Privacy Policy
Privacy Policy
At Nornelle, we take the privacy of our customers and users seriously. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you visit nornelle.com, make a purchase, contact us, or use any of our services.
By accessing our website, using our services, or placing an order, you acknowledge that you have read and understood this Privacy Policy.
This policy should be read together with our Terms of Service, Shipping Policy, Return & Refund Policy, and any other policy published on our website.
1. Data Controller
The data controller responsible for the personal data collected through this website is Nornelle.
For any questions related to privacy, data protection, or the exercise of your rights, you can contact us at:
Email: help.nornelle@gmail.com
Where legally required, additional information about the data controller may be provided to competent authorities, payment providers, compliance platforms, consumer protection bodies, or entities that require it under applicable law.
2. Personal Information We May Collect
We may collect personal information when you visit our website, place an order, create an account, contact us, interact with our advertisements, or use our services.
Personal information may include:
Identification details, such as your first and last name.
Contact details, such as email address, shipping address, billing address, and phone number when necessary.
Order details, such as products purchased, order number, purchase history, returns, cancellations, or incidents.
Payment details, such as payment method, payment confirmation, and transaction-related data. Full payment card details are processed by secure payment providers and are not stored directly by Nornelle.
Communication data, such as messages sent to customer support, complaints, return requests, or order-related inquiries.
Technical data, such as IP address, device type, browser, operating system, online identifiers, cookies, and browsing data.
Usage data, such as pages visited, products viewed, products added to cart, interactions with the store, and general behavior on the website.
Marketing data, such as communication preferences, interaction with advertising campaigns, or subscription to promotional communications.
We do not knowingly request sensitive personal data, such as medical, religious, political, biometric, or similar information. If a user voluntarily provides this type of information in a communication, it will only be processed to the extent strictly necessary to manage that communication.
3. Sources of Personal Information
We may obtain personal information from the following sources:
Directly from you, when you place an order, complete forms, contact us, or provide us with information by any means.
Automatically, when you browse our website through cookies, similar technologies, device identifiers, or analytics tools.
From service providers, such as Shopify, payment processors, shipping companies, customer support tools, email marketing providers, analytics platforms, or technical integrations.
From authorized third parties, such as advertising platforms, fraud prevention tools, or services we use to operate and protect the store.
4. How We Use Your Personal Information
We use personal information for legitimate purposes related to store management, service delivery, and compliance with our legal obligations.
We may use your data to:
Process and manage orders.
Confirm payments and prevent fraud.
Prepare, ship, and deliver products.
Manage returns, refunds, cancellations, incidents, and complaints.
Respond to customer support inquiries.
Send order confirmations, shipping updates, and important communications related to your purchase.
Create, maintain, or manage user accounts, where applicable.
Improve the browsing and shopping experience.
Analyze the performance of the website.
Personalize content, recommendations, or commercial communications where permitted.
Send promotional communications, where there is a valid legal basis or consent where required.
Detect, prevent, and investigate fraudulent, abusive, illegal, or policy-violating activities.
Comply with legal, tax, accounting, regulatory, or consumer protection obligations.
Defend our rights, respond to claims, cooperate with competent authorities, or enforce our policies.
5. Legal Basis for Processing
Depending on the situation, we process your personal data on one or more of the following legal bases:
Performance of a contract: when we use your data to process orders, manage payments, organize shipping, handle incidents, process returns, or provide the services requested.
Compliance with legal obligations: when we must retain invoices, respond to authorities, comply with tax obligations, handle privacy rights, or comply with applicable regulations.
Legitimate interest: when we use data to prevent fraud, improve website security, protect our rights, analyze store performance, resolve disputes, or improve our services, provided that your rights and freedoms do not override those interests.
Consent: when required to send certain commercial communications, use certain non-essential cookies, or carry out processing activities that require prior authorization. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out before your withdrawal.
6. Shopify and Service Providers
Our store operates using Shopify technology, which allows us to provide the website, manage products, process orders, organize payments, and provide services related to the online store.
When you use our website or place an order, certain personal information may be processed by Shopify and by other providers necessary to operate the store.
We may share personal information with:
Shopify and its related services.
Payment processors.
Shipping and logistics companies.
Order management providers.
Fraud prevention tools.
Customer support services.
Email, marketing, and communication providers.
Analytics and measurement tools.
Hosting, security, storage, and technical support providers.
Authorities, public bodies, courts, or third parties where there is a legal obligation or legitimate need.
These providers should only use the information to the extent necessary to provide their services, comply with their legal obligations, or act in accordance with their own policies when they act as independent data controllers.
7. Payments and Transaction Security
Payments made on nornelle.com are processed through secure third-party payment providers.
Nornelle does not directly store full payment card details. Payment information is processed through authorized platforms, payment gateways, or services integrated with Shopify.
We may process transaction-related information, such as payment confirmation, payment method used, payment status, amount, currency, date, billing address, and data necessary to prevent fraud or resolve incidents.
We reserve the right to hold, review, cancel, or request additional verification for orders that show risk signals, inconsistent information, suspected fraud, unusual activity, previous chargebacks, or violation of our policies.
8. Marketing, Advertising, and Commercial Communications
We may use your information to send you commercial communications about products, promotions, updates, or news from Nornelle, where there is a valid legal basis.
We may also use advertising and analytics tools to display personalized ads or measure the effectiveness of our campaigns.
Depending on your location, you may have the right to object to the use of your data for personalized advertising, direct marketing, or certain forms of online tracking.
You can unsubscribe from promotional communications by using the unsubscribe link included in our emails or by contacting us at:
Even if you unsubscribe from promotional communications, we may still send you necessary communications related to your orders, payments, shipping, returns, security, legal changes, or customer support.
9. Cookies and Similar Technologies
Our website may use cookies, pixels, identifiers, tracking technologies, and similar tools to operate correctly, remember preferences, analyze website usage, improve the shopping experience, prevent fraud, and display relevant advertising.
Some cookies are necessary for the operation of the store, such as those related to the cart, checkout, security, or user session.
Other cookies may be used for analytics, personalization, or advertising, where permitted by applicable law or where you have given consent if required.
You can configure your browser to reject or delete cookies. However, some website features may not work properly if certain necessary cookies are disabled.
10. Disclosure of Information for Legal Obligations or Defense of Rights
We may disclose personal information when necessary to:
Comply with laws, regulations, or legal obligations.
Respond to valid requests from authorities, courts, public bodies, or regulatory entities.
Protect our rights, property, security, or legitimate interests.
Investigate possible fraud, abuse, policy violations, or illegal activities.
Respond to claims, chargebacks, payment disputes, or legal proceedings.
Cooperate with payment providers, ecommerce platforms, shipping companies, or compliance entities.
We do not directly sell your personal data to third parties in exchange for money.
11. International Data Transfers
Because we work with Shopify, payment providers, technology services, marketing tools, analytics platforms, and logistics companies, your personal information may be processed or stored outside your country of residence.
Where applicable, we will use legally recognized mechanisms to protect international data transfers, such as standard contractual clauses, data processing agreements, reasonable security measures, or equivalent mechanisms recognized by applicable law.
By using our website or placing an order, you understand that your data may be processed by providers located in countries other than your own, always in accordance with this Privacy Policy and applicable law.
12. Data Retention
We will retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless the law requires or allows a longer period.
The retention period may depend on:
The existence of an active business relationship.
The need to manage orders, returns, refunds, or claims.
Tax, accounting, or legal obligations.
Fraud prevention, chargebacks, or abuse prevention.
Dispute resolution.
Compliance with regulatory obligations.
The exercise or defense of legal claims.
When the data is no longer necessary, we may delete it, anonymize it, or keep it restricted where necessary to comply with legal obligations or defend rights.
13. Information Security
We adopt reasonable measures to protect personal information against loss, misuse, unauthorized access, disclosure, alteration, or destruction.
However, no data transmission or storage system can guarantee absolute security. Therefore, we cannot guarantee that information transmitted over the internet will be completely secure at all times.
The user is responsible for maintaining the confidentiality of their credentials, passwords, devices, and email accounts associated with their purchases.
If you suspect that your information, account, or order has been compromised, you should contact us as soon as possible at:
14. Privacy Rights
Depending on your place of residence and applicable law, you may have the right to:
Request access to your personal data.
Request the correction of inaccurate or incomplete data.
Request the deletion of your personal data.
Request the restriction of processing.
Object to certain processing activities.
Request data portability.
Withdraw your consent when processing is based on consent.
Object to commercial communications.
File a complaint with a competent data protection authority.
These rights are not absolute and may be subject to legal limits, identity verification, retention obligations, fraud prevention, defense of claims, or compliance with legal obligations.
To exercise your rights, you can contact us at:
We may request additional information to verify your identity before responding to your request. This helps us protect your data against unauthorized access.
We will respond to requests within the timeframes required by applicable law.
15. Rights of Users in the European Economic Area, United Kingdom, and Switzerland
If you reside in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws.
These rights may include access, correction, deletion, objection, restriction, portability, and withdrawal of consent.
You may also have the right to file a complaint with your local data protection authority if you believe that the processing of your data does not comply with applicable regulations.
Before contacting an authority, we recommend contacting us first at:
We will try to resolve any questions or complaints in a reasonable and transparent manner.
16. Privacy Rights in the United States and Other Jurisdictions
If you reside in certain U.S. states or other jurisdictions with specific privacy laws, you may have additional rights regarding your personal data, such as the right to know what information is collected, request deletion, correct inaccurate data, object to certain advertising uses, or limit certain processing activities.
The availability and scope of these rights will depend on the applicable law in your place of residence.
You can send any privacy-related request to:
We will not discriminate against any user for exercising their privacy rights.
17. Minors
Our website is not intended for minors or for individuals who cannot legally make online purchases.
We do not knowingly collect personal information from minors.
If you are a parent or legal guardian and believe that a minor has provided us with personal information, you can contact us at:
If we verify that we have collected personal information from a minor without the required authorization, we will take reasonable steps to delete it, unless the law requires us to retain it.
18. Third-Party Links and Services
Our website may contain links to websites, platforms, applications, tools, or services operated by third parties.
We do not control and are not responsible for the privacy practices, security, content, policies, or operation of such third parties.
If you access external sites from our website, we recommend reviewing their privacy policies, legal terms, and security measures before providing personal information.
The inclusion of third-party links does not imply approval, control, or responsibility by Nornelle.
19. Privacy Complaints
If you have any complaint, question, or claim related to the processing of your personal data, you can contact us at:
We will try to respond clearly and reasonably.
If you reside in a jurisdiction where you have the right to file a complaint with a data protection authority, you may do so in accordance with applicable law.
In Spain, the competent authority for data protection matters is the Spanish Data Protection Agency.
20. Changes to This Privacy Policy
We may update, modify, or replace this Privacy Policy at any time to reflect legal, technical, commercial, operational, or service-related changes.
The updated version will be published on this page with the corresponding “Last updated” date.
Continued use of the website after changes are published means that you acknowledge having read the updated version.
Where required by law, we will notify relevant changes through appropriate means.
21. Contact
For any questions about this Privacy Policy, our privacy practices, or the exercise of your rights, you can contact us at:
Email: help.nornelle@gmail.com