Privacy policy
PRIVACY POLICY
Last updated: 30 September 2026
NØRA is a trading name of Justina Maleckaite (“NØRA”, “we”, “us” or “our”). We operate this website and online store to provide our products and related services to you.
This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, make a purchase, contact us or otherwise use our services.
NØRA is powered by Shopify, which enables us to operate our online store and provide our services to you.
Please read this Privacy Policy carefully. By using our website or services, you acknowledge that you have read and understood how we handle your personal information.
1. PERSONAL INFORMATION WE COLLECT
Personal information means information that identifies you or can reasonably be linked to you.
Depending on how you interact with our website and services, we may collect the following information:
• Contact information, including your name, billing address, delivery address, email address and telephone number.
• Order and transaction information, including the products you view, place in your basket or purchase, as well as information about returns, exchanges, cancellations and previous orders.
• Personalisation information, including names, dates, messages, photographs or other details you provide for personalised products.
• Payment information. Payments are processed securely by Shopify Payments, PayPal or other payment providers. We do not directly store your complete payment card details.
• Account information, including your username, password, preferences and account settings, if you create a customer account.
• Communications, including information you provide when contacting us by email, through our website, social media or customer-support channels.
• Device and technical information, including your IP address, browser type, device type, operating system and network information.
• Website usage information, including how you navigate and interact with our website, the pages and products you view and the links you select.
• Marketing preferences, including whether you have agreed to receive marketing communications from us.
2. HOW WE COLLECT PERSONAL INFORMATION
We may collect personal information:
• Directly from you when you place an order, create an account, contact us, join our mailing list or provide information for a personalised product.
• Automatically when you visit or use our website, including through cookies and similar technologies.
• From Shopify and other companies that provide services to us, such as payment processors, delivery companies, website analytics providers and marketing platforms.
• From social media platforms or other third parties when you choose to interact with us through those services.
3. HOW WE USE YOUR PERSONAL INFORMATION
We may use your personal information to:
• Process payments and fulfil, personalise and deliver your orders.
• Contact you about your order, delivery, return, refund or customer-service request.
• Create and manage your customer account.
• Provide and improve our website, products and services.
• Remember your preferences and items in your basket.
• Prevent fraud, misuse and other unlawful or harmful activity.
• Maintain the security of our website and services.
• Comply with our legal, tax, accounting and regulatory obligations.
• Enforce our terms, policies and legal rights.
• Send you marketing communications where you have consented to receive them or where otherwise permitted by law.
• Measure the performance of our website and marketing, where permitted and subject to your cookie choices.
4. OUR LAWFUL BASES FOR PROCESSING
Under UK data-protection law, we must have a lawful basis for processing your personal information. Depending on the circumstances, we rely on one or more of the following:
Contract
We process your information when it is necessary to enter into or perform a contract with you, including processing, personalising, dispatching and managing your order.
Legal obligation
We process certain information when necessary to comply with legal obligations, including tax, accounting, consumer-protection and fraud-prevention requirements.
Legitimate interests
We may process information where necessary for our legitimate business interests, provided those interests do not override your rights and freedoms. These interests may include operating and improving our business, responding to enquiries, securing our website, preventing fraud and understanding how customers use our services.
Consent
We rely on your consent for certain activities, including non-essential cookies and some forms of electronic marketing. You may withdraw your consent at any time.
5. PERSONALISED PRODUCTS
When you order a personalised product, we use the information you provide solely to create, process and fulfil your order and to provide customer support.
Please ensure that you have permission to provide any personal information relating to another person. Avoid including sensitive or unnecessary personal information in personalisation requests.
We may retain order and personalisation information for as long as reasonably necessary to fulfil the order, resolve queries, maintain appropriate business records and comply with our legal obligations.
6. MARKETING COMMUNICATIONS
If you subscribe to our mailing list or otherwise agree to receive marketing, we may send you information about our products, offers and business updates.
You can unsubscribe at any time by selecting the unsubscribe link in one of our marketing emails or by contacting us at hello@noragifts.co.uk.
If you unsubscribe from marketing, we may still send you non-marketing communications relating to your account, orders or enquiries.
7. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies to operate the store, remember your preferences, understand how visitors use the website, improve performance and, where permitted, support marketing and advertising.
Some cookies are necessary for the website to function. We will request your consent before using non-essential cookies where required by law.
You can manage your cookie preferences through the cookie banner or settings available on our website. You may also control cookies through your browser settings, although disabling certain cookies may affect how the website functions.
8. HOW WE SHARE PERSONAL INFORMATION
We may share personal information with trusted third parties where necessary to operate our business and provide our services. These may include:
• Shopify, which hosts and operates our online store.
• Payment providers, including Shopify Payments and PayPal.
• Delivery companies and postal services used to fulfil orders.
• Website, technology, cloud-storage and security providers.
• Analytics, advertising and marketing providers, subject to your consent where required.
• Professional advisers, including accountants, insurers and legal advisers.
• Government authorities, regulators, law-enforcement agencies or courts where disclosure is required by law.
• A purchaser, successor or adviser in connection with a sale, reorganisation or transfer of all or part of our business.
We only share information that is reasonably necessary for the relevant purpose. Service providers are expected to protect personal information and use it only in accordance with applicable law and their agreements with us.
We do not sell your personal information.
9. SHOPIFY
Our online store is hosted by Shopify. Shopify collects and processes personal information relating to your access to and use of our store so that it can provide and improve its services.
Information submitted through our website may be shared with Shopify and with service providers located in countries outside the United Kingdom.
In some circumstances, Shopify may process personal information for its own purposes and will be responsible for responding to requests relating to that processing.
You can learn more about how Shopify handles personal information by visiting:
https://privacy.shopify.com/en
10. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to websites, social media platforms or services operated by third parties.
We are not responsible for the privacy, security or content of third-party services. If you follow an external link, you should review the privacy policy of the relevant third party before providing personal information.
11. CHILDREN’S INFORMATION
Our website and services are not intended for use by children, and we do not knowingly collect personal information directly from children.
If you believe that a child has provided personal information to us without appropriate permission, please contact us so that we can investigate and, where appropriate, delete the information.
12. SECURITY
We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.
However, no method of online transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
Please do not send sensitive or confidential information through unsecured communication channels.
13. HOW LONG WE KEEP YOUR INFORMATION
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The length of time we retain information depends on factors including:
• Whether the information is required to fulfil an order or provide customer support.
• Whether you maintain a customer account with us.
• Legal, tax, accounting and regulatory requirements.
• The need to resolve disputes, prevent fraud or enforce agreements.
When personal information is no longer required, we will delete it, anonymise it or securely dispose of it, unless we are legally required to retain it.
14. INTERNATIONAL TRANSFERS
Shopify and some of our service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the United Kingdom, appropriate safeguards will be used where required by law. These may include adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.
15. YOUR DATA-PROTECTION RIGHTS
Depending on the circumstances and subject to legal limitations, you may have the right to:
• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete personal information.
• Request deletion of your personal information.
• Request restriction of how we process your personal information.
• Object to processing based on our legitimate interests.
• Object to the use of your information for direct marketing.
• Request a portable copy of certain personal information.
• Withdraw your consent where we rely on consent.
Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact us at hello@noragifts.co.uk. We may need to request information to verify your identity before completing your request.
We will not discriminate against you for exercising your data-protection rights.
16. COMPLAINTS
If you have concerns about how we handle your personal information, please contact us first so that we can try to resolve the matter.
You also have the right to complain to the UK Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Telephone: 0303 123 1113
Website: https://ico.org.uk/make-a-complaint/
17. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically to reflect changes to our business, services, legal obligations or privacy practices.
When we update this policy, we will publish the revised version on our website and change the “Last updated” date at the top of the policy.
18. CONTACT US
NØRA is a trading name of Justina Maleckaite.
For questions about this Privacy Policy, our privacy practices or your personal information, please contact us:
Email: hello@noragifts.co.uk
Postal address:
Justina Maleckaite trading as NØRA
99 Salesbury Drive
Billericay
Essex
CM11 2JJ
United Kingdom
For the purposes of applicable data-protection laws, Justina Maleckaite trading as NØRA is the data controller responsible for your personal information.