Privacy policy
We collect as little personal data as we can, and we tell you plainly what happens to it.
Who is responsible for your data
The data controller is NAEIMEH AGHABABAGOLI trading as Norasa, 7A Winchester Street, London, SW1V 4PA, United Kingdom. For any privacy question, email support@norasa.store or call +44 7700180184.
What we collect and why
- Order information — your name, email address, delivery address and order contents. We need this to perform the contract of sale and to keep the accounting records the law requires.
- Payment information — collected and processed by Stripe through embedded payment components shown within our checkout page, not a hosted payment page. Your card details go directly to Stripe. We receive confirmation that payment succeeded and the last digits of the card; we never receive or store your full card number.
- Reviews — the name, title and text you submit, plus the product and date. Published reviews are public, so use only the name you are happy to show. Our lawful basis is your consent, given when you submit the review.
- Emails you send us — kept so we can answer you and handle any later query about the same order.
- Optional analytics — only if you consent through the cookie banner. Nothing beyond the strictly necessary runs before you agree.
What we do not do
We do not sell your data, we do not share it for other companies' marketing, and we do not build advertising profiles about you. We do not send marketing emails unless you have asked us to.
Who processes data for us
- Our payment provider, for taking payment and preventing fraud.
- Our carrier, for delivering your parcel.
- Our website and database hosting provider, which stores orders and reviews on our behalf.
Some of these providers may process data outside the United Kingdom or European Economic Area. Where that happens, transfers are covered by the appropriate safeguards, such as standard contractual clauses or an adequacy decision.
How long we keep it
- Order and transaction records: six years, to meet accounting and tax obligations.
- Correspondence: two years after the matter is closed.
- Reviews: until you ask us to remove yours, or until we remove it under our terms.
- Analytics data, if you consented: no longer than 14 months.
Cookies and local storage
Your basket and your cookie choice are stored in your browser's local storage, not on our servers, and are strictly necessary for the site to work. Full detail is on our cookie policy page.
Your rights
You have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to our processing, to data portability, and to withdraw consent at any time where processing is based on consent. Email us and we will respond within one month.
If you are not satisfied, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, in the European Union, to your national data protection authority.
Children
This website is not intended for children, and we do not knowingly collect data from them.
Changes
If we change this policy we will update this page. Material changes affecting how we use existing data will be notified to you by email where we hold your address for that purpose.