Privacy Policy
Data Controller
The data controller is NowToMe OÜ, based in Tallinn, Estonia. For privacy requests, contact privacy@nordictomediterranean.com.
Data We Collect
We collect only what is needed to operate the NowToMe marketplace:
- Clients: name, email, booking history, payment details (processed via Stripe), and IP address.
- Photographers: name, profile picture, bio, portfolio images, location data, and billing information.
Purpose & Legal Basis
We process personal data to:
- Fulfill the service — connecting clients with photographers (performance of a contract).
- Meet accounting and legal compliance obligations under Estonian law (legal obligation).
- Where required, process data based on your consent (e.g. optional communications).
Third-Party Services
We use trusted sub-processors to run the platform. They process data only on our instructions:
- Supabase — database and authentication
- Vercel — hosting and delivery
- Stripe — payment processing
Data Retention
Account data is retained while your account remains active. When you close your account, we delete or anonymize personal data that is no longer needed. Financial and accounting records are kept for 7 years as required by Estonian law.
Your GDPR Rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Request deletion (“right to be forgotten”), subject to legal retention duties
- Object to certain types of processing
To exercise these rights, email privacy@nordictomediterranean.com. You may also lodge a complaint with the Estonian Data Protection Inspectorate.
Cookies
We use essential session cookies provided by Supabase to maintain your login state. These are required for the portal to function and are not used for advertising.