Privacy policy

Last updated: April 2026

1. Data controller

The controller for personal data related to NØRD / YATRA is Innerflect, reachable at info@nord.hot.

2. Data we collect

• Early access (waitlist): email address you provide voluntarily.
• Ticket purchases: data processed by Stripe (e.g. email, payment details). We do not store full card numbers on our server.
• Technical data: server logs and strictly necessary cookies where applicable.

3. Purposes and legal bases

We process data to: (i) manage the interest list (consent); (ii) perform the ticket purchase contract; (iii) comply with legal obligations (e.g. invoicing where applicable); (iv) communications about the event you have requested.

4. Sub-processors

We use trusted providers including Stripe (payments), Resend (transactional email) and hosting / database providers when configured. They are contractually required to protect your data.

5. Retention

We keep data only as long as needed for the above purposes or legal duties. Waitlist data is kept until you withdraw consent or it is no longer relevant.

6. Your rights (GDPR)

You have rights of access, rectification, erasure, restriction, objection and portability under the law. To exercise them, contact info@nord.hot. You may lodge a complaint with the Portuguese Data Protection Authority (CNPD).

7. Transfers

Some providers may process data outside the EEA with appropriate safeguards (EU standard clauses or adequacy decisions), as described in their policies.