Nordic Ritual1. Who we are
Nordic Ritual (Nordic Ritual ApS, CVR 12345678, registered at Copenhagen, Denmark) is the data controller for the personal data described in this policy. For any privacy question, contact us at privacy@nordicritual.dk.
2. What data we collect
We collect only what we need to run the parts of the site you actually use:
- Contact form — your name, email address, and message, when you write to us via the Support page.
- Recovery Assessment — your answers about training frequency, sleep, stress, sauna experience, and your recovery goal, used to generate a personal Recovery Protocol.
- Recovery Advisor — the messages you type when chatting with our AI recovery assistant.
- Cart — the items you add to your cart, stored only in your own browser (not on our servers) until checkout is available.
- Basic technical data — standard web server logs (IP address, browser type, pages visited) collected automatically by our hosting provider for security and reliability.
- Aggregated site analytics — anonymous page-view and traffic data via Vercel Web Analytics (see Section 7), used to understand which pages are useful. This does not identify you individually.
We do not currently run advertising trackers on this site. If that changes, this policy — and a consent banner — will be added first.
3. Why we collect it, and our legal basis
- Contact form messages: to respond to you (legitimate interest / steps prior to a contract).
- Recovery Assessment and Recovery Advisor: to provide the personalized guidance you've asked for (consent — you choose to use these features).
- Cart: to remember your selection during your visit (strictly necessary, stored locally on your device only).
- Server logs: to keep the site secure and running (legitimate interest).
4. Who we share it with
We use a small number of trusted service providers to run the site. We don't sell your data, ever.
- Formspree (contact form delivery) — processes your name, email, and message to deliver it to our inbox.
- Anthropic (the Claude AI model powering Recovery Advisor and Recovery Assessment) — processes the messages/answers you submit to those features in order to generate a response. Anthropic does not use this data to train its models by default for API usage.
- Vercel (website hosting, and Vercel Web Analytics for anonymous traffic stats) — processes basic technical/server log data and cookieless page-view data to serve and understand use of the site.
Some of these providers are based in the United States. Where that's the case, we rely on their Standard Contractual Clauses (or equivalent GDPR-approved safeguards) for the international transfer of your data.
5. How long we keep it
As a starting point: contact form messages are kept only as long as needed to resolve your inquiry; Recovery Assessment and Recovery Advisor conversations are not stored in a database on our end (they exist only for the duration of generating your answer); cart data lives only in your browser and is cleared when you clear your browser storage.
6. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk)
To exercise any of these rights, contact us at privacy@nordicritual.dk.
7. Cookies & analytics
This site uses only strictly necessary local storage (to remember your cart) and does not set tracking or advertising cookies. We use Vercel Web Analytics to understand overall site traffic (e.g. how many people visit which pages) — it is cookieless and does not collect personal data or track you individually across sites, so no consent banner is required for it under GDPR. If we add marketing or other non-essential tracking in the future, we will add a consent banner and update this section first.
8. Children's privacy
Nordic Ritual is not directed at children, and we do not knowingly collect data from anyone under 16.
9. Changes to this policy
We may update this policy as the site and our practices evolve. The "last updated" date at the top of this page will always reflect the most recent version.
10. Contact
Questions about this policy or your data: privacy@nordicritual.dk.