Privacy Policy

This Privacy Policy provides an overview of all information regarding the processing of personal data by NorseCBD, a brand owned and operated by BYFY MARKETING SL, a company registered under the laws of Spain, at Carrer de Trafalgar 4, 08010 Barcelona, under under business number ESB66671249, hereafter referred to as NorseCBD, we or us.

NorseCBD is strongly committed to protecting your privacy and complying with your choices. You will be in full control of all data relating to yourself. Both personal and non-personal data and information collected is safeguarded according to the highest privacy and data protection standards adopted worldwide. Specifically, we are in compliance with the EU General Data Protection Regulation (GDPR). We strive to make you feel safe when we collect or share your data and therefore, we want to be transparent on how we collect, use, share and store the information about you and the choices available to you as data subject.

This Privacy Policy is about how we handle the personal information of customers and users of NorseCBD (the Privacy Policy). The Privacy Policy applies to the NorseCBD website, located at (the Website), as well as your use of or access to any of our (online) services.

We reserve the right to make changes to this Privacy Policy at any time. We will notify you when updates are made to give you an opportunity to withdraw previously given consent or to deny further use of your data. We may have to update the Privacy Policy in case of new developments, activities, online services or when applicable legislation changes.

1. When does this Privacy Policy apply?

This Privacy Policy applies to the processing of personal data of NorseCBD relations and users of the Website. We will provide you with a high level of control over your personal data, irrespective of whether you are an EU citizen or not. We will clearly inform you when information that personally identifies you is asked for and you will have the choice to provide it or not.

2. Usage of personal data

To offer you the functionalities of the Website and for the technical and functional management thereof

(i) Why?
We strive to make our Website easily accessible and to offer you the best possible experience and functionalities. We process technical data of everyone who visits and uses our Website in order to manage it and improve its performance. We may also need to process your personal data so that you can save your data (or preferences) to configure your device to give you a personalized experience. The functionalities of the Website are largely made available through the use of functional cookies.

(ii) How?
We process your personal data for this purpose based on your consent. Upon visiting our Website, you will be prompted to consent to the use of cookies. It is also possible to refuse all cookies, although this may affect the functionalities of the Website.

(iii) What?
We process all personal data that you have entered on our website or that is generated by the use of our cookies, including your IP address and which internet browser you use.

(iv) How long?
Storage for this purpose differs per cookie. However, data gathered for this purpose shall never be stored for longer than 2 years.

For answering your questions and handling complaints

(i) Why?
If you contact us at our office or through a contact form on our Website, we will use your personal information to answer your question or to handle a complaint.

(ii) How?
We process your personal data based on consent and legitimate interest. Where possible, we will ask for you consent before you contact us, such as through the contact form. In any other case, our legitimate interest is formed by our intention to handle your complaints and questions carefully in order to properly run and improve our business.

(iii) What?
We process your name, contact details, your correspondence with NorseCBD about your question or complaint and all other personal information that is required to answer your question or handle your specific query and/or complaint. If you include any further personal data in any message or correspondence with us, we may process this as well.

(iv) How long?
We keep your personal data for as long as necessary to complete your request or handle the complaint, plus an additional month, after which the data will be removed from our systems.

To ensure proper enforcement and respect for your rights contained in this Privacy Policy

(i) Why?
As a result of the rights granted to you by, among others, the General Data Protection Regulation (GDPR), which can be found in Section 7 of this Privacy Policy, we process your personal data to execute and manage your requests to us in connection with these rights. For example, if you want to exercise your right to be forgotten, we must record a minimum amount of data to ensure that we no longer contact you.

(ii) How?
The processing of this personal data is based on our legal obligation to provide a way for our data subjects to exercise their rights.

(iii) What?
We process contact information such as your e-mail address and personal information such as your name.

(iv) How long?
Due to the nature of this purpose, we must keep this information for an unlimited period.

For relationship management and marketing

(i) Why?
NorseCBD uses the information in the contractual relationships database to send you newsletters and to otherwise update you on developments within NorseCBD or affiliated entities. We also use your personal data for the development, execution and analysis of market research and marketing strategies.

(ii) How?
We process your personal data for this purpose based on your consent. You can withdraw your consent at any time.

(iii) What?
For this purpose, we process your contact details such as your address and e-mail address and personal details such as your name and date of birth, contact preferences, and correspondence with us.

(iv) How long?
Personal data is stored for a maximum of 10 years after the termination of our relationship. After this period your personal data will be deleted from our systems.

To create an account on the Website and to process your order

(i) Why?
Upon placing an order through the Website, you have to create an account. Given the nature of our business, we establish contractual relationships with our customers, and we need to be able to perform our legal obligations under the applicable terms and conditions. We process your personal data to execute your order, as well as for administrative purposes, such as sending invoices.

(ii) How?
Data will be processed on the basis of your consent. You shall be asked to give consent upon registering for your account on the Website. We also process data for this purpose on the basis of our contract with you, which is established once you accept the applicable Terms and Conditions. In order to meet our obligations thereunder, we will need to process your data.

(iii) What?
For this purpose, we process your contact details such as your (delivery) address, telephone number and e-mail address, personal data such as name and date of birth, payment and credit information, order history and other data stored in our database with all relations of NorseCBD.

(iv) How long?
Your personal information will be stored for up to 7 years after the end of our relationship with you. After this period your personal data will be deleted from our systems.

3. Cookies

NorseCBD uses cookies on the Website. A cookie is a small and simple file that can be stored on the hard drive of a computer. The cookies from NorseCBD are only temporary, not permanent.

3.1 Functional Cookies

NorseCBD uses a cookie to see whether a visitor to our website accepts the cookies on our website or not. This functional cookie registers your consent.

3.2 Analytics Cookies

Analytics cookies are used by NorseCBD to collect information about how our visitors use the Website. For example, we can track how long visitors stay on certain webpages, and what parts of the Website they visit. We use the information gathered by analytics cookies in aggregated form, which means that the information cannot be traced to a single individual.
You can set your browser to inform you as soon as you receive a cookie or to deactivate cookies. This might mean that our Website may not function optimally.

We give you the possibility to give your consent to the use of cookies when you first access the Website. If you, at a later point in time, wish to disable these cookies, you can follow the instructions below.

Here we offer some specific information about cookies for the most commonly used browsers, and more specifically, how to disable these:

Cookies and Internet Explorer, see:
Cookies and Firefox, see:
Cookies and Google Chrome, see:
Cookies and Safari, see:
Cookies and Opera, see:

4. Minors

We insist on not processing any personal data of children under the age of 16, unless this is explicitly consented to by a parent or legal guardian. However, as it is hard to detect whether we are doing so, we strongly encourage you to inform us if you have reason to believe we process the personal data of a minor. We will delete this personal data instantly.

5. Which parties have access to your personal data?

Within NorseCBD, our employees, contractors, agents and directors have access to personal data, but only to the extent necessary to properly perform their individual tasks.

NorseCBD only shares personal information with third parties if it is necessary to serve the applicable purpose as set out above. When a third party processes your personal data, this is only possible according to the instructions of NorseCBD. They therefore act as our data processor. In all cases, we will ensure that third parties with access to your personal information have implemented appropriate technical and organizational measures to maintain our intended level of privacy and security. We will conclude the necessary agreement with the data processor(s), whereby we include obligations to ensure that your personal data is only processed so that the data processor can fulfil his duty to provide services to us.

Under these conditions, the following third parties will have access to your personal data:

• Our internal marketing team may get access to any data relating or useful for marketing.
• Third-party payment service providers get access to your payment information when you place an order through our Website.

In all other cases, your personal information will not be provided to third parties, unless required by law. NorseCBD will never sell your personal data.

6. Security

Your personal information is stored securely at all times. We value the protection of your privacy. We have taken strong security measures to protect your data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. We further ensure that personal data is only accessible to those specific persons who are authorized based on their function.

In addition, we have implemented measures to guarantee your safe visit to and use of our Website. This way we prevent misuse of your data. These measures include computer security and protected files and facilities. Your connection to our Website is safe through activation of Secure Socket Layer (SSL) as well as the use of firewalls. Any data stored outside the Website is secured with encryption.

NorseCBD has taken the necessary technical and organizational measures to prevent, identify, report and deal with data protection breaches. However, in the event that a data breach occurs, NorseCBD will, without undue delay and where possible, not later than 72 hours after being notified, report the breach of personal data to the Spanish Data Protection Authority.

7. Your rights

You have the right to view, correct, restrict or delete your personal data that we have stored, you also have the right to the portability of your data. You can ask us to not send marketing communications and not to use your personal data for direct marketing purposes. You can opt out of receiving email newsletters and other marketing communications by following the opt-out instructions provided to you in those emails.

You may withdraw your previously granted permission to process your personal data or to object to the processing of your personal data at any time.

Finally, you have the right to have a file sent to you with details of which of your personal data we have stored. You can send us a request to receive such a file in writing. Every request is subject to applicable law, which means that we may have to store the personal information.

We also want to inform you and remind you that you can file a formal complaint with the Spanish Data Protection Authority if you believe your privacy rights have been violated.

If you object to the use of your personal data by NorseCBD, you want your personal data to be forgotten, to withdraw your previously given permission to process your personal data, or if you have another request regarding your personal data information, you can request it here at any time:


• Carrer de Trafalgar 4, 08010 Barcelona
• Phone number

External Links

Our Website may display links to other websites. Unless these other websites are affiliated with NorseCBD, we are not responsible for the privacy policies that these other websites use, nor for its content and security. We advise you to inform yourself by reading the privacy policies on these websites.

Questions or comments?

• If you still have questions after reading this Privacy Policy or if you have suggestions or comments about its content, you can always contact us via:

Please let us know if, for any reason, you believe we have not adhered to the principles in this Privacy Policy. We will do our best to promptly make corrections.

  • Highest
    Product Quality Our products are GMO- free and tested with complete laboratory reports.

  • Secure
    Payment We offer safe and secure card payment. All data is protected with SSL protocol.

  • Amazing
    Customer Service Our customer service is always ready to answer your questions via email, phone, Instagram or on Facebook.

  • Fast
    delivery All orders placed before 12.00 Mon-Fri sent the same day. 3-5 working days delivery time.

    Your Cart
    Your cart is emptyReturn to Shop