Privacy policy
Last updated: 24 October 2026
This policy explains how Pure Nordic Health collects and uses your personal data when you visit purenordichealth.com, create an account, place an order or contact us. Our Cookie Policy explains cookies in more detail.
1. Who is responsible for your data
The data controller is Heilsubarinn ehf, trading as Pure Nordic Health. You can contact us about anything in this policy at support@purenordichealth.com. Our full company details are in our Terms and Conditions.
2. What we collect
Account details: your name, email address, password (stored securely, we cannot see it) and order history.
Order details: your name, billing and delivery address, email, phone number, the products you buy and confirmation of payment. We never see or store your full card number.
Messages: what you write when you email us or use our contact form.
Newsletter: your email address and how you interact with our emails, if you sign up.
Health information: only when you choose to give it to us, for example when you order a health test, ask our team about your health or report a reaction to a product.
Practitioner recommendations: if a practitioner invites you or recommends products to you through our site, we receive your name, email address and the products they recommend.
Practitioner applications: if you apply for a practitioner account, your professional details and qualifications.
Website use: device and browser information, IP address and how you use the site, collected through cookies and similar tools as set out in our Cookie Policy.
3. Why we use your data and our legal basis
To process and deliver your order, manage your account and handle returns. Basis: performing our contract with you.
To answer your questions. Basis: performing our contract when it concerns an order, otherwise our legitimate interest in helping you.
To keep accounting and tax records. Basis: legal obligation.
To send our newsletter. Basis: your consent, which you can withdraw at any time with the unsubscribe link in every email.
To understand how the site is used and to measure and show our ads. Basis: your consent through our cookie banner.
To prevent fraud and keep the site secure. Basis: our legitimate interest.
To provide health tests and answer health questions. Basis: your explicit consent, which you give when you order a test or send us the information. You can withdraw it at any time.
To handle reports of reactions to products. Basis: our legal obligations on product safety, including reporting to the authorities where the law requires it.
To provide the practitioner service you and your practitioner use. Basis: performing our contract.
We do not make decisions about you by automated means alone.
4. Who we share your data with
We share your data only with those who help us run our shop, and only what each of them needs:
our warehouse in the Netherlands, which packs your order and handles returns;
our carriers, which deliver your parcel;
our payment provider, Teya, which processes your payment;
our e-commerce, hosting and email service providers;
the brands and laboratories that process health tests, when you order one;
analytics and advertising providers, such as Google and Meta, only if you allow it in the cookie banner
the practitioner who recommended products to you through our site, limited to what is needed for the service you both use;
authorities, courts or advisers, when the law requires it or to protect our rights.
If our business, or part of it, is transferred to another company, your data may be transferred with it. That company will continue to protect it as this policy describes.
We do not sell your personal data.
5. Data sent outside Europe
Some of our providers, such as Google and Meta, are based in the United States. When your data is sent outside the EEA or the UK, we rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses, or the UK equivalents.
6. How long we keep your data
Order and accounting records: seven years, as accounting and tax law requires.
Your account: for as long as it is open. When you ask us to close it, we delete your account details, but keep order records for the period above.
Newsletter: until you unsubscribe.
Messages to our support team: up to three years after our last contact.
Health test information and health questions: for as long as needed to provide the service, then deleted, or earlier if you ask.
Reaction reports: for as long as product safety rules require.
Practitioner applications that are not approved: twelve months.
7. Your rights
You have the right to:
see the personal data we hold about you and get a copy;
have incorrect data corrected;
have your data deleted;
restrict or object to how we use it;
receive your data in a format you can take elsewhere;
withdraw your consent at any time, without affecting what we did before.
To use any of these rights, email support@purenordichealth.com. We reply within one month. We may ask you to confirm your identity first.
8. Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You can also complain to the data protection authority in the country where you live or work. In Iceland this is Persónuvernd (personuvernd.is), and in the UK the Information Commissioner's Office (ico.org.uk).
9. Age
Our shop is for people aged 18 and over. We do not knowingly collect data from anyone younger.
10. Security
We protect your data with encryption and access controls, and only people who need it for their work can see it.
11. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If we make important changes, we will tell you by email or on the site.
12. Contact
support@purenordichealth.com