Legal

Privacy Policy

Effective date: 1 July 2026

This Privacy Policy describes how Penterra Analytics Pvt Ltd (DBA NordBridge) collects, uses, and protects personal data when you use our website (nordbridgegcc.com) and services.

NordBridge is committed to GDPR compliance for EU data subjects and to the applicable provisions of India's Digital Personal Data Protection Act, 2023 (DPDPA).

1. Data We Collect

Website contact form

When you submit an enquiry via our contact form, we collect: your name, work email address, phone number, company name, and your message. This data is used solely to respond to your enquiry and assess fit for our services.

NB Assess intake

When you complete the NB Assess intake, we collect information about your company (type, size, tech stack, India goals). We do not collect sensitive personal data at this stage. Intake responses are used to generate your GCC Readiness Report.

Website analytics

We may collect anonymised usage data (pages visited, session duration) for the purpose of improving our website. No personally identifiable information is collected through analytics.

2. How We Use Your Data

We do not sell your personal data. We do not use your data for advertising or marketing to third parties.

3. Data Sharing

Your data may be shared with:

We do not share your data with any other third parties without your explicit consent.

4. Data Storage and Security

Data submitted through our website is processed via secure, encrypted connections (HTTPS/TLS). We apply reasonable technical and organisational measures to protect your data against unauthorised access, disclosure, or loss.

EU client business data is processed under Standard Contractual Clauses where applicable to ensure GDPR-compliant transfer.

5. Your Rights (EU/EEA Residents)

If you are an EU or EEA resident, under GDPR you have the right to:

To exercise any of these rights, contact us at connect@nordbridgegcc.com. We will respond within 30 days.

6. Retention

We retain contact enquiry data for up to 24 months from the date of last contact. Engagement data is retained for the duration of the engagement and up to 36 months thereafter for reference and compliance purposes. You may request deletion at any time.

7. Cookies

This website does not use tracking or advertising cookies. We may use a session cookie for basic website functionality. No consent is required for this cookie under applicable law.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or notice on this website.

9. B2B Outreach and Legitimate Interests

NordBridge conducts direct business-to-business outreach to professionals at Nordic and EU technology companies via email, LinkedIn, and telephone.

Legal basis: Article 6(1)(f) GDPR — Legitimate Interests. We process business contact data (name, work email, work telephone, company name, job title) to introduce NordBridge services to companies that may benefit from them. We have assessed that this interest is not overridden by the interests, rights, or freedoms of the individuals contacted because:

How we obtained your contact data: Business contact details used for outreach are sourced from professional B2B databases (such as Apollo.io and LinkedIn), which aggregate publicly available professional information. This is the same type of data used by major B2B platforms and sales intelligence tools.

Your opt-out rights: You can stop all future contact at any time by replying “unsubscribe” to any email we have sent you, or by emailing connect@nordbridgegcc.com. Opt-outs are processed within 24 hours and maintained permanently in our suppression list. You will not be contacted again.

10. Contact

For privacy enquiries or to exercise your data rights:
connect@nordbridgegcc.com
Penterra Analytics Pvt Ltd (DBA NordBridge), Bangalore, India.