Privacy Policy

Last updated: 14 May 2025

Introduction

This Privacy Notice describes how Nortev Ltd, the operator of www.flexineb.com (the "Site") collects, uses, and discloses your personal data when you visit, or make a purchase of a product from the Site ("Products") or when you communicate with us. In this Privacy Notice, Nortev is referred to in as "Nortev", "we", "us", and "our".

We will change this Privacy Notice from time to time when we add functionality to the Site, or if we intend change the way we handle your personal data.

This Privacy Notice sits alongside our Cookie Notice, which explains how we use cookies and tracking technologies on the Site. We also have a set of Terms & Conditions, which set out how you are permitted to use the Site including the creation of an individual profile and account with us (an "Account"), and the terms of the agreement between us when you make a purchase from the Site.

Data Controller. The data controller is Nortev Limited, registered company number 452335, registered office address Unit 14, Westlink Commercial Park, Oranmore, Galway, Ireland, referred to in this Privacy Notice as "Nortev", "we", "us", "our".

Contact details. You can contact our Data Protection Officer via email at [email protected] or via post at the registered office address for Nortev given above.

How we collect personal data

From you: information that you directly submit to us through our Site may include:

Basic contact details including your name, address, phone number, email.
Order information including your name, billing address, shipping address, payment confirmation, email address, phone number.
Account information including your username, password, security questions.
Shopping information including the Products you view or put in your cart.
Customer support information including the information you choose to include in communications with us.
Feedback you provide us or any information collected in focus groups or user groups.

From third parties: We may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

Companies who support our Site, such as Shopify.
Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfil your orders and provide you with products or services you have requested, in order to perform our contract with you.
When you visit our Site, open or click on emails we send you, or interact with our social media posts or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies (see the Cookie Notice for information about cookies and tracking technologies we deploy through the Site).

How we use personal data:

We use your personal data for a range of purposes:

Nortev's routine activities as data controller
Type of personal data	Purposes	Lawful basis for use
Your name, email address, postal address/es (billing and delivery), telephone number, payment details hashed password for your Account.	We use this personal data to register and set up your Account and/or permit you to checkout as a guest and arrange for delivery of the Products to your designated address and to manage the processing of any Product returns.	Processing is necessary for the fulfilment of our contract with you.
Your name, email address, telephone number, and other information you share with us.	We use this personal data to communicate with you via email, text or other messaging service about delivery of Products to you and updates to the Products or other important functional service messages including any product recall notices. And the provision of technical and customer support.	Our legitimate interests in informing you about matters which are relevant to your use of the Products.
Your name, email address, telephone number.	We use this personal data to send you user satisfactions surveys and to ask for your feedback about the Products.	Our legitimate interests in improving the Products for you and for future users.
Contact information, as well as information about how you use the Products.	Customer profiling and marketing - we will process this data (and other information that you have provided to us through using other Nortev products or services) to understand how you have used the Products, and what your equine needs are. We may then contact you with relevant information about other Nortev products and services we think may be of interest to you.	Consent. Where required by applicable law, we will obtain your consent for marketing purposes, and in any case, you can stop direct marketing at any time by contacting us as set out below, or by using the unsubscribe link in our emails. Where permissible we may rely upon our legitimate interests but only where you are provided with a clear means to opt out of marketing.
Name, email and device specific identifiers, (computer type (Windows or Macintosh), operating system name and version, language, internet browser type and version and the name and version of the online services you are using, IP address, the page(s) visited, time visited	Shopify is the third party provider operating the Site on our behalf and. Shopify uses "cookies" and similar technologies to collect information and support certain features of our Products. These are deployed on the Site as follows: HTML5 Local Storage ✅ Supported Shopify apps and storefronts can use local Storage and session Storage, particularly in embedded app contexts. However, there are limitations due to browser privacy restrictions. Web Beacons ✅ Common Web beacons (also known as tracking pixels) are commonly used via Shopify’s Web Pixel API for conversion tracking and behavioral analytics (e.g. Meta, Klaviyo). Embedded Scripts ✅ Default Shopify allows the use of embedded JavaScript code through themes, apps, and pixels for analytics, UI enhancement, and third-party integrations. SDKs ✅ For Mobile Apps Shopify provides several SDKs such as the Shopify Mobile Buy SDK, Storefront API SDK, and SDKs for embedded apps. These are used to build custom storefronts or mobile apps.	The legal basis for processing activities related to essential cookies is our legitimate interest in providing our Products to our users. The legal basis for processing activities related to non-essential cookies is your consent. Please see the Cookie Notice for more information about our use of cookies.

How does Nortev share personal data?

Service providers and partners: We share personal data with companies and organisations that we work with for the purposes set out in the table above.

These third parties are required by contract to use the personal data we share with them only for the purposes that we have specified and to take commercially reasonable measures to protect the confidentiality and security of your personal data.

Transfers outside The Republic of Ireland and the European Economic Area. Our processors, including Shopify, which hosts the Site on our behalf, may process personal data outside of the European Economic Area ("EEA") where this is the case the transfer of your personal data takes place subject to appropriate and legally compliant data transfer mechanisms. We will not transfer your personal data beyond the EAA other than to facilitate your use of the Site, purchase of the Products and shipping of the Products to you outside of the EAA.

Intra-group transfers within Nortev: Our parent company, Nortev Limited, is an Irish corporation based in Galway, Ireland. We use web servers, store and otherwise process personal data within the EEA.

Business transfers. Your personal data may be transferred to a company that acquires, or considers acquiring, the stock or assets of, or invests in, Nortev, the Nortev Parent, one of its affiliates, or one of our businesses (or that company's advisors, lenders or auditors), for example, as the result of a sale, merger, reorganisation or liquidation. The legal basis for this data processing is that we have a legitimate interest in being able to sell or acquire investment in our business. If such a transfer occurs, the acquiring company's use of your personal data would still be subject to this Privacy Notice and the privacy preferences you have expressed to us.

Compliance with laws and protection of our rights and the rights of others. We may disclose personal data when this is necessary to comply with the law, a court order, a request from a regulator or a subpoena. In case of obligations under Republic of Ireland, EU or Member State law, the legal basis for this data processing is that it is necessary for compliance with a legal obligation to which we (the data controller) are subject, otherwise that we have a legitimate interest in complying with lawful requests from public authorities. Before disclosing personal data, or making personal data available to public authorities in third countries, we will consider our obligations to provide an adequate level of protection for the data, except where relevant derogations exist.

We may also disclose personal data to prevent or investigate a possible crime, such as fraud or identity theft (the legal basis being that we have a legitimate interest in protecting ourselves from crime and enforcing or defending our rights); to enforce or apply our online terms of use or other contractual relationship with you (the legal basis being that it is necessary for the performance of a contract with you or it is otherwise in our legitimate interest to do so); or to protect our own rights or property or the rights, property or safety of our users or others (the legal basis being that we have a legitimate interest in doing so).

Children's Data

The Site is not intended to be used by children, we do not knowingly collect any personal information from or about children (under 18s).

Security

No security measures are perfect or impenetrable, and we cannot guarantee that there is no risk to your personal data when using the Site. In addition, any information you send to us may not be secure while in transit. We recommend that you do not communicate sensitive or confidential information to us unless specifically requested to do so.

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We are not responsible for the privacy or security of other sites.

How can you exercise your rights in relation to your personal data?

You have the following rights:

To confirm Nortev is processing your personal data, to get access to or receive a copy of the personal data we may have about you;
To require us to rectify or update any inaccurate personal data, or complete any incomplete personal data;
To require us to delete or erase your personal data;
To restrict our processing of your personal data;
To require us to transmit certain of your personal data to you or to transfer or have them transferred to another data controller (data portability); and
To object to our processing of your personal data on a legitimate interests basis. If we agree with your objection then, subject to other legitimate interests which we may be able to rely on (e.g. in the context of legal claims pending or threatened against us), we will then no longer be allowed to process your personal data;
To require that we stop processing your personal data for direct marketing purposes.
To withdraw your given consent at any time without affecting the lawfulness of the processing based on consent until withdrawal.

Certain rights are subject to restrictions or limitations, and their availability may depend on why we process your personal data and the lawful basis we rely on. We may rely on exemptions under EU, Member State, Irish, or other applicable law in order to deny part or all of your request. If we do so, we will tell you when responding to your request.

If you wish to exercise any of your above rights, you can contact us as follows:

You can contact our Data Protection Officer via email at [email protected] or via post at the Nortev address given in the Introduction section at the beginning of this Privacy Notice.

We will respond to your request as quickly as possible after validating the request and seeking clarification if necessary. We may need to request proof of your identity in order to fulfil your request.

Can you delete your Account? How long does Nortev store your personal data?

We intend to store your personal data for six years from the date of any purchase you make as a guest. If you are an Account holder, we will store your personal data for six years following your last Account activity, unless applicable law or specific circumstances requires us to keep it longer.

Our retention periods for data collected using cookies and tracking technologies are set out in our Cookie Notice.

You may ask us to delete your Account at any time.

We may store certain personal data (such as a record of your identity and details of your purchase of our Products) for a period of up to six years (longer if specifically required) after you delete your Account, in case we need it to resolve disputes with you. However, in such cases we will no longer process the personal data other than by storing it securely for the duration of the retention period and using for dispute resolution purposes. The legal basis for such processing is that is it necessary for our legitimate interest in establishing, exercising or defending our rights.

Questions, concerns and complaints concerning your privacy.

Should you have any questions, you can contact our Data Protection Officer via email at [email protected] or by writing to the address for Nortev given at the beginning of this Privacy Notice.

You also have a right to lodge a complaint with a supervisory authority. In the Republic of Ireland this is the Data Protection Commission (details available at https://www.dataprotection.ie/en/contact/how-contact-us).