Privacy Policy
For the purposes of UK data protection law, Nora & Elise is the data controller of your personal data.
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:
Nora & Elise
Email: info@noraelise.com
2. The Personal Data We Collect
We may collect and process the following categories of personal data:
- your full name;
- billing address;
- delivery address;
- email address;
- telephone number;
- account details, if you create an account;
- order details and purchase history;
- payment-related information;
- IP address;
- device, browser, and technical information;
- information about how you use our website;
- communications you send to us; and
- marketing preferences and consent choices.
We collect this information when you:
- visit our website;
- place an order;
- create an account;
- subscribe to marketing communications;
- contact customer support; or
- otherwise interact with our website, advertisements, or services.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- to process and fulfil your orders;
- to arrange shipping, delivery, and returns;
- to provide customer support;
- to send order confirmations, dispatch updates, and service messages;
- to manage your account, where applicable;
- to process payments and prevent fraudulent transactions;
- to operate, maintain, and improve our website and services;
- to understand how customers use our website;
- to comply with legal and regulatory obligations;
- to establish, exercise, or defend legal claims; and
- to send marketing communications where we have your consent or another lawful basis to do so.
4. Our Lawful Bases for Processing
Under UK GDPR, we must have a lawful basis for processing your personal data. Depending on the circumstances, we rely on the following lawful bases:
a. Performance of a Contract
We process your personal data where necessary to perform our contract with you or to take steps at your request before entering into a contract, including:
- processing your order;
- taking payment;
- delivering products; and
- handling returns, refunds, and customer service requests.
b. Legal Obligation
We may process your personal data where necessary to comply with legal obligations, including obligations relating to:
- tax and accounting;
- consumer protection;
- fraud prevention; and
- responding to lawful requests from regulators, authorities, or courts.
c. Legitimate Interests
We may process your personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include:
- operating and improving our business and website;
- preventing fraud and misuse;
- maintaining website security;
- analysing website performance and customer behaviour;
- managing customer relationships; and
- handling complaints and disputes.
d. Consent
We rely on your consent where required by law, including for certain:
- email marketing communications;
- cookies and similar tracking technologies; and
- advertising or analytics activities.
You may withdraw your consent at any time, but this will not affect the lawfulness of processing carried out before withdrawal.
5. Payment Information
Payments made through our website are processed by secure third-party payment providers.
We do not store your full payment card details on our own servers. Payment providers process your payment information in accordance with their own privacy policies and security procedures.
6. Cookies and Similar Technologies
We use cookies and similar technologies on our website to:
- enable essential website functionality;
- remember your preferences;
- keep items in your cart;
- analyse website traffic and usage;
- improve website performance; and
- where you consent, support advertising and remarketing activities.
Where required by law, we will ask for your consent before placing or using non-essential cookies.
For more information, please see our Cookie Policy.
7. Marketing Communications
Where permitted by law, we may send you marketing emails about our products, offers, or updates.
Where consent is required, we will only send such communications if you have opted in.
You can opt out of marketing communications at any time by:
- clicking the unsubscribe link in any marketing email; or
- contacting us at info@noraelise.com.
Even if you opt out of marketing, we may still send you non-promotional communications relating to your orders or customer service enquiries.
8. Sharing Your Personal Data
We may share your personal data with trusted third parties where necessary to run our business and provide our services. These may include:
- payment processors;
- shipping, delivery, and logistics providers;
- ecommerce platform providers, such as Shopify;
- website hosting and technical service providers;
- analytics providers;
- advertising and marketing partners;
- customer support providers; and
- professional advisers, regulators, law enforcement, or courts where required by law.
We do not sell your personal data for money.
We only share personal data to the extent reasonably necessary for the relevant purpose.
9. International Transfers
Some of our service providers, suppliers, or fulfilment partners may be located outside the United Kingdom, which means your personal data may be transferred to and processed in countries outside the UK.
Where we transfer personal data outside the UK, we will take appropriate steps to ensure that your personal data remains protected in accordance with UK data protection law. These steps may include:
- transferring data to countries recognised as providing an adequate level of protection;
- using the UK International Data Transfer Agreement or international data transfer addendum to standard contractual clauses; or
- relying on another lawful transfer mechanism permitted under UK law.
10. How Long We Keep Your Data
We keep your personal data only for as long as reasonably necessary for the purposes set out in this Privacy Policy, including to:
- provide our products and services;
- maintain business and financial records;
- comply with legal, tax, and accounting obligations;
- resolve disputes; and
- enforce our legal rights and agreements.
When personal data is no longer needed, we will securely delete or anonymise it where appropriate.
11. Your Rights
Under UK data protection law, you may have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request erasure of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- request transfer of your data to you or another provider, where applicable;
- withdraw consent where processing is based on consent; and
- not be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects, where applicable.
These rights are subject to certain legal exceptions and limitations.
To exercise any of your rights, please contact us at info@noraelise.com.
12. Complaints
If you have concerns about how we handle your personal data, please contact us first and we will try to resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection regulator. You can find more information on the ICO’s website at ICO.
13. Data Security
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
However, no website or internet transmission is completely secure. While we take reasonable steps to protect your personal data, we cannot guarantee absolute security.
14. Third-Party Services and Links
Our website may include links to third-party websites or use third-party services for ecommerce, payments, analytics, marketing, and logistics.
Those third parties may process your personal data in accordance with their own privacy policies. We are not responsible for the privacy practices of third-party websites or services, and we encourage you to review their privacy policies.
15. Children’s Privacy
Our website and services are not intended for children, and we do not knowingly collect personal data from children.
If we become aware that we have collected personal data from a child without appropriate legal basis or consent where required, we will take reasonable steps to delete that information.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, legal obligations, or data practices.
Any updated version will be posted on this page with a revised effective date. We encourage you to review this Privacy Policy regularly.
17. Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please contact us at:
Nora & Elise
Email: info@noraelise.com