Privacy Policy

1. Information We Collect

When you place an order, we collect: full name, email address, phone number, and shipping address. We collect only what is necessary to fulfill your order and communicate with you about it. No payment card data is ever collected or stored.

2. How We Use Your Information

Your data is used exclusively to: process and fulfill your order, coordinate payment by email, and send transactional communications related to your order (shipping updates, payment confirmation). We do not use your data for advertising, remarketing, or any purpose unrelated to your order.

3. Information Sharing

We do not sell, trade, or share your personal data with third parties except where strictly necessary: shipping carriers (to deliver your order) and payment intermediaries (PayPal or equivalent, if applicable to your payment method). We do not share data with advertising networks or data brokers.

4. Data Storage and Security

Order data is stored in a Neon Postgres database hosted on secured infrastructure. Transactional emails are sent via Resend. We retain your data for as long as necessary to fulfill orders and meet our legal obligations. You may request deletion at any time (see Your Rights below).

5. Cookies

This site uses a minimal set of functional cookies required for basic operation:

Theme preference — stores your light/dark mode selection in localStorage. No expiry. Not transmitted to our servers.

Session state — maintains your checkout session while you browse. Cleared when you close the browser.

This site uses analytics and marketing tools that may set their own cookies, including Google Analytics 4 (Google), Meta Pixel (Meta), and Microsoft Clarity. These services collect anonymized usage data — pages visited, session duration, and similar interactions — to help us understand site performance. Data collected by these services is governed by the respective providers' privacy policies. You can opt out via your browser's cookie settings or through each provider's opt-out mechanism.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you.

EU / EEA residents (GDPR) — you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise these rights, contact us at the address below.

California residents (CCPA) — you have the right to know what data we collect, request deletion, and opt out of sale. We do not sell personal data.

7. Changes to This Policy

We may update this policy periodically. Material changes will be reflected in the “Last updated” date above. Continued use of the site after changes constitutes acceptance.

8. Contact

Privacy inquiries: hello@noraalliance.com