Privacy Policy

Nomad Ísland ehf. takes care in how it handles customers' personal data. This policy explains what information we collect when you use nomadstore.is, why, how long it is kept and what rights you have. It is based on the Icelandic Data Protection Act No. 90/2018 and the Electronic Communications Act No. 70/2022.

1. Data controller

Nomad Ísland ehf., reg. no. 540818-0960
Frakkastígur 8F, 101 Reykjavík, Iceland
Email: info@nomadstore.is
Phone: +354 537 5300

Questions and requests about personal data can be sent to info@nomadstore.is.

2. What we collect and why

Orders. When you buy from us online, we record your name, email address, phone number, delivery method and address or pickup point, along with any note you add. We ask for an Icelandic ID number (kennitala) only when it is needed, for example for an invoice. We use this information to process and ship your order, contact you about it and handle returns and complaints. The legal basis is our contract with you.

Payments. Card payments are handled by a payment provider that receives your card details directly. Nomad never sees or stores card numbers. We only receive confirmation that the payment went through.

Enquiries. If you send us a message through a form on the website, we store your name, email address and message so we can reply. To protect against spam, your IP address is stored in an encrypted form that cannot be traced back to you.

Newsletter. If you sign up for our newsletter, we send you news and offers. Your subscription takes effect once you have confirmed it by email, and you can unsubscribe at any time using the link at the bottom of every email. The legal basis is your consent.

Accounting. Records of transactions are kept in our accounts as required by the Icelandic Bookkeeping Act No. 145/1994.

3. Cookies and browser storage

The website uses few cookies and none from analytics services such as Google Analytics. We only ask for consent for what relates to advertising. Everything else is needed for what you ask for to work, and it is never used to track you or sold to anyone.

Necessary cookies:

store_lang remembers whether you chose Icelandic or English. Kept for one year.
store_currency and store_ship_country remember the currency and country you chose, so prices and delivery options match. The currency is kept for 180 days, the country until you close the browser.
__Host-nb_shop_session keeps you logged in to "My account" after you sign in with the code we email you. Kept for 30 days or until you log out.
__Host-nb_gift_lists proves you own a gift list you created, so only you can change it. Kept for 400 days.
nb_consent and nb_consent_seen remember your cookie choice so we don't ask again. Kept for 180 days.

Marketing (only with your consent). If you choose "Allow" in the cookie banner, two things happen:

The Meta pixel (Facebook and Instagram) is enabled to measure how our ads perform. Meta then sets the cookies _fbp and _fbc, kept for 90 days. The pixel is never loaded on a gift list's page, nor on an order's payment and confirmation pages.
The nb_attr cookie records where you came from when you arrive from an ad or a link with campaign tags. It is kept for 30 days, and the information is not shared with third parties.

If you choose "Decline", neither is used and the shop works just the same.

Storage in your browser. Your basket, your wishlist and your Charm Bar design are saved in the browser on your device, not with us. If you come from a gift list, your browser remembers it for three days, so a gift you buy is marked on the right list. Details you type in the delivery step are deleted when you close the tab.

Maps and videos. A Google map is only loaded when you click "Show map", and Google then sets its own cookies. YouTube videos only play when you click them. A video's preview image is, however, loaded from Google when the page opens.

Changing your choice. You can change your answer at any time with "Cookie settings" at the bottom of the page. If you decline after accepting, Meta's cookies and nb_attr are deleted. You can also delete cookies in your browser settings, but that empties your basket and wishlist too.

4. Who receives your data

We never sell personal data. The following parties process data on our behalf, and only as far as needed:

Delivery: Dropp, Pósturinn and DHL receive your name, address or pickup point, phone number and email address to deliver your order.
Payments: Straumur handles card payments.
Business and webshop system: the system that hosts Nomad's webshop, orders and accounts.
Email: a service provider that sends emails from the website.
Meta Platforms: only if you have accepted marketing cookies.

When data is transferred outside the European Economic Area, the transfer relies on a recognised legal basis, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Data is also disclosed to public authorities where the law requires it.

5. How long we keep data

Order and payment records are kept for seven years from the end of the financial year, as the Bookkeeping Act requires.
Messages sent through the enquiry form are kept for as long as they are needed to reply and follow up.
Newsletter email addresses are kept until you unsubscribe.

6. Security

All communication with the website uses an encrypted connection (HTTPS). Access to personal data is limited to staff who need it for their work, and our service providers are bound by data processing agreements.

7. Your rights

You have the right:

to know what data we hold about you and receive a copy,
to have incorrect data corrected,
to have data deleted when it is no longer needed and no legal obligation requires us to keep it,
to restrict or object to processing,
to receive data you provided in a machine-readable format,
to withdraw consent at any time.

Send requests to info@nomadstore.is. We reply within one month.

If you believe your personal data is not being handled correctly, you can lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd), Laugavegur 166, 4th floor, 105 Reykjavík, postur@personuvernd.is, +354 510 9600.

8. Changes

This policy is reviewed when the way we process personal data changes. The latest version is always published on this page with its date.

Last updated 17 October 2026.