Privacy Policy

Last updated: October 2026


Nordnatur Tech OÜ takes your privacy seriously. This policy explains what personal data we collect, why we collect it, and what we do with it, in plain language, without unnecessary complexity.

If you have questions or want to exercise any of your rights, you can reach us at office@nordnatur.com at any time.


Who We Are

Nordnatur Tech OÜ
Registry code: 16469064
Registered in Estonia, European Union
Website: nordnatur.com
Contact: office@nordnatur.com

We are the data controller for all personal data collected through this website.


What Data We Collect and Why

When You Use the Home Assessment

The home assessment on our Tools page is free and needs no account. We don’t ask for your name. To show your results and let you come back to them, we store:

  • Your answers about each room, and the three questions about where and how you live
  • The scores calculated from those answers
  • Your country, if your connection’s request headers include it
  • When you started and when you last made a change

Some questions ask about damp, mould, ventilation, how you sleep and, in the nursery assessment, about a child. Please give only the detail you are comfortable sharing.

Your private link. Your assessment is tied to a private link instead of an account. Anyone who has the link can open your results, so keep it as you would a password. Your browser keeps a cookie, nnr2_assessment, which holds the secret part of the link so you can carry on in the same browser. The tool needs this cookie to work. It lasts 12 months. We store only a one-way hash of the link, so we can’t recover the link for you if you lose it. When you open a private link, a second cookie, nnr2_pending, holds it for up to 10 minutes until you confirm on the page that you want to open that assessment.

Emails. If you ask us to email your report or your link, we send it to the address you give at that moment and don’t keep the address. Our send log records only a short one-way hash of the address and its domain (for example, gmail.com), for the last 50 emails sent, so unusual sending can be spotted. To limit misuse, we keep a one-way hash of your IP address for one hour. We never store the IP address itself.

Newsletter. Joining our mailing list at the end of the assessment is a separate step with its own consent box. It is covered in the next section.

Lawful basis: Performance of a contract. You ask us to run the assessment and keep your results so you can return to them. The hashed IP address rests on our legitimate interest in keeping the tool available and free from misuse.

Your link and unfinished answers are deleted 12 months after your last visit, and the link stops working. Completed answers and scores are kept after that for statistics, with no way to connect them to you.

Deleting your assessment: use the “Delete my results” button on the assessment page. It removes your answers, scores and link straight away. We can’t tell who holds a link, so we can’t find or delete an assessment for you without it.

When You Sign Up for Our Newsletter

If you choose to join our mailing list — either at the end of the home assessment or via a sign-up form on the site — we collect your email address. We use this to send you our content: new Learn articles, research summaries and updates to our tools.

Lawful basis: Consent. You can unsubscribe at any time using the link in any email we send, or by writing to office@nordnatur.com. Unsubscribing removes you from future mailings immediately.

We keep your email address on our mailing list until you unsubscribe.

When You Take Our Quiz

The quiz on our site is anonymous. It collects no personal data unless you choose, at the end, to join our mailing list — in which case, only your email address is collected, as described above.

When You Visit Our Website

Our website uses cookies — small text files stored on your device — to make the site function properly. These include:

  • Essential cookies: Required for the site to work, such as the home assessment cookie described above and the login state of site administrators. These cannot be disabled without breaking site functionality.

We do not currently use advertising or tracking cookies, and we do not share browsing data with third-party advertisers.

If you have questions about specific cookies in use, please write to office@nordnatur.com.


Third Parties We Share Data With

We share data with third parties only where necessary to operate our services. We do not sell personal data.

Email Marketing

MailerLite (MailerLite UAB, Lithuania) — We use MailerLite to manage our mailing list and send newsletters. When you subscribe, your email address is transferred to MailerLite’s servers. MailerLite is GDPR-compliant and processes data within the EU. Their privacy policy is available at mailerlite.com/legal/privacy-policy.

Hosting and Website Infrastructure

Our website is hosted on servers within the European Union. The site runs on WordPress. Standard server logs (including anonymised IP addresses) may be retained for security and troubleshooting purposes for up to 30 days.


Your Rights

Under the EU General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

Access — You can ask us to confirm whether we hold data about you and request a copy of it.

Correction — You can ask us to correct inaccurate or incomplete data.

Erasure — You can ask us to delete your data where we no longer have a legal basis to hold it. For the home assessment, use the “Delete my results” button described above.

Restriction — You can ask us to limit how we use your data while a dispute is resolved.

Portability — You can ask for your data in a structured, machine-readable format.

Objection — You can object to processing based on legitimate interests.

Withdrawal of consent — Where processing is based on consent (newsletter), you can withdraw it at any time. This does not affect the lawfulness of any processing before withdrawal.

To exercise any of these rights, write to office@nordnatur.com. We will respond within 30 days. We may ask you to verify your identity before acting on a request.


Supervisory Authority

If you believe we have handled your personal data incorrectly, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

Website: aki.ee Email: info@aki.ee Phone: +372 627 4135

You may also contact the data protection authority in your country of residence within the EU/EEA.


Changes to This Policy

We may update this policy from time to time — for example, if we add new services or our practices change. The “last updated” date at the top of this page will reflect any changes.


Contact

For any privacy-related question, request, or concern:

Nordnatur Tech OÜ
office@nordnatur.com

We aim to respond within five business days.