Privacy
Privacy Policy
This Privacy Policy explains how NORDICSCOTT - FZCO ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website, purchase our products, or use our services. We are committed to protecting your privacy and handling your data transparently in accordance with GDPR and applicable data protection laws.
Responsible Entity
- Company Name
- NORDICSCOTT - FZCO
- CEO
- Mirko Buechte
- Business Address
- Building A1, Dubai Digital Park,
Dubai Silicon Oasis, Dubai,
United Arab Emirates - License Number
- 49051
- Tax Registration Number
- 104701909400003
- [email protected]
What Data We Collect
We may collect and process the following categories of personal data:
- Personal data you provide during registration or purchase (e.g. name, email address, billing address)
- Payment-related data processed by our Merchant of Record, DigiStore24 (e.g. payment method, transaction details)
- Data collected automatically through your use of the website (e.g. IP address, browser type, device information, time and duration of visit)
- Communication data (e.g. emails or messages you send us)
- Account and login data on our content platform, Tentary
- Course progress and interaction data within our products
Why We Collect Your Data
We process your personal data for the following purposes:
- To provide access to purchased digital products and services
- To process payments and fulfill orders (via DigiStore24)
- To deliver content and manage your account (via Tentary)
- To handle customer service inquiries and communication
- To send newsletters or promotional emails (only with your explicit consent)
- To analyze website usage and improve our offerings
- To comply with legal obligations such as tax and accounting
- To prevent fraud and protect our services and users
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: e.g. when you opt in to newsletters or marketing communications (Art. 6(1)(a) GDPR)
- Contract performance: to deliver the products and services you purchased (Art. 6(1)(b) GDPR)
- Legal obligation: e.g. for tax, accounting, and record-keeping purposes (Art. 6(1)(c) GDPR)
- Legitimate interest: to improve our services, prevent fraud, and communicate with our customers (Art. 6(1)(f) GDPR)
Third-Party Service Providers
We work with the following third-party service providers who process personal data on our behalf. Each processor operates under a Data Processing Agreement in accordance with Art. 28 GDPR.
DigiStore24: Merchant of Record
Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany (HRB 202956, VAT ID: DE288931281) acts as our Merchant of Record. DigiStore24 processes all payment transactions, handles invoicing, collects and remits applicable taxes, and manages transaction-related customer service.
Data processed: name, email, billing address, payment information, VAT ID (for business customers). Privacy Policy: digistore24.com/page/privacy
Tentary: Content Delivery
Tentary GmbH, Dorfstr. 33, 84048 Mainburg, Germany (HRB 20010, VAT ID: DE355688449) provides the technical infrastructure for hosting our websites, delivering course content, and managing email communications.
Data processed: name, email, purchase records, course progress, email interactions. Privacy Policy: tentary.com/de/privacy
Zapier: Automation
Zapier Inc. connects our Merchant of Record with our Content Delivery Platform to grant customers immediate access to purchased products.
Data processed: name, email, purchase details, product IDs. Privacy Policy: zapier.com/privacy
Cookies and Tracking
Our website uses cookies and similar technologies. Cookies are small text files stored on your device that help us provide essential functionality and analyze usage.
Essential Cookies
These are strictly necessary for the operation of our website (e.g. session management, security). They cannot be disabled.
Analytics Cookies
Used to understand how visitors interact with our website. These are only set with your consent, which you can withdraw at any time via our cookie banner.
Analytics: Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC ("Google") and, for users in the EU, by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies to help us analyze how users interact with our website. The information generated (including your truncated IP address) is transmitted to and stored by Google on servers that may be located outside the EU.
We have activated IP anonymization ("IP-Masking"), which means your IP address is truncated within the EU/EEA before being sent to Google.
Legal basis: Your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
You can also opt out by installing the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout
More information at policies.google.com/privacy
Social Media Presence
We maintain a presence on the following platforms. When you interact with us on these platforms, your data is processed by the respective operators according to their own privacy policies:
- Instagram (@nordic_scott, @create.with.nordic), operated by Meta Platforms Ireland Ltd.
- TikTok (@nordic_scott), operated by TikTok Technology Limited
- YouTube (@nordic_scott_official), operated by Google Ireland Limited
- Skool (Creator University community), operated by Skool Inc.
We recommend reviewing the privacy policies of these platforms if you interact with our content there. We have no control over the data processing practices of these third-party platforms.
Your Rights
Under applicable data protection law (including GDPR for EU-based users), you have the following rights:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure: request deletion of your personal data
- Right to restrict processing: request limitation of how we use your data
- Right to data portability: receive your data in a structured, commonly used format
- Right to withdraw consent: withdraw consent at any time where processing is based on consent
- Right to object: object to processing based on legitimate interests
- Right to lodge a complaint: file a complaint with a supervisory authority
To exercise any of these rights, contact us at [email protected].
For EU-based users, you may also contact the data protection authority in your country of residence. A list of EU data protection authorities can be found at edpb.europa.eu.
Retention of Data
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Specifically:
- Account and access data: retained for the duration of your product access
- Transaction and invoice data: retained for up to 10 years as required by tax and accounting law
- Marketing consent data: retained until you withdraw your consent
- Communication data: retained for up to 3 years after last interaction
- Analytics data: retained for up to 14 months
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/SSL), access controls, regular security reviews, and secure data storage practices.
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
International Data Transfers
As NORDICSCOTT - FZCO is based in the United Arab Emirates and some of our service providers are located in the EU, USA, or other countries, your data may be transferred internationally.
Where we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs), adequacy decisions by the European Commission where applicable, and additional security measures where required.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised "Last updated" date.
Material changes will be communicated to you via email if you have an account with us.
Contact
If you have any questions about this Privacy Policy or our data processing practices, please contact us:
- [email protected]
- Postal Address
- NORDICSCOTT - FZCO
Building A1, Dubai Digital Park
Dubai Silicon Oasis, Dubai, UAE
Last Updated
This Privacy Policy was last updated on August 12, 2026.