Privacy policy — NordPass

Cited by

Facts read from this source

• Controller Report an error

  “(ii) from January 1, 2023 – Nord Security Inc. ("Nord","we", "us", or "our") as a data controller when the data is collected by us”

• Processor role Report an error

  “Nord acts only as a data processor and processes your personal data according to the instructions issued by your organization.”

• Effective date Report an error

  “Effective from: December 15, 2025”

• Cross border safeguards Report an error

  “in case personal data is transferred to countries outside the EEA, we make sure there is an adequacy decision from the European Commission with regards to the recipient country or we use standard contractual clauses approved by the European Commission”

• Eea sccs Report an error

  “To comply with the GDPR, we have also implemented appropriate contracts for international transfers, on the basis of the standard contractual clauses approved by the European Commission”

• CCPA Report an error

  “If you are a California resident, you can exercise your rights as provided in the California Consumer Privacy Act ("CCPA") by contacting us at privacy@nordsecbusiness.com.”

• Data sale Report an error

  “As per definitions in the CCPA, please note that Nord does not sell, share, lease, or rent your personal information.”

• End user data processed Report an error

  “On behalf of our Customers, we process: End Users’ full name, telephone number, email, professional information (position, represented entity’s information) account registration, login information, subscription information, basic device information (e.g., device name, IP address, OS, advertising id), application diagnostics, connection timestamps, IP addresses.”

• Security measures Report an error

  “Data at rest and in transit are encrypted. Encryption protocols are used according to the newest security practices.”

• External audits Report an error

  “We have external audits to prove our information security and data processing policies are up to standards.”

• Retention end users Report an error

  “Nord will retain End Users’ data in accordance with the Customer’s instructions.”

• Controller retention Report an error

  “it stores personal data only for as long as it is necessary for the original purpose of collection or legal requirements”

• Data subject rights Report an error

  “Delete: request us to erase your personal data; Access: know and access personal data Nord has collected about you; Rectify: rectify, correct, update, or complement inaccurate/incomplete personal data Nord has about you; Object: object to the processing of your personal data which is done on the basis of our legitimate interests (e.g., for marketing purposes);”

• Privacy contact Report an error

  “If you wish to delete your personal data that we process or request to provide you with a copy of your personal data, please contact us at privacy@nordsecbusiness.com.”

• Address Report an error

  “Nord Security Inc., One Rockefeller Plaza, 11th Floor, New York, NY 10020, United States of America.”

• Eea representative Report an error

  “Postal address: nordsec B.V., registered at Fred. Roeskestraat 115, 1076 EE Amsterdam, The Netherlands.”

• Minors age Report an error

  “Nord does not knowingly collect or solicit personal data from anyone under the age of 18.”

• Analytics providers Report an error

  “To analyze and improve our Website and users’ experience, we use analytics service providers (e.g., Google Analytics)”

• Data sharing Report an error

  “Service providers. We use third-party service providers to help us with various operations, such as IT, servers, marketing, customer support, data storage, website customization, website analytics, accounting, legal, agency, and others.”

• End user rights via customer Report an error

  “If you are using Nord Services as an End User and you want your personal data to be no longer processed by us, you should contact the Customer that granted you access to our Services.”

• Liability limitation Report an error

  “Under no circumstances is Nord liable for the consequences of your unlawful, willful, and negligent activities, and any circumstances that may not have been reasonably controlled or foreseen”

Scores citing this record

• The CISO European sovereignty
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor European sovereignty
• The DevOps Engineer European sovereignty
• The Identity Engineer European sovereignty
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The SME Owner European sovereignty