Privacy

Privacy Policy

This Privacy Policy explains how NORDICSCOTT - FZCO ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our website, purchase our products, or use our services. We are committed to protecting your privacy and handling your data transparently in accordance with GDPR and applicable data protection laws.

Responsible Entity

Company Name: NORDICSCOTT - FZCO
CEO: Mirko Buechte
Business Address: Building A1, Dubai Digital Park,
Dubai Silicon Oasis, Dubai,
United Arab Emirates
License Number: 49051
Tax Registration Number: 104701909400003
Email: [email protected]

What Data We Collect

We may collect and process the following categories of personal data:

Personal data you provide during registration or purchase (e.g. name, email address, billing address)
Payment-related data processed by our Merchant of Record, DigiStore24 (e.g. payment method, transaction details)
Data collected automatically through your use of the website (e.g. IP address, browser type, device information, time and duration of visit)
Communication data (e.g. emails or messages you send us)
Account and login data on our content platform, Tentary
Course progress and interaction data within our products

Why We Collect Your Data

We process your personal data for the following purposes:

To provide access to purchased digital products and services
To process payments and fulfill orders (via DigiStore24)
To deliver content and manage your account (via Tentary)
To handle customer service inquiries and communication
To send newsletters or promotional emails (only with your explicit consent)
To comply with legal obligations such as tax and accounting
To prevent fraud and protect our services and users

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: e.g. when you opt in to newsletters or marketing communications (Art. 6(1)(a) GDPR)
Contract performance: to deliver the products and services you purchased (Art. 6(1)(b) GDPR)
Legal obligation: e.g. for tax, accounting, and record-keeping purposes (Art. 6(1)(c) GDPR)
Legitimate interest: to improve our services, prevent fraud, and communicate with our customers (Art. 6(1)(f) GDPR)

Third-Party Service Providers

We work with the following third-party service providers who process personal data on our behalf. Each processor operates under a Data Processing Agreement in accordance with Art. 28 GDPR.

DigiStore24: Merchant of Record

Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany (HRB 202956, VAT ID: DE288931281) acts as our Merchant of Record. DigiStore24 processes all payment transactions, handles invoicing, collects and remits applicable taxes, and manages transaction-related customer service.

Data processed: name, email, billing address, payment information, VAT ID (for business customers). Privacy Policy: digistore24.com/page/privacy

Tentary: Content Delivery

Tentary GmbH, Dorfstr. 33, 84048 Mainburg, Germany (HRB 20010, VAT ID: DE355688449) provides the technical infrastructure for hosting our websites, delivering course content, and managing email communications.

Data processed: name, email, purchase records, course progress, email interactions. Privacy Policy: tentary.com/de/privacy

Zapier: Automation

Zapier Inc. connects our Merchant of Record with our Content Delivery Platform to grant customers immediate access to purchased products.

Data processed: name, email, purchase details, product IDs. Privacy Policy: zapier.com/privacy

Cookies

Our website only uses cookies that are technically necessary for its operation (e.g. session management, login, security and checkout functionality). We do not use analytics, advertising or tracking cookies.

Technically necessary cookies are set on the basis of our legitimate interest in providing a functioning website (Art. 6(1)(f) GDPR). You can delete cookies at any time via your browser settings.

Embedded Videos: Vimeo

Our course videos are embedded via Vimeo, a service of Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. When you play a video, a connection to Vimeo's servers is established and data such as your IP address, device and browser information and viewing behavior may be processed by Vimeo.

Legal basis: Contract performance (Art. 6(1)(b) GDPR) for purchased courses and our legitimate interest in reliable video delivery (Art. 6(1)(f) GDPR). Data transfers to the USA are based on EU Standard Contractual Clauses.

More information at vimeo.com/privacy

Social Media Presence

We maintain a presence on the following platforms. When you interact with us on these platforms, your data is processed by the respective operators according to their own privacy policies:

Instagram (@nordic_scott, @create.with.nordic), operated by Meta Platforms Ireland Ltd.
TikTok (@nordic_scott), operated by TikTok Technology Limited
YouTube (@nordic_scott_official), operated by Google Ireland Limited
Skool (Creator University community), operated by Skool Inc.

We recommend reviewing the privacy policies of these platforms if you interact with our content there. We have no control over the data processing practices of these third-party platforms.

Email Communications and Unsubscribe

We send two distinct categories of email, each handled differently:

Marketing Emails (Newsletter)

You can unsubscribe from our marketing emails at any time, free of charge, through any of the following methods:

Unsubscribe link in every email. Every newsletter we send includes an unsubscribe link in the footer. A single click removes you from our mailing list immediately.
Email request. Send an email to [email protected] with the subject line "Unsubscribe". We will remove you from all marketing lists within 48 hours and confirm the removal in writing.
Account preferences. If you have an account on our content platform, you can manage your email preferences directly in your account settings under "Email Preferences".

When you unsubscribe, we may retain a minimal record of your email address on a suppression list for the sole purpose of ensuring we do not contact you again. This record is kept separately from our active marketing database.

Transactional Emails

Transactional emails related to your purchase — including order confirmations, invoices, access credentials, product updates, security notices, and customer support communications — will continue to be sent regardless of your newsletter preferences. These communications are necessary to deliver the service you purchased and to fulfill our contractual obligations to you.

No Sharing with Third Parties

We do not sell, rent, trade, or share your email address with any third party for their own marketing purposes.

Your Rights

Under applicable data protection law (including GDPR for EU-based users), you have the following rights:

Right of access: request a copy of the personal data we hold about you
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure: request deletion of your personal data
Right to restrict processing: request limitation of how we use your data
Right to data portability: receive your data in a structured, commonly used format
Right to withdraw consent: withdraw consent at any time where processing is based on consent
Right to object: object to processing based on legitimate interests
Right to lodge a complaint: file a complaint with a supervisory authority

To exercise any of these rights, contact us at [email protected].

For EU-based users, you may also contact the data protection authority in your country of residence. A list of EU data protection authorities can be found at edpb.europa.eu.

Retention of Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Specifically:

Account and access data: retained for the duration of your product access
Transaction and invoice data: retained for up to 10 years as required by tax and accounting law
Marketing consent data: retained until you withdraw your consent
Communication data: retained for up to 3 years after last interaction

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/SSL), access controls, regular security reviews, and secure data storage practices.

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

As NORDICSCOTT - FZCO is based in the United Arab Emirates and some of our service providers are located in the EU, USA, or other countries, your data may be transferred internationally.

Where we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs), adequacy decisions by the European Commission where applicable, and additional security measures where required.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised "Last updated" date.

Material changes will be communicated to you via email if you have an account with us.

Contact

If you have any questions about this Privacy Policy or our data processing practices, please contact us:

Email: [email protected]
Postal Address: NORDICSCOTT - FZCO
Building A1, Dubai Digital Park
Dubai Silicon Oasis, Dubai, UAE

Last Updated

This Privacy Policy was last updated on October 24, 2026.