Privacy policy

Privacy Policy

Last updated: 03 July 2026

This Privacy Policy describes how NORYEL ("we", "us", or "our") collects, uses, discloses, and protects your personal information when you visit or make a purchase from our website. This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

NORYEL is an online retail store operating in the United Kingdom. For any privacy-related queries, you can reach us at noryel.contact@gmail.com. We act as the "data controller" of the personal information you provide to us.

Information We Collect

When you visit our store, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. We refer to this automatically-collected information as "Device Information."

We collect Device Information using the following technologies:

  • Cookies, which are data files placed on your device, often including an anonymous unique identifier.
  • Log files, which track actions occurring on the site and collect data such as IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.
  • Web beacons, tags, and pixels, which are electronic files used to record information about how you browse the site.

When you make a purchase or attempt to make a purchase through our store, we collect certain information from you, including your name, billing and shipping address, payment information (including credit card numbers, subject to processing by our secure payment providers), email address, and phone number. We refer to this information as "Order Information."

How We Use Your Personal Information

We use the Order Information we collect generally to:

  • Fulfil orders placed through our store, including processing payment, arranging shipping, and providing invoices/order confirmations.
  • Communicate with you.
  • Screen orders for potential risk or fraud.
  • When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information we collect to help us screen for potential risk and fraud, and more generally to improve and optimise our store (for example, by generating analytics about how customers browse and interact with the site).

Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

  • Performance of a contract, where processing is necessary to fulfil your order.
  • Consent, where you have given clear consent (e.g., for marketing emails or non-essential cookies).
  • Legitimate interests, where processing is necessary for our legitimate business interests, such as fraud prevention and improving our services.
  • Legal obligation, where we must process data to comply with the law (e.g., tax and accounting records).

Sharing Your Personal Information

We share your Personal Information with third parties to help us use it as described above. For example, we use third-party payment processors, shipping carriers, and email/marketing platforms to help us provide our services. These third parties have access to your personal information only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We may also disclose your personal information to comply with applicable laws and regulations, to respond to a lawful request, or to otherwise protect our rights.

Data Retention

We retain your Order Information for our records unless and until you ask us to delete this information, or as required to comply with legal, tax, and accounting obligations under UK law.

Cookies

Cookies help us understand how visitors interact with our store and improve your shopping experience. You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Your Rights Under UK GDPR

If you are a UK resident, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your personal data ("right to be forgotten").
  • Object to or restrict certain processing of your data.
  • Request data portability.
  • Withdraw consent at any time, where processing is based on consent.
  • Lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator, at www.ico.org.uk, if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at noryel.contact@gmail.com.

Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Some of our third-party service providers may be located outside the United Kingdom. Where this is the case, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision, to protect your personal information.

Children's Privacy

Our store is not directed at individuals under the age of 16, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. Any changes will be posted on this page with a revised "Last updated" date.

Contact

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:

NORYEL Email: noryel.contact@gmail.com