Privacy policy

Last updated: 3 September 2026

NORA Collective operates this website and online store, including our products, content, features and services.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, who we may share it with, and the rights you have in relation to your information.

By using our website or purchasing from NORA Collective, you acknowledge that you have read this Privacy Policy.

NORA Collective is the organisation responsible for your personal information when you use our website, purchase our products or contact us.

If you have any questions about this Privacy Policy or how we use your information, please contact us:

Email: hello@nora-collective.co.uk

NORA Collective

Hagley, Worcestershire, UK

For the purposes of applicable UK data protection law, NORA Collective is the data controller of your personal information.

The information we collect depends on how you interact with NORA.

We may collect:

- your name;

- email address;

- billing address;

- delivery address;

- telephone number, where provided;

- details of the products you purchase;

- order number and transaction details;

- payment and payment-status information; and

- information relating to returns, refunds or other enquiries about your order.

Payment card details are processed through our payment providers. We do not store your full payment card details ourselves.

If you choose to create a customer account, we may collect information such as your name, email address, address and account information needed to provide and manage your account.

If you contact NORA, including through our website contact form, we collect the information you choose to provide, such as your name, email address and the contents of your message.

When you visit our website, certain technical information may be collected automatically, including information about your device, browser, IP address and how you interact with the website.

This information may be collected through cookies and similar technologies used by Shopify and the website.

3. How we use your personal information

We use your personal information only where we have a lawful basis to do so.

To process and fulfil your orders

We use your information to:

- process and manage your order;

- take and process payment;

- provide order confirmations and other necessary transactional communications;

- arrange delivery or local collection;

- provide customer support;

- process returns and refunds; and

- manage your customer account where applicable.

Lawful basis: Performance of a contract with you.

Some information may also be processed because we have a legal obligation to retain certain business and financial records.

Lawful basis: Legal obligation.

We use information you provide when you contact us to respond to enquiries, provide customer service and deal with issues relating to our products or services.

Lawful basis: Legitimate interests, where necessary to respond to and manage communications with customers and potential customers.

To keep our website and services secure

We may use technical and account information to help maintain the security of our website, prevent fraud, protect our systems and investigate suspected misuse.

Lawful basis: Legitimate interests.

We may process and retain personal information where necessary to comply with applicable laws, regulations, legal proceedings or requests from lawful authorities.

Lawful basis: Legal obligation.

Our website uses cookies and similar technologies, including technologies provided by Shopify, to operate the website, maintain essential functionality and, where applicable, remember your preferences.

Where cookies or similar technologies are not strictly necessary, we will ask for your consent where required by law.

You can manage your cookie choices through the cookie banner displayed on our website.

We do not currently operate a marketing mailing list.

We do not currently send marketing communications by SMS or WhatsApp.

If this changes in the future, we will update this Privacy Policy and obtain any consent required by law before sending marketing communications where consent is required.

You may receive necessary non-marketing communications relating to an order or account, such as order confirmations, delivery updates or responses to enquiries.

We do not sell your personal information.

We may share personal information with organisations that need it to provide services to NORA Collective or to fulfil our legal obligations.

These may include:

- Shopify, which provides the ecommerce platform on which our website and store operate;

- payment service providers, where necessary to process payments;

- delivery and courier providers, where necessary to deliver your order;

- technology and hosting providers that help us operate our website and services; and

- professional advisers, legal advisers or authorities where necessary to comply with legal obligations or protect our rights.

These organisations should only process your information where necessary for the relevant service or lawful purpose.

Shopify may also process information about your use of our store in accordance with its own privacy policies and terms.

Our online store is powered by Shopify.

Shopify processes personal information relating to your use of our store in order to provide its ecommerce, hosting, security, payment and related services.

Shopify may also process information in connection with its own services and technologies. Shopify's processing may include information collected through cookies and similar technologies, subject to your choices and applicable law.

You can find more information about how Shopify processes personal information in Shopify's Consumer Privacy Policy.

Our website may contain links to third-party websites or social media platforms, including Instagram and TikTok.

If you follow a link to a third-party website, that website will have its own privacy policy and terms. We are not responsible for how third parties collect or use your information.

Our social media pages and accounts are also operated by third-party platforms. Any information you choose to share directly with those platforms is subject to their own privacy policies.

We keep personal information only for as long as we reasonably need it for the purpose for which it was collected.

How long information is retained depends on factors including:

- whether you have an active customer account;

- whether we need the information to fulfil or manage an order;

- whether we need it to deal with a return, refund, complaint or dispute;

- whether we are legally required to retain it; and

- whether it is needed to establish, exercise or defend legal claims.

When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.

We take reasonable and appropriate steps to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no online service or method of transmitting information over the internet can be guaranteed to be completely secure.

Under UK data protection law, you may have rights in relation to your personal information, depending on the circumstances and the lawful basis on which we process it.

These may include the right to:

- Access the personal information we hold about you;

- Correct inaccurate or incomplete information;

- Request erasure of your personal information in certain circumstances;

- Request restriction of processing in certain circumstances;

- Object to certain processing, including processing based on legitimate interests; and

- Data portability in certain circumstances where the right applies.

Where we rely on your consent to process personal information, you can withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew your consent.

Some rights are subject to exceptions and limitations under data protection law.

To exercise your rights, please contact:

We may need to verify your identity before responding to a request.

We will respond to valid requests within the timeframe required by applicable law.

If you have concerns about how we use your personal information, please contact us first at:

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

You can find information about making a complaint on the ICO's website.

Some of the organisations we use to operate NORA Collective, including Shopify and certain service providers, may process personal information outside the UK.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

Our website and online store are intended for general use and are not specifically directed at children.

We do not knowingly collect personal information from children for the purpose of creating customer accounts or making purchases.

If you believe that a child has provided us with personal information, please contact us at hello@nora-collective.co.uk and we will consider the appropriate action.

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, legal requirements or the way we process personal information.

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

If you have any questions about this Privacy Policy or how NORA Collective handles your personal information, please contact us:

Hagley, Worcestershire, UK

No One Runs Alone ∞