This Privacy Policy describes how NorthenCharm OÜ (“we”, “us”, or “our”), operating through bluedragonracing.eu, collects, uses, and protects the personal data of its customers in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

---

1. Data Controller

The data controller is:
NorthenCharm OÜ
Registry code: 16869303
VAT number: EE102687127
Address: Aiandi tee 4-13, Viimsi alevik, Viimsi vald, Harju maakond, 74001, Estonia
Email: bluedragonracing@bluedragonracing.eu

---

2. What Personal Data We Collect

We collect and process the following types of personal data:

• Name
• Email address
• Phone number (if provided)
• Shipping and billing address
• Payment method (via third-party processors; no card details stored by us)
• Purchase and order history
• IP address and browser data (via cookies and analytics, if applicable)

---

3. How We Use Your Data

We use your data for:

• Processing and delivering your orders
• Customer support and order updates
• Complying with legal obligations (e.g., tax or accounting)
• Improving our website and services
• Preventing fraud or misuse of our services

---

4. Legal Basis for Processing

We process your data based on the following legal grounds:

• Contractual necessity – to fulfill your purchase
• Legal obligation – for recordkeeping and compliance
• Legitimate interest – for fraud prevention and improving service
• Consent – if you opt-in to marketing (currently not in use)

---

5. Data Sharing

We share your personal data only when necessary with:

• Shipping partners (e.g., DPD) – to deliver your orders
• Payment processors – such as Stripe, PayPal, Apple Pay, Google Pay
• IT service providers – for hosting, maintenance, and security
• Government authorities – if legally required

We do not sell your data.

---

6. Data Retention

We keep your data as long as necessary for the purposes described, including:

• Order records – kept for 7 years (accounting obligations)
• Website logs – retained for up to 12 months for security
• Customer service emails – retained for up to 24 months

---

7. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify inaccuracies in your data
• Request erasure (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent (where applicable)

To exercise any rights, email us at bluedragonracing@bluedragonracing.eu.

---

8. Cookies

Our website may use cookies for essential functionality and analytics. A cookie notice is displayed upon visiting the site, allowing you to manage preferences.

---

9. Security

We implement appropriate technical and organizational measures to safeguard your personal data, including:

• SSL encryption
• Access controls
• Regular updates and security audits

---

10. International Data Transfers

We store data in the EU. Some providers (e.g., payment processors) may process data outside the EU. In such cases, we ensure proper safeguards (e.g., Standard Contractual Clauses).

---

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page and, where appropriate, notified by email.

---

12. Contact Us

If you have any questions about this privacy policy or your data, contact:

NorthenCharm OÜ
Email: bluedragonracing@bluedragonracing.eu

---