Privacy Policy

1. Data Controller

Noruvit (noruvit.com) is the data controller responsible for your personal data. Contact: info@noruvit.com. Company registration and VAT details will be published here once confirmed.

2. Data We Collect

We collect the following categories of personal data when you use our website or place an order:

• Identity data — name, email address
• Contact data — delivery address, telephone number
• Transaction data — details of purchases you make
• Technical data — IP address, browser type, device identifiers
• Usage data — information about how you use our website
• Marketing data — preferences for receiving marketing communications

We do not collect special categories of sensitive personal data.

3. How We Use Your Data

We use your personal data to: process and fulfil your orders; communicate with you about your order; send marketing communications (only with your consent); improve our website; and comply with legal obligations.

4. Legal Basis for Processing

Under GDPR Article 6, we rely on: contract performance (to process your orders); legal obligation (to comply with EU law); legitimate interests (to improve services and prevent fraud); and consent (for marketing and non-essential cookies).

5. Data Sharing

We share data only with trusted third parties necessary to fulfil our services:

• Syncee / BigBuy — dropshipping suppliers who receive your shipping address to fulfil orders
• Stripe — payment processor (PCI DSS Level 1 compliant). We never store card details.
• Klaviyo — email marketing (only if you subscribed to marketing communications)
• Google Analytics — anonymised usage data for site improvement

We do not sell your personal data to third parties under any circumstances.

6. Data Retention

Order data: 7 years (tax and accounting requirements). Marketing consent data: until you withdraw consent. Website usage data: 26 months.

7. Your Rights

Under GDPR you have the right to: access your data; rectify inaccurate data; request erasure; restrict processing; data portability; object to processing; and withdraw consent at any time. Email info@noruvit.com to exercise any right. You may also lodge a complaint with your national data protection authority.

8. Cookies

We use essential cookies (always active) plus analytics and marketing cookies that require consent via our CookieYes banner. You can manage or withdraw your cookie preferences at any time using the Cookie Settings link in our footer.

9. International Data Transfers

Some service providers may process data outside the European Economic Area. Where this occurs we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

10. Contact Us

For any privacy-related queries, to exercise your rights, or to make a complaint, please contact us at info@noruvit.com.