Legal

Privacy, plainly.

Last updated: 14 August 2026

Norrwild is run by Alexander Boltersdorf, Triq Ir-Ratal 23, Flat 7, SWQ 2315 Swieqi, Malta (hello@norrwild.com) — the data controller for everything described here. The short version: we collect what's needed to print your order, ship it, and email you if you asked us to. We deliberately avoid the rest.

What we collect, and why

When you order: your name, shipping address, email, and the items you bought. This runs through Shopify (our checkout) and is shared with Printful (our print and shipping partner) — without it, nothing can be printed or delivered. Payment details go directly to the payment provider; we never see your card number. Legal basis: performing our contract with you.

When you join the list: your email address, stored with Klaviyo, used to send the emails you signed up for. Legal basis: your consent, which you can withdraw with the unsubscribe link in any email — every one has it.

When you write to us: your email and whatever you tell us, kept as long as needed to help you. Legal basis: our legitimate interest in answering you properly.

What we deliberately don't do

Our website analytics are cookieless. We use GoatCounter and our hosting providers' aggregate statistics (Cloudflare, Vercel) to see which pages are read — none of it identifies you, follows you across the web, or requires a consent banner. We don't sell data, don't run third-party advertising trackers, and don't build profiles.

Who receives your data

Only the services that make the shop work: Shopify (checkout and order management), Printful (printing and shipping — they receive your name and address to deliver your order), Klaviyo (email, only if you subscribed), and our hosting providers (Vercel, Cloudflare). Each processes data under their own GDPR commitments. Some of these providers process data outside the EU under EU-approved safeguards (standard contractual clauses).

How long we keep it

Order data: as long as tax and accounting law requires us to. Newsletter data: until you unsubscribe. Emails to us: until the conversation is resolved and a reasonable time after.

Your rights

Under the GDPR you can ask us for a copy of your data, ask us to correct it or delete it, restrict or object to processing, and take your data elsewhere. Write to hello@norrwild.com and it will be handled directly. You also have the right to complain to a supervisory authority — in Malta, the Information and Data Protection Commissioner (idpc.org.mt).

Cookies

The shop uses the technically necessary cookies that Shopify's checkout and cart require to function — nothing for advertising or cross-site tracking. That's why there's no cookie banner: there's nothing to consent to beyond what's strictly needed to sell you a shirt.