Privacy Policy — Noryx ApS | Interior Design Studio, Denmark

1. Introduction

Noryx ApS ("we", "us", or "our") is an interior design studio registered in Denmark. We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Danish data protection legislation.

This Privacy Policy explains what information we collect, why we collect it, how we use it, and what rights you have regarding your personal data when you interact with our website at noryx-aps.com or communicate with us directly.

2. Data Controller

The data controller responsible for your personal data is:

Noryx ApS
Egedal Centret 18F, 3660 Stenløse, Denmark
Email: design@noryx-aps.com

For any questions or requests relating to this Privacy Policy or your personal data, please contact us using the details above.

3. Information We Collect

We may collect and process the following categories of personal data:

Contact information — name, email address, telephone number, and postal address when you submit an enquiry or contact form.
Communication data — content of messages, emails, or other correspondence you send to us.
Project-related information — details about your property, design preferences, and requirements shared during consultations.
Technical data — IP address, browser type, device information, operating system, and pages visited on our website.
Cookie data — information collected through cookies and similar technologies as described in Section 8.

We do not intentionally collect sensitive personal data unless you voluntarily provide it and we have a lawful basis to process it.

4. How We Use Your Data

We use your personal data for the following purposes:

To respond to your enquiries and communicate with you about our interior design services.
To manage and deliver design projects you have commissioned from us.
To improve our website, services, and overall client experience.
To comply with legal obligations applicable in Denmark and the European Union.
To analyse website traffic and usage patterns through cookies, where you have given consent.

5. Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal grounds:

Consent — where you have given clear permission, for example when accepting cookies on our website.
Contractual necessity — where processing is required to fulfil a contract or take steps prior to entering a contract with you.
Legitimate interests — where processing is necessary for our legitimate business interests, such as responding to enquiries, provided these do not override your rights.
Legal obligation — where we are required to process data to comply with applicable law.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data to third parties. We may share your information with:

Trusted service providers who assist us in operating our website or delivering our services, bound by confidentiality agreements.
Professional advisers such as accountants or legal counsel, where necessary.
Public authorities or regulators when required by law or to protect our legal rights.

Any third parties we engage are required to process your data securely and only for the purposes we specify.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Enquiry data is typically retained for a reasonable period following our last communication. Project-related data is retained for the duration of the project and for a period thereafter as required by Danish law.

8. Cookies

Our website uses cookies to enhance your browsing experience and analyse site traffic. Cookies are small text files stored on your device. We use the following types of cookies:

Essential cookies — necessary for the website to function correctly, including remembering your cookie consent preference.
Analytics cookies — help us understand how visitors interact with our website, used only with your consent.

You can manage or withdraw your cookie consent at any time through your browser settings. Declining non-essential cookies will not prevent you from using our website.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your data where there is no compelling reason for continued processing.
Right to restrict processing — request that we limit how we use your data.
Right to data portability — receive your data in a structured, commonly used format.
Right to object — object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at design@noryx-aps.com. We will respond within the timeframe required by applicable law.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. While we take all reasonable precautions, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

11. International Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at www.datatilsynet.dk. We encourage you to contact us first so we can address your concerns directly.

13. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be published on this page. We encourage you to review this policy periodically to stay informed about how we protect your information.