Nord Menu Logo
HomePlans
Nord Menu Logo
Terms & ConditionsPrivacy PolicyRefund Policy
Copyright 2025 Nord Menu

Privacy Policy

Last updated: 16 November 2025

Nord MENU (“we,” “us,” or “our”) is committed to protecting the privacy of our visitors and users.By using our Website, you consent to this Privacy Policy and agree to its terms.

General Provisions

This Privacy Policy describes how Nord MENU collects, uses, and protects personal data through the Website https://nord.menu.

The data controller responsible for processing personal data is:

  • MB Nord Parrot
  • Registration No.: 305721039
  • Address: Chemijos str. 27C-62, LT-51332 Kaunas, Lithuania
  • Email: info@nordparrot.com

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national laws.

We ensure that personal data is:

  1. Processed lawfully, fairly, and transparently.
  2. Collected for specified, explicit, and legitimate purposes.
  3. Limited to what is necessary for those purposes.
  4. Kept no longer than necessary.
  5. Secured through appropriate technical and organizational measures.

Grounds for Data Processing

We process personal data based on one or more of the following legal bases:

  • Consent (Article 6(1)(a) GDPR).
  • Performance of a contract or steps before entering into a contract (Article 6(1)(b) GDPR).
  • Compliance with a legal obligation (Article 6(1)(c) GDPR).
  • Legitimate interests, such as improving the Website and preventing fraud (Article 6(1)(f) GDPR).

Data Collected by Us

We collect and process personal data that you provide directly or that we collect automatically during your use of our Website:

  • Account information (e.g., email address, hashed password, account preferences).
  • Communication data (e.g., messages or support requests).
  • Marketing. The data are stored until the user withdraws their consent for further processing for that purpose.

Personal data is stored only for as long as necessary to provide our services, fulfill contractual obligations, or comply with legal requirements.

Purposes of processing data:

  • Provide, operate, and maintain the Website.
  • Improve, personalize, and expand the Website.
  • Understand and analyze how users use the Website.
  • Develop new products, services, features, and functionality.
  • Communicate with users to provide updates and other information relating to the Website, and for marketing and promotional purposes.
  • Send emails.
  • Find and prevent fraud.

Data Sharing with Third Parties

Merchant of Record – Paddle.com

All financial transactions for purchases of our Service are processed by our authorized reseller and Merchant of Record, Paddle.com.When you make a purchase, you enter into a transaction with Paddle, which is responsible for payment processing, billing, invoicing, tax compliance, and managing payment-related support inquiries.You can learn more about how Paddle processes and protects personal data in their Privacy Policy and Checkout Buyer Terms.

Data Shared with Us by Paddle

Paddle collects specific personal and payment-related data during checkout. It may share it with us to enable product delivery and customer support. This typically includes:

Payment Information

  • Payment method and identifiers
  • Cardholder or account holder name
  • Billing address
  • Payment amount and date
  • Invoice and transaction records

Purchase Information

  • Purchased plan details
  • Purchaser or consignee name
  • Email address and contact telephone number
  • Billing address
  • Order or invoice related support correspondence

Consent Records

  • Records of consents provided, including date, time, and method of consent

Purpose and Legal Basis for Data Sharing

Data shared by Paddle is processed to:

  • Fulfill and manage orders and subscriptions
  • Provide access to our SaaS product
  • Deliver customer and technical support
  • Manage account and billing history
  • Prevent fraud and misuse
  • Communicate service-related updates

Processing is based on contract necessity (Article 6(1)(b) GDPR) and our legitimate interests in maintaining secure and compliant payment operations (Article 6(1)(f) GDPR).

Analytics Tools – Umami

We use a self-hosted, privacy-focused analytics platform (Umami) to understand how visitors use our Website without compromising individual privacy.This platform collects only non-personal, aggregated information, such as page views, referrers, browser and device type, operating system, general location (country or region), language settings, and dates and times of site connections.We do not collect or store any Personally Identifiable Information (PII), nor do we use cookies, fingerprinting, or any form of persistent tracking.All analytics data are processed and stored on servers we manage and control, hosted in secure data centers provided by Hetzner (Germany).Analytics data are never shared with third parties and are not used for advertising, profiling, or cross-site tracking.The purpose of this data collection is to monitor and analyze website usage, which allows us to optimize the design, content, and functionality of our Website to improve the user experience.

User Rights

Users have the right to:

  • Request access to their personal data.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of data (“right to be forgotten”).
  • Request restriction of processing or object to specific types of processing.
  • Request a copy of their data in a commonly used, machine-readable format (“data portability”).

Right to object to direct marketing:

If we process personal data for direct marketing purposes, users may object at any time. Once an objection is made, we will cease processing data for that purpose.

Data Retention

We retain personal data only for as long as necessary to provide our services, fulfill contractual obligations, and comply with legal requirements.Account data is retained until you cancel your account or until it has been inactive for two years. If you wish to cancel your account, please get in touch with us at info@nordparrot.com.Before deleting inactive accounts, we will notify you by email and provide two weeks to reactivate your account or retrieve any data you wish to keep.After the retention period, personal data is securely deleted or anonymized in accordance with applicable regulations.

Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.These measures include secure server configuration, firewalls, role-based access controls, and encrypted data transmission using SSL/TLS.User-uploaded files and images are stored in Amazon Web Services (AWS) S3, which provides industry-standard security, reliability, and redundancy.Access to these storage systems is strictly controlled and monitored to maintain data integrity and prevent unauthorized access.While we take reasonable precautions to protect your information, no system can guarantee absolute security.You are responsible for maintaining the confidentiality of your account credentials and restricting access to your account.If you suspect unauthorized access or a data breach, please get in touch with us immediately at info@nordparrot.com.

Cookies and Tracking Technologies

We use only a single authentication cookie on our platform.This cookie is essential for securely maintaining your login session and does not track your activity beyond authentication purposes.In addition, our payment provider, Paddle.com — acting as our Merchant of Record — uses essential cookies and tracking tools required for the secure operation of its checkout process.

Purpose of Processing

The cookies used by Paddle are essential for:

  • Processing payments and completing transactions
  • Preventing fraud and abuse
  • Ensuring secure and reliable checkout operations
  • Performing internal diagnostics and system performance checks

These cookies are strictly necessary for Paddle’s payment infrastructure and do not require additional user consent.We do not set any non-essential cookies or use tracking tools for analytics or advertising.

Contact Details

  • MB Nord Parrot
  • Registration No.: 305721039
  • Address: Chemijos str. 27C-62, LT-51332 Kaunas, Lithuania
  • Email: info@nordparrot.com
  • Website: https://nord.menu