Privacy Policy

Short version: this website sets no cookies, runs no analytics, and contains no tracking scripts, embedded fonts, or third-party widgets. The only way to send us personal data through this site is to write us an email.

1. Who is responsible

The controller responsible for the processing of personal data described here is:

2. What this website collects

The website itself collects nothing. There is no contact form, no account, no newsletter signup, and no payment processing on this site. We do not use cookies, local storage, analytics tools, advertising pixels, session recording, externally hosted fonts, or social media plugins.

3. Server log data

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. Like any web host, our hosting provider automatically records technical data when a page is requested. This typically includes:

• the IP address of the requesting device,
• the date and time of the request,
• the URL requested and the response status,
• the referring URL, where transmitted by the browser,
• browser type, version, and operating system.

This data is processed to deliver the website, maintain its stability and security, and detect abuse. It is not used to identify individual visitors, is not combined with other data sources, and is not used for profiling or advertising. Where the GDPR applies, the legal basis is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Log data is retained by our hosting provider for a limited period in line with its own retention practices and is then deleted.

4. Contacting us by email

If you write to us, for example to apply for a partnership, we process the data contained in your message: your name, your email address, any details about your brand or business that you choose to share, and the content of the correspondence itself.

Purpose: to respond to your enquiry, to assess a possible partnership, and to conduct any resulting business relationship.

Legal basis (where the GDPR applies): Art. 6(1)(b) GDPR for enquiries leading to or performing a contract, and Art. 6(1)(f) GDPR for our legitimate interest in answering enquiries directed to us.

Retention: we keep correspondence for as long as necessary to handle the matter and to comply with applicable record-keeping obligations, then delete it. You may ask us to delete your enquiry at any time, subject to any legal retention duties.

Please note that email is not an inherently secure medium. Do not send sensitive information, for example financial or identity documents, by unencrypted email.

5. Service providers

We use a small number of service providers who process data on our behalf in order to operate our business, specifically our website hosting provider and our email provider. These providers are bound by contract to process data only on our instructions and to maintain appropriate security measures. We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

6. International transfers

We are a US company and our service providers are located in the United States. If you contact us from outside the United States, your data will be transferred to and processed in the United States. Where the GDPR applies, such transfers are based on appropriate safeguards, in particular the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

7. Your rights

Depending on where you live, you may have some or all of the following rights regarding your personal data:

• the right to request access to the data we hold about you,
• the right to have inaccurate data corrected,
• the right to have your data deleted,
• the right to have processing restricted,
• the right to receive your data in a portable format,
• the right to object to processing based on legitimate interests,
• the right to withdraw consent, where processing is based on consent,
• the right not to be discriminated against for exercising these rights.

To exercise any of these rights, write to office@nordhavenmedia.com. We will respond within the period required by applicable law. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.

8. California residents

We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act, and we do not process personal information for cross-context behavioural advertising. California residents may exercise their rights of access, deletion, and correction using the contact address above.

9. Do Not Track

Because this website performs no tracking of any kind, no Do Not Track signal handling is necessary.

10. Children

This website and our services are directed at businesses and adults. They are not intended for children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has sent us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy when our website or our processing changes, for example if we ever introduce a contact form or analytics. The current version is always published on this page with the date of the last update below.

12. Contact

Questions about this policy or about how we handle your data: office@nordhavenmedia.com

Last updated: August 19, 2026