses.

3.7 Technical and Usage Information

When you use our online store, certain technical information may be collected automatically, including:

• IP address;
• Browser type;
• Browser language;
• Device type;
• Operating system;
• Device identifiers;
• Pages viewed;
• Date and time of access;
• Referring website;
• Session information;
• Click and navigation information;
• Cookie identifiers;
• Approximate location derived from IP address; and
• Website performance or error information.

3.8 Marketing and Preference Information

Where applicable, we may collect:

• Product interests;
• Marketing preferences;
• Advertising interactions;
• Previously viewed products;
• Purchase history;
• Survey responses;
• Promotional participation; and
• Customer satisfaction information.

3.9 Information You Voluntarily Submit

You may also provide information through:

• Product reviews;
• Comments;
• Product enquiries;
• Return requests;
• Complaint forms;
• Surveys;
• Photographs;
• Videos; and
• Other communications submitted through the Services.

4. How We Collect Personal Information

We may collect personal information in the following ways.

4.1 Information You Provide Directly

You may provide personal information when:

• Completing a form;
• Creating an account;
• Placing an order;
• Entering billing or delivery details;
• Making a payment;
• Contacting customer service;
• Requesting a return or refund; or
• Participating in a promotion or survey.

4.2 Information Collected Automatically

Certain information may be collected automatically through technologies including:

• Cookies;
• Server logs;
• Analytics tools;
• Device identifiers;
• Security technologies; and
• Similar tracking technologies.

4.3 Information From Service Providers

We may receive relevant personal information from service providers that help us operate our online store, including:

• Shopify and related ecommerce technology providers;
• Payment processors;
• Banks and payment providers;
• Shipping and logistics providers;
• Warehousing and fulfilment providers;
• Website hosting providers;
• Cloud service providers;
• Fraud prevention providers;
• Analytics providers;
• Advertising providers; and
• Customer support platforms.

5. How We Use Personal Information

We may use personal information to:

• Operate and maintain our online store;
• Create and manage customer accounts;
• Process and fulfil orders;
• Verify payments;
• Arrange shipment and delivery;
• Provide tracking information;
• Communicate about orders;
• Provide customer support;
• Process returns and refunds;
• Resolve complaints;
• Detect and prevent fraudulent activity;
• Protect website and account security;
• Maintain transaction and accounting records;
• Improve our website and services;
• Analyze website performance;
• Understand how customers use our Services;
• Personalize the shopping experience;
• Conduct customer surveys;
• Send service-related communications;
• Send marketing communications where legally permitted;
• Measure advertising effectiveness;
• Comply with tax, accounting and legal obligations;
• Establish, exercise or defend legal claims; and
• Protect the rights and safety of our customers, business and third parties.

6. Legal Bases for Processing

Where applicable data protection laws such as the GDPR require a lawful basis, we may rely on one or more of the following legal bases.

6.1 Performance of a Contract

We may process personal information when necessary to:

• Accept and process an order;
• Receive or verify payment;
• Arrange delivery;
• Provide customer service;
• Process a return or refund; and
• Fulfil our contractual obligations to you.

6.2 Legal Obligations

We may process information where necessary to comply with:

• Accounting requirements;
• Tax laws;
• Consumer protection laws;
• Fraud prevention requirements;
• Court orders;
• Regulatory requirements; and
• Other applicable legal obligations.

6.3 Legitimate Interests

Where permitted by law, we may process personal information for legitimate business purposes including:

• Preventing fraud;
• Securing our website;
• Improving our Services;
• Measuring business performance;
• Responding to customer enquiries;
• Protecting our legal rights; and
• Maintaining appropriate business records.

Where we rely on legitimate interests, we consider whether those interests are outweighed by your rights and freedoms.

6.4 Consent

Where required, we may obtain your consent before:

• Sending certain marketing communications;
• Using non-essential cookies;
• Processing information for optional purposes; or
• Sharing information where consent is the appropriate legal basis.

You may withdraw consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

7. Sharing Personal Information

We may share personal information where reasonably necessary to operate our Services.

Recipients may include:

• Shopify and ecommerce technology providers;
• Payment processors;
• Banks and payment providers;
• Shipping and logistics companies;
• Warehousing and fulfilment providers;
• Hosting providers;
• Cloud service providers;
• Customer service providers;
• Email service providers;
• Analytics providers;
• Advertising providers;
• Fraud prevention and security providers;
• Accountants;
• Lawyers;
• Professional advisers;
• Government authorities;
• Courts;
• Law enforcement authorities; and
• Regulators.

We may also share information where necessary:

• To complete an order;
• To arrange delivery;
• To process a payment;
• To investigate suspected fraud;
• To protect our legal rights;
• To comply with applicable law; or
• In connection with a business restructuring, merger, acquisition or transfer.

We do not sell customer personal information to third-party advertisers.

8. Shipping and Delivery Information

To prepare and deliver your order, we may provide shipping or logistics providers with information such as:

• Recipient name;
• Delivery address;
• Postal code;
• Telephone number;
• Email address;
• Order reference;
• Parcel information; and
• Delivery instructions.

Shipping providers may use this information to:

• Deliver your order;
• Provide tracking updates;
• Arrange delivery;
• Contact you regarding a delivery issue; or
• Resolve a failed delivery attempt.

9. Payment Processing

Online payments may be processed by independent payment service providers.

These providers may process personal information according to their own:

• Privacy policies;
• Security procedures;
• Terms of service; and
• Legal obligations.

Where payment information is processed directly by an authorized payment provider, we may not receive or store complete payment card information.

Only payment methods displayed during checkout are available for the relevant order.

10. Shopify

Our online store may be hosted or operated using Shopify technology.

Shopify may process certain personal information on our behalf or in connection with providing ecommerce, hosting, checkout, fraud prevention, analytics and other platform services.

Information processed through Shopify may be subject to Shopify's own privacy and security practices in addition to this Privacy Policy.

11. Cookies and Similar Technologies

Our online store may use cookies and similar technologies to:

• Keep the website functioning correctly;
• Maintain shopping cart sessions;
• Remember preferences;
• Support account login;
• Protect website security;
• Detect suspicious activity;
• Analyze website traffic;
• Measure website performance;
• Improve the shopping experience; and
• Support advertising or marketing activities where permitted.

Depending on applicable law, non-essential cookies may only be activated after appropriate consent has been obtained.

You may be able to manage cookies through:

• Our cookie consent tool, where available; or
• Your browser settings.

Disabling certain cookies may affect website functions such as checkout, shopping carts, account login or saved preferences.

12. Marketing Communications

Where permitted by applicable law, we may send you marketing communications if:

• You have provided consent; or
• Another lawful basis permits us to do so.

You may unsubscribe from marketing communications at any time by:

• Using the unsubscribe link in a marketing email; or
• Contacting us at hansen@nbi.ku.dk.

Messages directly related to:

• Orders;
• Payments;
• Delivery;
• Returns;
• Refunds;
• Account administration; or
• Security

are service communications and may still be sent where necessary.

13. International Data Transfers

Some of our technology, payment, logistics, hosting or other service providers may process personal information outside Denmark or outside the country where you live.

Where personal information is transferred internationally, appropriate safeguards required by applicable data protection law will be used where necessary.

These safeguards may include:

• Adequacy decisions;
• Standard contractual clauses;
• Other approved contractual safeguards;
• Appropriate technical and organizational measures; or
• Another lawful transfer mechanism.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or as required by law.

Retention periods may depend on:

• The duration of the customer relationship;
• Order fulfilment requirements;
• Returns and refund periods;
• Accounting obligations;
• Tax requirements;
• Fraud prevention needs;
• Legal limitation periods;
• Dispute resolution requirements; and
• Regulatory obligations.

When information is no longer required, it may be securely deleted, anonymized or otherwise restricted from further processing as appropriate.

15. Security of Personal Information

We use reasonable administrative, organizational and technical safeguards designed to protect personal information against:

• Unauthorized access;
• Accidental loss;
• Unlawful disclosure;
• Unauthorized alteration;
• Destruction;
• Misuse; and
• Unauthorized processing.

Security measures may include:

• Restricted access;
• Account authentication;
• Secure hosting;
• Encryption where appropriate;
• Fraud monitoring; and
• Access controls.

However, no website, internet transmission or electronic storage method can be guaranteed to be completely secure.

16. Customer Responsibilities

You should take reasonable steps to protect your personal information.

Please:

• Provide accurate information;
• Keep account information current;
• Protect your passwords;
• Do not share login credentials;
• Notify us if you suspect unauthorized account access;
• Ensure your delivery information is accurate; and
• Use secure devices and networks where reasonably possible.

17. Children and Minors

Our Services are not intended to be used independently by individuals who are not legally able to enter into a purchase contract.

Where applicable, minors should obtain appropriate permission from a parent or legal guardian before:

• Making a purchase;
• Creating an account; or
• Providing personal information.

If we become aware that personal information has been submitted by a minor without appropriate authorization, we may delete or restrict the information where required by law.

18. Your Data Protection Rights

Depending on your location and applicable law, you may have the right to:

• Request access to your personal information;
• Request correction of inaccurate information;
• Request completion of incomplete information;
• Request deletion of personal information;
• Request restriction of processing;
• Object to certain processing;
• Object to direct marketing;
• Request data portability where applicable;
• Withdraw consent; and
• Submit a complaint to a competent data protection authority.

These rights are not absolute and may be subject to legal conditions and exceptions.

For example, certain information may need to be retained to:

• Complete an order;
• Meet tax or accounting requirements;
• Prevent fraud;
• Resolve disputes; or
• Establish or defend legal claims.

19. Right to Object to Direct Marketing

You may object to the processing of your personal information for direct marketing purposes at any time.

Once we receive a valid objection, we will stop using the relevant personal information for direct marketing as required by applicable law.

20. How to Exercise Your Privacy Rights

To make a privacy or data protection request, please contact:

Email: hansen@nbi.ku.dk

You may be asked to provide information reasonably necessary to verify your identity, such as:

• Full name;
• Email address;
• Order number where relevant; and
• A description of your request.

We may request additional information where necessary to prevent unauthorized access to personal information.

We will respond within the period required by applicable law.

21. Complaints

If you have concerns regarding how we handle your personal information, please contact us first so that we can investigate.

You may contact us at:

Email: hansen@nbi.ku.dk
Telephone: 50168173

Depending on where you live, you may also have the right to submit a complaint to the competent data protection supervisory authority.

For customers in Denmark, the relevant supervisory authority is generally the Danish Data Protection Agency (Datatilsynet).

22. Third-Party Websites and Services

Our online store may contain links to websites, platforms or services operated by independent third parties.

This Privacy Policy does not govern the privacy practices of independent third-party services.

We encourage you to review the privacy policies of any external website or service before providing personal information.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time due to:

• Changes in applicable law;
• Regulatory guidance;
• Changes to our Services;
• Changes to payment or delivery systems;
• Changes to Shopify or other technology providers;
• Security developments; or
• Changes to our business operations.

The latest version will be published through our online store.

The “Last updated” date at the beginning of this Privacy Policy indicates when the current version became effective.

24. Contact Information

If you have questions regarding this Privacy Policy or the processing of your personal information, please contact:

NBI Blockchain Association
CVR number: 45938328

Registered address:
C/O Steen Hansen
Jagtvej 155A
2200 København N
Denmark

Email: hansen@nbi.ku.dk
Telephone: 50168173