Privacy Policy

Last updated: 22 September 2026

This Privacy Policy explains how Nora Galway collects, uses, and protects your personal information when you visit our website, place an order, or use our services.

We value your privacy and are committed to handling your personal information responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Personal Information We Collect

When you visit our website, place an order, create an account, or contact us, we may collect the following information:

• First and last name

• Billing and shipping addresses

• Email address and phone number

• Payment information, securely processed by third-party payment providers

• IP address and device information

• Browser type and operating system

• Order history and transaction details

• Information about how you interact with our website, including pages visited and browsing activity

We collect and process personal information only where necessary for our services or another legitimate and lawful purpose.

2. How We Use Your Information

We use your personal information to:

• Process, fulfil, and deliver your orders.

• Provide customer support and respond to your enquiries.

• Send order confirmations, shipping updates, and other service-related communications.

• Manage returns, exchanges, and refunds.

• Improve our website, products, and shopping experience.

• Prevent fraudulent transactions and maintain website security.

• Comply with applicable legal, accounting, and tax obligations.

• Send marketing communications where you have provided consent or where otherwise permitted by law.

We will not use your personal information for unrelated purposes without an appropriate legal basis.

3. Legal Basis for Processing

We process your personal information under the following legal bases, depending on the circumstances:

• Contractual necessity: To process your orders and provide the services you request.

• Legal obligations: To comply with applicable laws and regulatory requirements.

• Legitimate interests: To maintain website security, prevent fraud, and improve our services, where these interests are not overridden by your rights.

• Consent: For certain marketing communications, non-essential cookies, and other activities requiring your permission.

Where processing is based on your consent, you may withdraw it at any time.

4. Sharing Your Information

We may share your personal information with trusted third parties where necessary to operate our business and provide our services.

These may include:

• Payment service providers

• Shipping and delivery partners

• Suppliers and order fulfilment partners

• Website hosting and IT service providers

• Analytics and advertising partners, where applicable and permitted by law

We share only the information reasonably necessary for the relevant purpose and require service providers acting on our behalf to protect your personal information in accordance with applicable data protection requirements.

We do not sell your personal information to third parties.

We may also disclose information where required by law or in response to a valid request from a competent authority.

International Data Transfers

Some of our service providers or fulfilment partners may operate outside the European Economic Area (EEA).

Where your personal information is transferred internationally, we take steps to ensure that such transfers comply with applicable data protection laws, including the use of appropriate safeguards where required.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including processing orders, providing customer support, resolving disputes, and meeting legal, accounting, or tax obligations.

When your information is no longer required, we will securely delete or anonymise it, unless we are legally required to retain it.

6. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing and shopping experience.

These technologies help us to:

• Ensure the website functions correctly.

• Remember your shopping cart and preferences.

• Understand website traffic and visitor behaviour.

• Improve our services and marketing activities.

We request your consent before using non-essential cookies and tracking technologies where required by law.

You can manage or withdraw your cookie preferences through the consent settings available on our website. You may also control cookies through your browser settings.

Please note that disabling certain cookies may affect some website features.

7. Your Privacy Rights

Under applicable data protection laws, including the GDPR, you have certain rights regarding your personal information.

These may include:

• Right of access: Request a copy of the personal information we hold about you.

• Right to rectification: Request corrections to inaccurate or incomplete information.

• Right to erasure: Request the deletion of your personal information in certain circumstances.

• Right to restriction: Request that we limit the processing of your information.

• Right to object: Object to certain types of processing, including direct marketing.

• Right to data portability: Request your information in a structured, commonly used, and machine-readable format, where applicable.

• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details below.

We will respond to your request within the time limits required by applicable law.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Ireland, you can contact the Data Protection Commission at www.dataprotection.ie.

8. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Nora Galway

Email: info@nora-galway.com