Privacy policy

Privacy Policy – Norrvale

Last updated: [DATE]

At Norrvale, we take the privacy of our customers seriously. We take all necessary measures to protect your personal information and adhere to strict rules regarding its handling. This privacy policy explains what information we collect, why we collect it, and how it is used.

Norrvale is operated by IHOUMI LIMITED, a company registered in Hong Kong. While our business is based in Hong Kong, we are committed to complying with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL) for all customers located in Canada.

What Information Do We Collect?

When you create an account with Norrvale, place an order, or use our services, we may collect the following information:

Name, email address, and other contact information
Billing and shipping address
Payment information (processed securely through our third-party payment provider — we do not store full credit card details)
Products you have purchased or added to your wishlist
Browser, device, and web traffic information (such as IP address, browser type, operating system, and pages visited)

How Do We Collect Your Information?

We collect information in the following ways:

Directly from you: when you create an account, place an order, subscribe to our newsletter, or contact us
Automatically: through cookies and similar tracking technologies when you visit our website
From third parties: such as our payment processors and analytics providers (e.g. Shopify, Google Analytics)

Why Do We Collect This Information?

We use your information to provide you with the best possible service, including:

Processing and fulfilling your orders
Processing payments
Shipping products to your address
Communicating with you about your orders and account
Sending promotional offers and updates (only with your explicit consent)
Improving our website and user experience
Complying with legal obligations

Consent

We rely on your consent to collect, use, and share your personal information. By providing us with your personal information, you consent to our collection, use, and disclosure of that information in accordance with this privacy policy.

You may withdraw your consent at any time by contacting us at info@norrvale.com. Please note that withdrawing consent may affect our ability to provide you with certain products or services.

Commercial Electronic Messages (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (such as marketing emails or newsletters) if you have provided your express consent. Every commercial message we send will include:

Our identity and contact information
A clear and simple unsubscribe mechanism

You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly.

Disclosure to Third Parties

We do not sell or share your personal information with third parties for their own marketing purposes. Information is only shared with third parties in the following circumstances:

Service providers: we share information with trusted partners who assist us in operating our business, such as payment processors, shipping carriers, and analytics providers. These parties are contractually obligated to protect your data.
Legal requirements: we may disclose information if required to do so by law or in response to a valid legal request.

International Data Transfers

As Norrvale is operated from Hong Kong, your personal information may be transferred to and processed in Hong Kong or other jurisdictions outside of Canada. By using our services, you acknowledge that your data may be transferred internationally. We take reasonable steps to ensure your information is treated securely and in accordance with this privacy policy, regardless of where it is processed.

How Do We Protect Your Data?

We use appropriate technical and organisational security measures to protect your personal information against unauthorised access, misuse, or loss. Access to data is only granted to personnel who require it for their work. Our website is secured with SSL encryption to protect data transmitted between your browser and our servers.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. Order and transaction records are retained for a minimum of 7 years for accounting and tax purposes. You may request deletion of your account and personal data at any time, subject to our legal retention obligations.

Cookies

We use cookies to improve user experience and collect marketing information. Cookies are small files stored in your browser that help us understand how our website is used. We use the following types of cookies:

Essential cookies: required for the website to function properly (e.g. shopping cart, checkout)
Analytics cookies: help us understand how visitors interact with our website
Marketing cookies: used to deliver relevant advertisements and track campaign performance

You can delete or manage cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Your Rights

Under Canadian privacy law, you have the right to:

Access the personal information we hold about you
Correct any inaccurate or incomplete information
Request deletion of your personal data (subject to legal retention requirements)
Withdraw consent for the collection, use, or disclosure of your information
File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, please contact us at info@norrvale.com. We will respond to your request within 30 days.

Changes to This Privacy Policy

We reserve the right to update this privacy policy at any time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy regularly.