Privacy policy

Norde SRL (company no. 1039457839), with its registered office at 35 Rue des vignes, 1435 Mont-Saint-Guibert, Belgium, is the controller of your personal data within the meaning of the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and the Belgian law of 30 July 2018.

For any question about your data, contact us at kriss@norde.be.

We only collect the data necessary to run the service:

• Identification and account data: first name, last name, email address, password (encrypted), profile picture, language, phone number (optional).
• Business data (hosts): company name, company and VAT number, billing details.
• Booking and transaction data: booked studios, dates, amounts, history.
• Payment data: processed directly by Stripe. We never store your card numbers.
• Content: listings, descriptions, reviews, messages exchanged via messaging.
• Technical data: IP address, device and browser type, connection logs, cookies (see our Cookie policy).

Your data is processed for the following purposes:

• Create and manage your account and provide the service - performance of the contract (art. 6.1.b GDPR).
• Process bookings and payments - performance of the contract.
• Issue invoices and comply with our accounting and tax obligations - legal obligation (art. 6.1.c).
• Enable messaging between users - performance of the contract.
• Ensure security, moderation and fraud prevention - legitimate interest (art. 6.1.f).
• Measure site audience in aggregate - legitimate interest or consent depending on the tools.
• Send you marketing communications - only with your consent (art. 6.1.a), revocable at any time.

We use processors that act only on our instructions:

• Stripe Payments Europe (payment processing).
• Supabase (database and file hosting, EU region).
• Infomaniak Network SA (application hosting on VPS, Switzerland - a country benefiting from an adequacy decision).
• Resend (transactional email delivery).
• PostHog (audience measurement).
• Norde SRL, as a production agency, only if you request a quote via the platform.

We never sell your personal data to third parties.

Some processors are established outside the EU. Switzerland (Infomaniak) benefits from a European Commission adequacy decision. Transfers to the United States (notably Stripe, PostHog, Resend) are governed by appropriate safeguards: standard contractual clauses and, where applicable, certification under the Data Privacy Framework.

• Account data: for the entire duration of your registration.
• After account deletion: data is anonymised, unless a legal retention obligation applies.
• Billing and accounting data: 7 years, in accordance with Belgian law.
• Technical logs: 12 months maximum.

In accordance with the GDPR, you have the following rights:

• Right of access: obtain a copy of your data.
• Right to rectification: correct inaccurate data.
• Right to erasure: request the deletion of your data.
• Right to restriction of processing.
• Right to object, in particular to processing based on legitimate interest.
• Right to portability: receive your data in a structured format.
• Right to withdraw your consent at any time.

To exercise these rights, write to kriss@norde.be. We reply within one month. You can also export or delete your data from your account settings.

We implement appropriate technical and organisational measures (password encryption, secure HTTPS connections, access control) to protect your data against unauthorised access, loss or alteration.

The site uses cookies. For details, see our Cookie policy.

The platform is reserved for adults. We do not knowingly collect data relating to minors.

If you believe that the processing of your data does not comply with the GDPR, you may lodge a complaint with the Data Protection Authority (DPA): Rue de la Presse 35, 1000 Brussels - autoriteprotectiondonnees.be.