01 Controller and contact

Péter Orincsay and Robert Egeric operate Northstar Militaria and jointly determine why and how personal information is processed. They are the joint data controllers.

02 Scope

This Policy applies when you visit the website, contact us, submit or cancel an order request, accept a final offer, make a payment, arrange shipping or a return, or exercise a data-protection right.

It does not govern independent websites or services linked from this website.

03 Information collected

Order and contact information

• name, email address and telephone number;
• billing and delivery address, country and region;
• items, SKU numbers, prices and quantities;
• shipping preferences, order status and transaction history;
• customer notes and correspondence;
• payment confirmation and information needed to identify a payment.

Technical and security information

• IP address;
• browser, device and operating-system information;
• timestamps, requested pages and server logs;
• cookie identifiers and session information;
• information used to detect errors, misuse, fraud or security incidents.

Please do not send sensitive personal information that is not necessary for the request or transaction.

04 How information is obtained

We normally obtain information directly from you through the website, email, an order request, a final-offer response, or communication about payment, shipping or returns.

Technical information may be generated automatically by WordPress, WooCommerce, the web server, security functions and your browser. Limited information may also be received from banks, postal services or couriers where necessary.

05 Purposes

Personal information may be used to:

• answer questions about an item;
• administer and temporarily reserve an order request;
• calculate shipping and the final total;
• prepare and administer a final offer;
• confirm payment and arrange dispatch;
• provide tracking information;
• handle cancellations, returns, complaints, authenticity questions and refunds;
• maintain transaction and correspondence records;
• prevent misuse, fraud and security incidents;
• maintain and troubleshoot the website;
• comply with law and establish, exercise or defend legal claims.

We do not use order information for unrelated email marketing unless you separately request or consent to it.

06 Legal bases

• Pre-contractual steps and contract: to answer a request, prepare a final offer and complete an accepted transaction.
• Legal obligation: where information must be retained or disclosed under applicable law.
• Legitimate interests: to secure the website, prevent misuse, maintain necessary records, manage disputes and protect legal rights, provided your rights do not override those interests.
• Consent: where we expressly request consent, such as for optional non-essential cookies or a future marketing subscription.

Where processing relies on consent, consent may be withdrawn at any time without affecting earlier lawful processing.

07 Recipients

Information is disclosed only where reasonably necessary. Recipients may include the private individuals operating Northstar Militaria; one.com or other website, domain, storage and email providers; WordPress, WooCommerce and relevant service providers; SMTP and email-delivery providers; banks and payment providers; postal services, couriers, insurers and customs operators; professional advisers; and public authorities where legally required.

We do not sell, rent or trade customer lists or personal information.

08 International transfers

Website, email, banking, shipping or technical providers may operate in more than one country. Where information is transferred outside the European Economic Area, we seek to use providers and mechanisms that offer an appropriate level of protection, such as an adequacy decision or approved contractual safeguards.

Shipping information is necessarily transmitted to the selected postal or courier service and may be processed in destination or transit countries.

09 Retention

• Uncompleted, declined or cancelled requests: normally up to 12 months after closure.
• Completed transactions and essential correspondence: normally up to 7 years where needed for tax, record-keeping, authenticity, warranty, dispute or legal purposes.
• General enquiries: normally up to 24 months after the last meaningful communication.
• Routine server and security logs: normally up to 30 days unless an incident or legal matter requires longer retention.
• Cookies and sessions: for the period described by the applicable cookie or until deleted through the browser.

Information may be anonymised instead of deleted. Historical item, SKU, price, provenance and sale records may be retained without directly identifying the buyer.

10 Cookies

The website may use cookies and similar storage where necessary to maintain the basket and checkout session, remember interface choices, protect login and administrative functions, prevent misuse and ensure WordPress and WooCommerce operate correctly.

If optional analytics, advertising or other non-essential cookies are introduced, this Policy and the consent controls will be updated before those cookies are used where consent is required.

Blocking necessary cookies may prevent the basket, checkout or other functions from working correctly.

11 Security

We use reasonable technical and organisational measures intended to protect personal information, including encrypted website connections, access controls, software updates, backups, security monitoring and restricted administrative access.

No internet system can be guaranteed completely secure. Please contact us promptly if you suspect misuse or improper disclosure.

12 Your rights

Subject to applicable conditions and exceptions, you may request access, correction, deletion, restriction, data portability or confirmation of processing; object to processing based on legitimate interests; withdraw consent; and lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).

Send requests to info@northstarmilitaria.com . We may need to verify identity. A request may be limited where information must be retained for a transaction, another person’s rights, a legal obligation or a legal claim.

13 Required information

You are not generally required to provide personal information merely to browse the public catalogue.

Name, contact details and a valid delivery address are required to administer an order request. Without necessary information, we may be unable to calculate shipping, issue a final offer, reserve an item or complete the transaction.

Northstar Militaria does not use solely automated decision-making that produces legal or similarly significant effects. Requests and final offers are reviewed manually.

14 Children

The website is intended for adult collectors and is not directed to children. Certain historical objects may only be supplied to a person aged at least 18, and reasonable proof of age or identity may be requested.

If you believe a child submitted information improperly, contact us so it can be reviewed and, where appropriate, deleted.

15 Changes

This Policy may be updated when the website, service providers, legal requirements or the organisational status of Northstar Militaria changes. The latest version will be published here with a revised date.

16 Contact and complaints

If you are dissatisfied with our response, you may complain to IMY or another competent supervisory authority.

For order and transaction rules, see our Terms & Conditions .