Integritetspolicy
Last updated: 2 October 2026
Who is responsible for your data
The controller for NORVEXANA's store operations is BEYOND RIDGE COMMERCE LTD. You may direct privacy enquiries and rights requests to NORVEXANA.
Information we collect and its sources
We process information you provide when purchasing, contacting support or subscribing to communications, including your name, delivery and billing addresses, email, telephone number, purchased products, amounts paid, correspondence and preferences.
We receive transaction information and payment status from payment providers, and delivery information from carriers. The payment information available to us depends on your payment method and the provider. We do not request authentication codes by email.
We may also collect IP addresses, device information, technical logs and browsing information through the technologies described in the cookies section below.
Purposes and legal bases
We use information necessary to take steps at your request before a purchase and to perform the contract, including payment, fulfilment, delivery, returns and customer support.
We process information to meet legal obligations, including applicable accounting, invoicing and recordkeeping requirements.
Where applicable, we rely on legitimate interests for security, fraud prevention, evidence preservation and legal claims after assessing the impact on your rights. Advertising, cookies and promotional communications rely on consent where required or another genuinely applicable and documented legal basis. Buying from us does not automatically constitute consent to marketing.
Who receives information
We share information necessary for the relevant purpose with Shopify, payment providers, warehouses and fulfilment operators, carriers, support providers, hosting providers and other technology suppliers. We may share relevant information with accountants, advisers, authorities or payment providers where necessary and lawful for compliance or dispute handling.
Marketing and analytics providers receive information according to applicable legal bases and your choices. Some providers act as independent controllers for their own services.
International transfers
Information may be processed in the United Kingdom and other countries where service providers or fulfilment operations are located, including Asia where necessary for your order. Applicable international-transfer requirements must be satisfied; accepting store terms is not itself a valid transfer safeguard.
Retention
We retain personal information for the period needed to fulfil orders, provide support and administer returns; for applicable statutory accounting and recordkeeping periods; and, where necessary, for the duration of claims and applicable limitation periods. Marketing information is retained while a lawful basis exists, subject to withdrawal or objection. Security information is retained for the period necessary to investigate and prevent relevant incidents. Information is then deleted or anonymised unless continued retention is required by law.
A minimal suppression record may be kept to honour an opt-out. Where records are required for a legal obligation or an actual dispute, their use is restricted appropriately.
Your rights
Depending on applicable law, you may request access, correction, erasure, restriction, portability and objection. You may withdraw consent at any time without affecting lawful processing before withdrawal, and object to direct marketing.
Contact NORVEXANA to exercise your rights. We may request proportionate information to verify your identity and respond within applicable legal deadlines. You may complain to the UK Information Commissioner's Office or the competent data-protection authority in your country.
Required information
Information necessary for identification, payment and delivery must be provided for us to fulfil an order. Marketing information is optional. Where applicable, you may request information about automated decisions affecting you and exercise the associated rights, including human review when legally required.
Cookies and similar technologies
Cookies and similar technologies may be used for store functionality, security, preferences, analytics and advertising. The technologies actually deployed determine the applicable information and consent requirements.
Where required, non-essential technologies must not operate without valid consent. You have the right to accept, reject or select optional categories and to withdraw consent. Continuing to browse or completing a purchase does not constitute consent to non-essential cookies.
Strictly necessary cookies may operate without consent where permitted. Browser controls can also be used to restrict or delete cookies, although this may affect functionality. Legally required information about the technologies in use, and the applicable consent and opt-out controls, must be provided when those technologies are deployed.
Email SMS and other communications
Messages about orders, delivery, security and support are service communications. Promotional messages are sent only with a valid legal basis and in accordance with the requirements of the relevant market.
You can unsubscribe from promotional emails using their unsubscribe link or by contacting NORVEXANA. You may also request that promotional SMS messages stop. Opting out of marketing does not prevent communications necessary for an existing order.
Security children and changes
We apply technical and organisational measures appropriate to the risks. Please protect your account access and notify us of relevant security concerns. The store is not intended to deliberately collect children's personal information; enquiries about children's information can be sent to NORVEXANA.
Material changes to this notice will be communicated appropriately. New uses of personal information require appropriate notice and a valid legal basis; we do not assume retroactive consent.