Last updated: 4 November 2026.
Data controller
Martin Bonfils, a French sole trader (Entrepreneur individuel (micro-entreprise)), Espace Eole – Hall B, 70 rue de la Coquillade, 13540 Aix-en-Provence, France – contact@nordbada.com.
This policy applies under the EU General Data Protection Regulation (GDPR) and, for users in the United Kingdom, the UK GDPR.
Data we collect
When you complete the quote request form, we collect: your first name (and surname if you provide it), your email address, your phone number if you provide it, your postcode and country, and the details of your project (type of tub, heating, number of seats, budget, timescale, installation, options, message).
The site uses no advertising cookies or trackers. To measure traffic, it uses Cloudflare Web Analytics, a tool that sets no cookies and collects no data that can identify you (aggregated statistics only). An anonymised technical fingerprint of your IP address is kept for a maximum of one hour to limit abusive form submissions.
Purposes and legal basis
- Passing your request on to one or more partner manufacturers or distributors able to respond to it: on the basis of your consent, collected in the form.
- Following up your request and invoicing our partners: on the basis of our legitimate interest.
Recipients
Your data is passed only to the partner manufacturers or distributors relevant to your project (three at most), who become controllers of their own processing in order to send you a quote. It is never sold, rented or used for any other purpose.
Retention period
Quote requests are kept for 3 years from the date they are sent, then deleted.
Your rights
You have the right of access, rectification, erasure, restriction, objection and data portability, as well as the right to withdraw your consent at any time. To exercise them, write to contact@nordbada.com. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr). Users in the United Kingdom may also contact the Information Commissioner’s Office (ico.org.uk).
Security
The site is served over HTTPS. Requests are stored on our server, outside the publicly accessible area.