Privacy policy
Privacy Policy – Nora Janne
Last updated: 20 October 2026
- Who are we?
Nora Janne
Company number: Available on request
Email: support@norajanne.nl
Nora Janne is the data controller for the personal data processed through the Nora Janne online shop, as described in this privacy policy.
Nora Janne uses Shopify as its e-commerce platform. Shopify processes personal data in order to provide, among other things, the online shop, checkout, customer accounts and other Shopify services. For certain purposes of its own, Shopify may itself act as a data controller. You can find more information about this in Shopify's privacy policy.
- Who does this privacy policy apply to?
This privacy policy applies to visitors and customers of the Nora Janne online shop, regardless of whether they create an account, place an order, contact us, sign up for marketing communications or use our website in any other way.
We currently deliver to customers in Belgium, the Netherlands, France, Spain and Ireland. If we extend our sales activities to other countries, additional legal rules may apply.
- What personal data do we collect?
Depending on how you use our online shop, we may process the following personal data, among others:
First name and surname
Billing and delivery address
Email address
Phone number, if you provide it
Account details and preferences
Order and transaction details
Products you view, add to your basket or buy
Information about returns, refunds and exchanges
Communications you have with us
Reviews and other information you submit voluntarily
IP address
Browser, device and technical data
Information about your use of our website
Cookie and similar tracking data, to the extent that you have given consent where this is required by law
Payment details are processed by the payment provider you choose. We only receive and process the data needed to handle the payment and the order.
- Where do we get personal data from?
We may obtain personal data:
directly from you;
automatically when you use our website;
through cookies and similar technologies;
through Shopify and integrated Shopify apps;
through payment providers;
through fulfilment, shipping and logistics service providers;
through review and other services you use in connection with our online shop.
- Why do we process personal data and on what legal basis?
We only process personal data where there is a valid legal basis for doing so.
Orders and delivery
We process your name, contact details, address details, order details and relevant payment information in order to:
process your order;
process your payment;
have your order delivered;
handle returns and refunds;
keep you informed about your order.
Legal basis: necessary for the performance of the contract with you.
Customer accounts
When you create a customer account, we process the data needed to create, secure and manage your account.
Legal basis: performance of the contract and, where applicable, our legitimate interest in the secure operation of our online shop.
Customer service
When you contact us by email or through a contact form, we process the information you provide in order to answer your question and provide our customer service.
Legal basis: performance of the contract, pre-contractual measures or our legitimate interest in handling questions from visitors and customers.
Legal obligations
We may process and retain personal data where this is necessary to comply with legal obligations, for example in the areas of accounting, tax, consumer law or other legal obligations.
Legal basis: legal obligation.
Security and fraud prevention
We may process data to secure our online shop, customers and payment processes, to prevent fraud, to investigate abuse and to protect our systems.
Legal basis: our legitimate interest in the security of our business, systems and customers and, where applicable, a legal obligation.
Marketing
When you sign up for our newsletter or other marketing communications, we may use your email address and relevant preferences to send you marketing communications.
Legal basis: consent, where consent is required by law.
You can withdraw your consent at any time using the unsubscribe option in the communication concerned.
Abandoned checkout
If you enter details during the checkout process but do not complete your order, we may send you a reminder about your unfinished order, to the extent permitted by law and where the required consent or another valid legal basis is in place.
Legal basis: depending on the circumstances, consent, the taking of pre-contractual measures or another applicable legal basis.
Reviews
When you voluntarily submit a review, we may process and publish the data you provide with it in order to display product reviews and improve the shopping experience.
Legal basis: performance of the service for which you submit the review and, where applicable, consent.
Analytics and advertising
Among other things, we use the Meta Pixel to measure the use of our online shop and the performance of our marketing and, where consent is required for this, to support advertising and marketing activities.
Non-essential cookies, pixels and similar tracking technologies are only used after the required consent has been obtained.
Legal basis: consent for non-essential cookies and tracking technologies where this is required by law; a different legal basis may apply to strictly necessary technologies.
- Who do we share personal data with?
We do not sell your personal data.
We may share personal data with third parties where this is necessary to run our online shop, fulfil orders, process payments, provide customer service, prevent fraud, carry out marketing or comply with legal obligations.
This may include, among others:
Shopify, for hosting and managing the online shop, checkout, accounts, orders and related services;
Mollie, for processing payments;
review, cart, bundle, search, fulfilment, shipping, fraud prevention and other Shopify apps that we use;
marketing, analytics and advertising partners, where there is a valid legal basis for doing so;
service providers that carry out technical or operational services on our behalf;
fulfilment and logistics service providers needed to deliver orders to customers;
government authorities or other parties where we are legally required to do so.
To fulfil orders, the necessary customer and order details may be shared with our fulfilment partner CJdropshipping, which uses this data to process orders and ship them directly to the customer.
We aim to share personal data only to the extent necessary for the purpose concerned.
- Shopify and external apps
Our online shop uses Shopify and various Shopify apps and integrations. Depending on their function, these may have access to certain data needed to provide their services.
The features we use include, among others:
basket and bundle features;
product search;
product variants;
reviews;
shipping and fulfilment;
fraud prevention;
marketing;
cookies and consent management;
translation;
automation;
analytics and advertising measurement.
Which data a specific service processes depends on the feature being used.
External service providers process personal data under their own privacy terms where they act as a data controller themselves.
- Cookies and tracking technologies
Our online shop uses cookies and similar technologies.
We use:
Strictly necessary cookies
These are necessary for the online shop to work, for example for shopping baskets, checkout, security and remembering privacy preferences.
Analytics cookies
These may be used to understand how our online shop is used and to improve our website. They are only used where consent is required for this and that consent has been obtained.
Marketing and advertising cookies
These may be used to measure marketing campaigns and to enable relevant advertising. We ask for your consent for this where required by law.
Among other things, we currently use the Meta Pixel. Other analytics or advertising technologies may be added in the future. Where consent is required for this, these technologies will only be used once the required consent has been obtained.
You can manage your cookie preferences through our cookie banner and the available privacy settings.
For a detailed overview of the individual cookies, their purposes, retention periods and the third parties involved, please refer to our separate cookie policy and the cookie settings on our website.
- Marketing communications
We may send marketing communications where you have given consent for this or where another legal exception applies.
These may include, for example:
newsletters;
product information;
offers;
promotions;
personalised marketing communications.
You can unsubscribe free of charge at any time using the unsubscribe link in marketing emails.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Transactional communications, such as information about an order, payment, delivery, return or customer account, may still be sent after you unsubscribe from marketing communications where this is necessary.
Transactional communications about an ongoing or completed order, payment, delivery, return or customer account remain possible at all times, even if you have unsubscribed from marketing communications, and are not marketing communications within the meaning of this section.
- How long do we keep personal data?
We do not keep personal data for longer than necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
As general principles:
Order and financial data: for as long as necessary to perform the contract and for as long as statutory retention obligations apply.
Account data: for as long as your account is active, unless a longer retention period is required by law.
Customer service data: for as long as necessary to handle the question or dispute and for a reasonable period afterwards.
Marketing data: until you withdraw your consent or unsubscribe, unless another legal basis applies.
Cookie and tracking data: in line with the retention periods of the cookies and services concerned.
Data needed for legal obligations: for as long as the applicable statutory retention period requires.
When data is no longer necessary, it is deleted or anonymised, unless further retention is required by law.
- International transfers
Because we use international service providers, personal data may be processed outside the European Economic Area (EEA).
This may happen, for example, when a service provider or fulfilment partner is based outside the EEA.
Where personal data is transferred outside the EEA, we ensure that a valid legal transfer mechanism and appropriate safeguards are applied where required by law, such as an adequacy decision or appropriate contractual safeguards.
- Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
Examples include secure connections, access restrictions and security measures provided by our technical service providers.
However, no method of electronic transmission or storage can guarantee absolute security.
- Your privacy rights
Depending on the circumstances and any legal exceptions, under the GDPR you have, among other things, the right to:
request access to your personal data;
have incorrect data corrected;
request the erasure of your data;
request the restriction of processing;
have your data transferred where the right to data portability applies;
object to certain processing;
object to direct marketing;
withdraw your consent to processing for which consent is the legal basis.
You can submit a request via:
support@norajanne.nl
We may ask you to provide sufficient information to verify your identity before we handle your request.
In principle, we respond to requests within one month of receiving your request and any identity check we have asked for. Taking into account the complexity or number of requests, we may extend this period by up to two further months, in which case we will inform you of this within the first month.
- Automated decision-making and profiling
We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
External service providers, such as payment or fraud prevention services, may however carry out automated checks as part of their own services. Such processing may be subject to their own privacy terms.
- Children's data
Our online shop is not specifically aimed at children.
We do not knowingly collect personal data from children where this is not permitted by law.
If you believe that a child has provided us with personal data without the required consent, you can contact us so that we can assess the situation and take appropriate measures where necessary.
- Complaints
If you have a complaint about the way we handle your personal data, you can first contact us at:
support@norajanne.nl
You also have the right to lodge a complaint with the competent supervisory authority.
- Changes to this privacy policy
We may amend this privacy policy from time to time, for example when our services, the apps we use, technologies or legal obligations change.
The most recent version is always published on this page.
The top of this privacy policy shows when the policy was last updated.
- Contact
If you have any questions about this privacy policy, our processing of personal data or exercising your privacy rights, you can contact:
Nora Janne
Company number: Available on request
Email: support@norajanne.nl