Privacy Policy

Last updated: October 31, 2026

This Privacy Policy explains how NBI Blockchain Association (“we,” “us,” “our,” or the “Company”) collects, uses, stores, shares and protects personal information when you visit our online store, place an order, contact us or otherwise use our services.

Our online store currently serves customers in Germany and Austria.

Please read this Privacy Policy carefully.

1. Company Information

The business responsible for processing personal information in connection with our online store is:

NBI Blockchain Association
CVR number: 45938328

Registered address:
C/O Steen Hansen
Jagtvej 155A
2200 København N
Denmark

Email: support@sdfsf.shop
Telephone: +45 50 16 81 73

NBI Blockchain Association acts as the data controller for personal information processed for its own online store operations and customer relationships, subject to the respective roles of its service providers under applicable data protection law.

2. Scope of This Privacy Policy

This Privacy Policy applies when you:

• Visit or browse our online store;

• Create or manage a customer account, where available;

• Place or manage an order;

• Select Cash on Delivery;

• Contact customer support;

• Request a return, replacement or refund;

• Subscribe to marketing communications;

• Submit a product review, where available;

• Participate in promotions or surveys, where available; or

• Otherwise interact with our website or services.

Our online store, customer service functions and related services are collectively referred to as the “Services.”

3. Personal Information We Collect

The personal information we collect depends on how you interact with our Services.

3.1 Identity Information

We may collect:

• Full name;

• Customer or account identifier;

• Information reasonably necessary to verify identity; and

• Other identification information you voluntarily provide.

3.2 Contact Information

We may collect:

• Billing address;

• Shipping or delivery address;

• Postal code;

• City;

• Country or region;

• Email address;

• Telephone number; and

• Communication preferences.

3.3 Account Information

If customer accounts are available, we may process:

• Email address;

• Account name;

• Account settings;

• Saved delivery information;

• Communication preferences;

• Order history; and

• Authentication information necessary to access the account.

Authentication credentials may be handled through Shopify or other authorized technology providers.

3.4 Order and Transaction Information

When you place or manage an order, we may collect:

• Products ordered;

• Order number;

• Product quantities;

• Product variants or specifications;

• Purchase price;

• Billing information;

• Delivery information;

• Delivery and payment status;

• Returns information;

• Refund information; and

• Customer service correspondence.

3.5 Cash on Delivery and Refund Information

Our online store currently accepts Cash on Delivery (COD) for orders delivered to Germany and Austria.

Payment is collected upon delivery rather than through an online card payment process.

To administer COD orders, we may process:

• Selected payment method;

• Order amount;

• Order and transaction identifiers;

• Payment collection status;

• Delivery confirmation;

• Information received from authorized delivery or logistics providers; and

• Relevant payment-related correspondence.

When a refund is due, we process refunds by bank transfer, with the customer's agreement.

For this purpose, we may collect:

• Account holder name;

• IBAN or other bank account details reasonably necessary for the transfer;

• Refund amount;

• Order reference;

• Refund status; and

• Related correspondence.

Bank account information is used for legitimate refund administration and related accounting or legal obligations.

We do not require customers to provide online banking passwords, PINs or authentication codes.

3.6 Customer Service Information

If you contact us regarding a product, order, return or other matter, we may collect:

• Your name;

• Email address;

• Telephone number;

• Order number;

• Product information;

• Photographs or videos you provide;

• Complaint details;

• Return or refund reasons;

• Messages sent to us; and

• Records of our responses.

3.7 Technical and Usage Information

When you use our online store, certain technical information may be collected automatically, including:

• IP address;

• Browser type and language;

• Device type;

• Operating system;

• Device identifiers;

• Pages viewed;

• Date and time of access;

• Referring website;

• Session information;

• Navigation information;

• Cookie identifiers;

• Approximate location derived from IP address; and

• Website performance or error information.

The collection of information through non-essential cookies or similar technologies is subject to applicable consent requirements.

3.8 Marketing and Preference Information

Where applicable and legally permitted, we may collect:

• Product interests;

• Marketing preferences;

• Advertising interactions;

• Previously viewed products;

• Purchase history;

• Survey responses;

• Promotional participation; and

• Customer satisfaction information.

3.9 Information You Voluntarily Submit

You may provide information through:

• Product reviews or comments, where available;

• Product enquiries;

• Return requests;

• Complaint forms;

• Surveys;

• Photographs;

• Videos; and

• Other communications submitted through our Services.

4. How We Collect Personal Information

4.1 Information You Provide Directly

We collect information when you:

• Complete a form;

• Create an account, where available;

• Place an order;

• Enter billing or delivery details;

• Select Cash on Delivery;

• Contact customer service;

• Request a return or refund; or

• Participate in an available promotion or survey.

4.2 Information Collected Automatically

Certain information may be collected through:

• Essential cookies;

• Server logs;

• Analytics technologies, where permitted;

• Device identifiers;

• Security technologies; and

• Similar technologies.

Non-essential technologies are subject to the consent arrangements described in Section 11.

4.3 Information From Service Providers

We may receive relevant information from service providers involved in our operations, such as:

• Shopify and ecommerce technology providers;

• Cash on Delivery collection partners;

• Banks involved in refunds;

• Shipping and logistics providers;

• Warehousing and fulfilment providers;

• Website hosting and cloud service providers;

• Fraud prevention providers;

• Analytics or advertising providers, where used; and

• Customer support platforms.

5. How We Use Personal Information

We may use personal information to:

• Operate and maintain our online store;

• Create and manage customer accounts;

• Process and fulfil orders;

• Administer Cash on Delivery payments;

• Arrange shipment and delivery;

• Provide tracking information;

• Communicate about orders;

• Provide customer support;

• Process returns and bank transfer refunds;

• Resolve complaints;

• Detect and prevent fraudulent activity;

• Protect website and account security;

• Maintain transaction and accounting records;

• Improve our website and services;

• Analyze website performance where permitted;

• Personalize the shopping experience where permitted;

• Send service-related communications;

• Send marketing communications where legally permitted;

• Measure advertising effectiveness where permitted;

• Comply with tax, accounting and legal obligations;

• Establish, exercise or defend legal claims; and

• Protect the rights and safety of customers and third parties.

6. Legal Bases for Processing

Where the General Data Protection Regulation (GDPR) applies, we process personal information only where an appropriate legal basis exists.

6.1 Performance of a Contract — Article 6(1)(b)

We may process information necessary to:

• Accept and process orders;

• Administer Cash on Delivery;

• Arrange delivery;

• Provide contractual customer services;

• Process returns and refunds; and

• Fulfil our contractual obligations.

6.2 Legal Obligations — Article 6(1)(c)

We may process information where necessary to comply with:

• Accounting and tax obligations;

• Consumer protection requirements;

• Applicable regulatory requirements;

• Court orders; and

• Other legal obligations.

6.3 Legitimate Interests — Article 6(1)(f)

Where permitted, we may process information for legitimate interests such as:

• Preventing fraud;

• Protecting website security;

• Improving operational reliability;

• Responding to customer enquiries;

• Protecting legal rights; and

• Maintaining appropriate business records.

We consider the relevant interests against individuals' rights and freedoms.

6.4 Consent — Article 6(1)(a)

Where required, we obtain consent before:

• Sending consent-based marketing communications;

• Using non-essential cookies or tracking technologies;

• Processing information for other optional purposes requiring consent; or

• Sharing information where consent is the applicable legal basis.

You may withdraw consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

7. Sharing Personal Information

We may share personal information where necessary and lawful to operate our Services.

Recipients may include:

• Shopify and ecommerce technology providers;

• Cash on Delivery collection partners;

• Banks involved in refunds;

• Shipping and logistics companies;

• Warehousing and fulfilment providers;

• Hosting and cloud service providers;

• Customer support and email service providers;

• Analytics and advertising providers, where used and permitted;

• Fraud prevention and security providers;

• Accountants, lawyers and professional advisers; and

• Government authorities, courts or regulators where legally required.

We may also disclose information where necessary to fulfil an order, administer a refund, investigate fraud, comply with law or protect legal rights.

We do not sell customer personal information to third-party advertisers.

Where advertising technologies involve disclosure of personal information, the applicable processing is subject to legal requirements, including consent where necessary.

8. Shipping and Delivery Information

To prepare and deliver orders, we may provide authorized logistics providers with:

• Recipient name;

• Delivery address;

• Postal code;

• Telephone number;

• Email address;

• Order reference;

• Parcel information;

• Delivery instructions; and

• Information necessary to administer Cash on Delivery collection.

Shipping providers may use this information to:

• Deliver orders;

• Provide tracking updates;

• Arrange delivery;

• Contact customers about delivery issues;

• Collect COD payments; and

• Resolve unsuccessful delivery attempts.

9. Cash on Delivery Payment and Bank Transfer Refund Processing

Our online store currently uses Cash on Delivery (COD) as its checkout payment method.

Customers do not enter credit or debit card details to pay online through our checkout.

The amount payable is collected upon delivery through the applicable authorized collection arrangement.

We may receive information confirming whether a COD payment has been collected.

Where a refund is required, the refund is processed by bank transfer with the customer's agreement.

We may process bank account details necessary to make the refund, including the account holder name and IBAN.

We may share the necessary refund information with the relevant banking provider.

Payment and refund information may also be retained where necessary to comply with accounting, tax, consumer protection and other legal obligations.

10. Shopify

Our online store uses Shopify technology to support ecommerce operations.

Shopify may process personal information in connection with:

• Website hosting;

• Shopping carts;

• Checkout;

• Order management;

• Customer accounts, where available;

• Security;

• Fraud prevention; and

• Other platform services.

Depending on the processing activity, Shopify may act as a processor or in another role under applicable data protection law.

For further information about Shopify's privacy practices, please consult its published privacy information.

11. Cookies and Similar Technologies

Our online store uses cookies and similar technologies to support website functionality and, where permitted, optional analytics or marketing activities.

Essential Cookies

Essential cookies may be used to:

• Maintain shopping cart functionality;

• Support checkout;

• Remember necessary session information;

• Protect website security; and

• Provide other functions required for the operation of the store.

These cookies may be used without consent where permitted by applicable law.

Non-Essential Cookies

Non-essential cookies and similar technologies may be used for:

• Analytics;

• Advertising measurement;

• Marketing;

• Personalization; and

• Other optional purposes.

Where consent is legally required, these technologies must not be activated before the necessary consent has been obtained.

Cookie Consent Choices

Our online store provides a cookie consent banner that allows customers to:

• Accept non-essential cookies;

• Reject non-essential cookies; or

• Manage their cookie preferences.

Customers can choose whether to consent to optional cookie categories.

Cookie preferences may be changed or consent withdrawn through the available privacy preference controls.

Customers may also manage cookies through their browser settings.

Disabling essential cookies through browser controls may affect certain website functions.

12. Marketing Communications

We may send marketing communications where permitted by applicable law.

During checkout, customers may be offered the option to subscribe to marketing emails.

The marketing email subscription option is not preselected.

Customers may actively choose whether to subscribe.

Where consent is required, we will not treat the placement of an order alone as consent to receive marketing emails.

Customers may withdraw marketing consent at any time by:

• Using the unsubscribe link in a marketing email; or

• Contacting support@sdfsf.shop.

We may continue to send necessary service-related messages concerning:

• Orders;

• Cash on Delivery payments;

• Delivery;

• Returns;

• Refunds;

• Account administration; and

• Security.

These messages are distinct from optional marketing communications.

13. International Data Transfers

Some technology, logistics, hosting or other service providers may process personal information outside Denmark or outside the European Economic Area.

Where international transfers are subject to GDPR requirements, we use an appropriate lawful transfer mechanism.

Depending on the circumstances, these may include:

• European Commission adequacy decisions;

• Approved Standard Contractual Clauses;

• Other legally recognized safeguards; or

• Applicable legal exceptions.

Additional technical or organizational safeguards may be used where required.

Customers may contact us for information about applicable safeguards for transfers involving their personal information.

14. Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected or as required by applicable law.

The applicable retention period depends on the category of information and the purpose of processing.

For example:

• Order and transaction records: retained as necessary for fulfilment, accounting, tax and legal obligations.

• COD payment records: retained as necessary to document payment collection, reconcile transactions and meet applicable obligations.

• Bank transfer refund information: retained for refund administration and any applicable accounting, legal or dispute-resolution requirements.

• Customer service correspondence: retained as necessary to resolve enquiries, complaints or disputes.

• Marketing consent records: retained as necessary to administer preferences and demonstrate compliance with applicable requirements.

• Cookie preferences: retained in accordance with the relevant consent management arrangements and applicable law.

• Technical and security records: retained as necessary for website operation, security and legitimate operational purposes.

We determine retention periods by considering:

• Applicable legal retention requirements;

• The duration of the customer relationship;

• The purposes of processing;

• Whether an order, refund or dispute remains unresolved;

• Applicable limitation periods; and

• The need to establish or defend legal claims.

When information is no longer necessary, it will be deleted, anonymized or otherwise handled in accordance with applicable law.

Customers may request further information about retention periods for specific categories of their personal information.

15. Security of Personal Information

We take reasonable administrative, organizational and technical measures designed to protect personal information against:

• Unauthorized access;

• Accidental loss;

• Unlawful disclosure;

• Unauthorized alteration;

• Destruction;

• Misuse; and

• Unauthorized processing.

Measures may include appropriate access controls, authentication, secure hosting and other safeguards relevant to the processing activity.

Access to bank account information used for refunds should be limited to personnel and providers who need the information for authorized purposes.

No internet transmission or electronic storage method can be guaranteed to be completely secure.

16. Customer Responsibilities

Customers should take reasonable steps to protect their personal information.

Please:

• Provide accurate information;

• Keep account information current, where applicable;

• Protect account passwords;

• Avoid sharing login credentials;

• Notify us of suspected unauthorized account access;

• Ensure delivery information is accurate; and

• Avoid sending banking passwords, PINs or authentication codes by email.

17. Children and Minors

Our Services are not intended to be used independently by individuals who are not legally able to enter into a purchase contract.

Where applicable, minors should obtain appropriate permission from a parent or legal guardian before making a purchase, creating an account or providing personal information.

If we become aware that personal information has been submitted by a minor without appropriate authorization, we will take action as required by applicable law.

18. Your Data Protection Rights

Where the GDPR applies, you may have the right to:

• Request access to your personal information;

• Request correction of inaccurate information;

• Request completion of incomplete information;

• Request erasure of personal information;

• Request restriction of processing;

• Object to certain processing;

• Object to direct marketing;

• Request data portability where applicable;

• Withdraw consent where processing is based on consent;

• Not be subject to certain solely automated decisions, where applicable; and

• Lodge a complaint with a competent supervisory authority.

These rights are subject to applicable legal conditions and exceptions.

Certain information may need to be retained to fulfil orders, comply with accounting or tax obligations, resolve disputes or establish or defend legal claims.

19. Right to Object to Direct Marketing

You may object to the processing of your personal information for direct marketing purposes at any time.

Once we receive a valid objection, we will stop processing the relevant personal information for direct marketing.

You may contact us at support@sdfsf.shop to exercise this right.

20. How to Exercise Your Privacy Rights

To submit a privacy or data protection request, please contact:

Email: support@sdfsf.shop

Please describe your request and provide sufficient information to help us identify the relevant records.

We may request information reasonably necessary to verify your identity and protect personal information from unauthorized disclosure.

Under the GDPR, we will normally respond without undue delay and within one month of receiving a request.

Where permitted by law, this period may be extended by up to two additional months due to the complexity or number of requests. We will inform you of any extension and the reasons within the initial one-month period.

We will also inform you where a request cannot be fulfilled and explain the applicable reasons and available rights.

21. Complaints

If you have concerns about how we handle personal information, you may contact us at:

Email: support@sdfsf.shop
Telephone: +45 50 16 81 73

You also have the right to lodge a complaint with a competent data protection supervisory authority where applicable.

As our business is registered in Denmark, the Danish Data Protection Agency (Datatilsynet) may be a relevant supervisory authority.

Customers in Germany and Austria may also have the right to contact a competent supervisory authority in their country of residence.

You do not have to contact us before exercising a legal right to lodge a complaint.

22. Third-Party Websites and Services

Our online store may contain links to websites or services operated by independent third parties.

This Privacy Policy does not govern the independent privacy practices of those third parties.

We encourage customers to review the privacy policies of external services before providing personal information.

23. Changes to This Privacy Policy

We may update this Privacy Policy due to:

• Changes in applicable law;

• Regulatory guidance;

• Changes to our Services;

• Changes to payment, delivery or refund arrangements;

• Changes to Shopify or other technology providers;

• Security developments; or

• Changes to our business operations.

The latest version will be published through our online store.

The “Last updated” date indicates when the published version was last revised.

Where required by law, we will provide additional notice or obtain consent before implementing relevant changes.

24. Contact Information

For questions regarding this Privacy Policy or the processing of personal information, please contact:

NBI Blockchain Association
CVR number: 45938328

Registered address:
C/O Steen Hansen
Jagtvej 155A
2200 København N
Denmark

Email: support@sdfsf.shop
Telephone: +45 50 16 81 73