Company Information:

Company Name: Nordhouse OÜ

Registered Address: Harju maakond, Tallinn, Nõmme linnaosa, Rännaku pst 12, 10917

Registered Number: 14673174

Polish VASP License Details: RDWW-574, Issued on 20 December 2022, License Number: 7011118565

Data Protection Officer (DPO): Contact at DPO@NORDHOUSE.IO

Table of Contents

• Basic Provisions
• Data Controller, Data Protection Officer, Authority and Website
• Grounds for Personal Data Processing
• Personal Data Storage
• Personal Data Transfer
• Personal Data Processed
• Your Rights Regarding Personal Data Processing
• Personal Data Recipients
• Website and Cookies

1. Basic Provisions

Nordhouse OÜ, duly incorporated and operating under the laws of Estonia, is committed to protecting and respecting your privacy. This Privacy Policy (hereinafter 'Policy') establishes the basis on which any personal data collected from our customers or that they provide to us will be processed. We assume that by submitting your personal data, you consent to its transfer, storage, and processing. We will ensure that your data is handled securely and in accordance with this Policy.

2. Data Controller, Data Protection Officer, Authority, and Website

Data Controller: Nordhouse OÜ, Registered Number 14673174.

Legal Address: Harju maakond, Tallinn, Nõmme linnaosa, Rännaku pst 12, 10917.

Data Protection Officer (DPO): The DPO is responsible for ensuring compliance with data protection regulations. Contact the DPO at DPO@NORDHOUSE.IO for any inquiries regarding personal data or this Policy.

3. Grounds for Personal Data Processing

Nordhouse OÜ is authorized to process personal data under the following conditions:

• Legal basis for processing
• Fulfillment of services to customers
• Compliance with legal obligations, including Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) requirements
• Risk management and legitimate interests

4. Personal Data Storage

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Typically, personal data is retained for a period specified by law or for up to 5 years after termination of business relationships.

5. Personal Data Transfer

Nordhouse OÜ does not sell or rent your personal data. We transfer personal data only under lawful and secure conditions. Transfers to third parties occur solely for service provision, legal compliance, or legitimate interests, with appropriate data protection measures in place.

6. Personal Data Processed

Personal data processed may include:

• Identification Information: Name, date of birth, contact information, ID verification documents
• Profiling Information: Customer risk assessments, transaction behaviors
• Financial Information: Income, transaction history, assets
• Special Categories of Data: AML and CTF compliance data
• Transactional Data: Payment and bank information, transaction details
• Technical Data: IP address, device details, website interaction data

7. Your Rights Regarding Personal Data Processing

As a data subject, you have the following rights:

• Access and Portability: Obtain a copy of your personal data.
• Amendment and Deletion: Request correction or deletion of your data under specific conditions.
• Processing Restriction: Limit the use of your data.
• Objection: Object to processing based on legitimate interests.
• Revocation of Consent: Withdraw consent where applicable.
• Complaint: Lodge a complaint with the relevant supervisory authority.

8. Personal Data Recipients

Nordhouse OÜ may disclose personal data to:

• Internal Personnel: Authorized staff members and representatives
• Service Providers: Agents, suppliers, and service providers with data protection agreements
• Public Authorities: Compliance with legal and regulatory requirements

9. Website and Cookies

Our website, www.nordhouse.io, uses cookies to improve user experience. We utilize session cookies, persistent cookies, and third-party cookies (e.g., Google Analytics) for secure and efficient website functionality. Users have the option to accept or reject cookies upon each visit.

Contact: For any privacy-related concerns, please reach out to our Data Protection Officer at DPO@NORDHOUSE.IO.