Privacy Policy.

1. Data Controller

Nord Vrai AS ("Nord Vrai", "we", "us") is the data controller responsible for personal data collected through this website and in connection with institutional enquiries. Nord Vrai is registered in Norway and operates nodes in Oslo, Paris, New York, and San Francisco.

For data protection enquiries, please contact: [email protected]

2. Data We Collect

We collect personal data only where you voluntarily provide it, including: name, institutional affiliation, email address, and any information submitted via our institutional enquiry form. We do not collect sensitive personal data.

We may collect technical data automatically, including IP address, browser type, and pages visited, for the purposes of site security and analytics. This data is processed in aggregate and is not used to identify individuals.

3. Legal Basis for Processing

We process personal data on the following legal bases under GDPR Article 6: (a) Legitimate interests — to respond to institutional enquiries and maintain site security; (b) Consent — where you have explicitly provided consent for specific processing activities; (c) Legal obligation — where processing is required to comply with applicable law.

4. How We Use Your Data

Personal data submitted via the institutional enquiry form is used solely to respond to your enquiry and, where applicable, to facilitate NDA-gated access to Nord Vrai's institutional materials. We do not sell, rent, or share personal data with third parties for marketing purposes.

We may share data with professional advisers, regulatory authorities, or counterparties where required by law or in connection with a legitimate institutional transaction.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Enquiry data is retained for a maximum of 24 months unless a longer retention period is required by regulatory obligation.

6. Your Rights

Under GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (subject to legal retention obligations); object to or restrict processing; and lodge a complaint with your national data protection authority.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

7. Cookies

This website uses strictly necessary cookies required for site operation and security. We do not use tracking or advertising cookies without your explicit consent. You may manage cookie preferences through your browser settings.

8. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses where applicable.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via this page with an updated effective date. Continued use of this website following any changes constitutes acceptance of the revised policy.