Privacy Policy

1. Data Controller

NORMA SAS acts as the data controller, located at 27 rue des Frênes, 49740 La Romagne, France. You can reach us at contact@nor.ma.

2. Personal Data We Collect

We collect the following categories of information:

• Direct information — full name, email, phone number, shipping and billing addresses, and the content of your messages.
• Order details — products ordered, dates, amounts, status, and payment information.
• Technical data — IP address, browser type, device type, operating system, and website interaction logs.
• Communications — marketing email subscription status and engagement metrics.

3. How We Collect Your Data

We collect data when you place an order on our website, fill in a form, contact us by email or through the website, subscribe to receive marketing emails, and automatically through essential technical tools.

4. Why We Use Your Data

We process data to fulfil orders, communicate with you, send marketing content, operate and improve our services, and meet our legal obligations.

5. Legal Bases for Processing

We rely on the performance of a contract, our legitimate interests, your consent, and our legal obligations as the bases for processing.

6. Email Marketing

Subscribers receive product news and promotional communications. You can unsubscribe at any time using the link in our emails or by contacting us.

7. Payments

Payments made through our website are processed by third-party payment and ecommerce providers, including Shopify. Your card details are handled directly by the payment providers.

8. Service Providers and Data Sharing

We share data, only as needed, with third parties including Shopify, Framer, Supabase, Resend, our shipping providers, and our legal advisers.

9. International Transfers

Where data is transferred outside the EEA, we rely on adequacy decisions or standard contractual clauses to protect it.

10. Data Retention

Retention periods vary: order data is kept for contractual and legal compliance; support data is kept for the duration of our relationship; marketing data is kept until you unsubscribe; and technical data is kept for operational security.

11. Your Rights

If you are in the EU or UK, you may access, correct, delete, restrict, object to, or port your data, withdraw consent, and lodge a complaint with a supervisory authority.

12. Cookies and Similar Technologies

We currently use only essential cookies. Any future non-essential tracking would require an appropriate consent mechanism where required by law.

13. Security

We use reasonable technical and organizational measures to protect your data. However, no method of transmission over the internet is completely secure.

14. Third-Party Links

We are not responsible for the privacy practices of external sites linked from ours.

15. Children

Our services are not intended for children, and we do not knowingly collect personal data directly from children.

16. Changes to This Privacy Policy

Any updates will be reflected in the “Last updated” date at the top of this policy.

17. Contact

You can reach NORMA SAS at the address above or at contact@nor.ma.