Privacy Policy

Last updated: 5 September 2026

Norde ("Norde", "we", "us", or "our") operates the store and website at nordewater.com, including all related information, content, features, tools, products and services (the "Services"). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.

1. Personal information we collect or process

When we use the term "personal information," we mean information that identifies or can reasonably be linked to you. Depending on how you interact with the Services, we may collect or process the following categories:

Contact details — your name, billing address, shipping address, phone number, and email address.
Payment information — payment card or account details, transaction details, form of payment, and payment confirmations. Card payments are processed by our payment providers; we do not store full card numbers.
Account information — username, password, and your saved preferences and settings.
Transaction information — items you view, add to your cart or wishlist, purchase, return, exchange or cancel, and your order history, including subscription orders for replacement cartridges.
Communications with us — the information you include when you contact our support team, leave a product review, or respond to a survey.
Device information — information about your device, browser, or network connection, your IP address, and other unique identifiers.
Usage information — how and when you interact with or navigate the Services.

2. Where we collect personal information from

Directly from you — when you create an account, place an order, subscribe, contact us, or otherwise provide information.
Automatically through the Services — from your device when you use or visit the Services, including through cookies and similar technologies.
From our service providers — such as our payment processors, shipping carriers, analytics providers, and customer support tools.
From our partners or other third parties — such as advertising and marketing partners.

3. Cookies and similar technologies

We use cookies and similar technologies to operate and secure our website, remember your preferences and cart, understand how the Services are used, and support marketing. Where required by law, we ask for your consent through a cookie banner when you first visit, and you can change your choices at any time through the cookie preferences link on our site. You can also control cookies through your browser settings.

4. How we use your personal information

Provide, tailor, and improve the Services — to perform our contract with you, process payments, fulfil and ship orders, manage subscriptions, handle returns and exchanges, maintain your account, enable reviews, provide customer support, and personalise your shopping experience.
Marketing and advertising — to send you marketing communications by email (where permitted) and to show you relevant online advertising. You can opt out at any time.
Security and fraud prevention — to authenticate your account, secure the Services, and detect, investigate, and act on fraudulent, illegal, or malicious activity.
Communicating with you — to respond to your enquiries and maintain our business relationship with you.
Legal and compliance — to comply with applicable law, respond to valid legal process, and enforce our terms and policies.

5. Legal bases for processing (UK and EEA visitors)

Where UK or EU data protection law applies, we rely on the following legal bases: performance of a contract (to process and deliver your orders), legitimate interests (to secure and improve the Services, prevent fraud, and market to existing customers), consent (for non-essential cookies and certain marketing), and legal obligation (to keep tax and transaction records).

6. How we disclose personal information

We may disclose personal information in the following circumstances:

With Shopify and with vendors and third parties who perform services on our behalf, such as payment processing, order fulfilment and shipping, data analytics, customer support, and cloud hosting.
With advertising and marketing partners, who use the information in line with their own privacy notices. Depending on where you live, you may have the right to opt out of this sharing.
When you direct or consent to disclosure, such as to arrange shipping or when you use a social media or login integration.
With our affiliates or others within our corporate group.
In connection with a corporate transaction such as a merger, financing, or acquisition, or to comply with legal obligations, enforce our terms, or protect our rights and the rights of our users.

We do not sell your personal information for money.

7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit will be transmitted to and shared with Shopify and with third parties that may be located in countries other than where you live. To learn more about how Shopify uses your personal information and any rights you may have, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

8. Third-party websites and links

The Services may link to websites or platforms operated by third parties. We are not responsible for the privacy or security of those sites or the accuracy of information on them. We recommend you review their privacy and security policies before providing information.

9. Children's data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you believe a child has provided us with personal information, please contact us using the details below and we will delete it.

10. Security and retention

No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Information you send to us may not be secure while in transit, and we recommend you do not use insecure channels to send us sensitive information. We retain personal information for as long as needed to provide the Services, maintain your account, comply with our legal obligations (including tax and accounting requirements), resolve disputes, and enforce our agreements.

11. Your rights and choices

Depending on where you live, you may have some or all of the following rights in relation to your personal information. These rights are not absolute and may not apply in every case.

Right to access / know — to request access to the personal information we hold about you.
Right to delete — to request that we delete personal information we hold about you.
Right to correct — to request that we correct inaccurate personal information.
Right to portability — to receive a copy of your personal information and, where applicable, ask us to transfer it to a third party.
Right to opt out of marketing — you can unsubscribe from marketing emails at any time using the link in our emails. We may still send you non-promotional messages about your account or orders.
Objection and restriction (UK and EEA) — to ask us to stop or restrict certain processing.
Withdrawal of consent (UK and EEA) — where we rely on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

12. Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below. If you are in the UK, you have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk). If you are in the EEA, you may contact your local data protection authority.

13. International transfers

We may transfer, store, and process your personal information outside the country where you live, including in countries that may not provide the same level of data protection. Where we transfer personal information out of the UK or EEA, we rely on recognised safeguards such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, unless the destination country has been found to provide an adequate level of protection.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised policy on this page, update the "Last updated" date, and provide notice where required by law.