Updated November 13, 2026
This notice describes the website’s current data practices. Operator details, a dedicated privacy contact and the retention schedule are being finalised.
This notice explains what information the Norden website records, how it is used and the choices available to you.
Information we collect How information is used Cookies & browser storage Access & sharing How long information is kept Your choices Security & updates
Information we collect
Account details: your username, email address, password credential, name and any addresses or telephone number you enter. WordPress handles password authentication; passwords are not displayed as readable account data.
Shopping and orders: chosen products, variations, quantities, billing and delivery details, delivery method, totals, payment-method label and order status.
Technical information: the website can record IP addresses, browser information, request times, errors and security-related events. Order records can include an IP address and browser user-agent.
Visit source: order attribution can record a referring website, entry page, campaign parameters and session information and associate them with an order.
Online card payments are not connected. Do not enter full card numbers, card security codes, identity documents or other sensitive information into account fields or messages.
How information is used
Information supports the shopping bag, delivery calculations, account sign-in, order review, access control and troubleshooting. Visit-source information supports order attribution.
WooCommerce usage-data sharing is disabled. No advertising pixel or email-marketing service is connected. Email delivery is currently disabled; the newsletter form does not save or transmit email addresses.
Cookies & browser storage
Shopping cookies: WooCommerce uses cookies such as woocommerce_items_in_cart, woocommerce_cart_hash and wp_woocommerce_session_* to recognise a session and retrieve its bag. The session identifier normally lasts up to two days; bag-indicator cookies are session cookies.
Sign-in cookies: WordPress authentication cookies support account access. Their lifetime depends on the login settings and whether a persistent sign-in option is used.
Order-source cookies: the attribution feature uses sbjs_* cookies for visit source, campaign and session information. These are separate from the cookies needed for shopping and sign-in.
Browser storage: WooCommerce can cache shopping data in browser storage. The website also remembers collection filters and your position in the current browser tab so that you can return from a product to the same place.
You can inspect, delete or block cookies and browser storage through your browser. Blocking shopping or authentication cookies may prevent the bag or account from working. There is currently no cookie-preference panel.
Access & sharing
Account and order data is stored in the website’s WordPress and WooCommerce database and may be included in private backups. Authorised administrators can access it for the purposes described above. Keep your account private; anyone using a shared sign-in may see its saved details and orders.
No card processor, delivery-carrier integration or email-marketing recipient is connected. This notice must be updated if a new provider is introduced or the way information is shared changes.
How long information is kept
No automatic deletion schedule is currently configured for accounts or orders. Records remain until an authorised administrator removes them. Backups may contain earlier copies until those backups are removed. Cookies and browser storage have separate lifetimes and can be cleared through your browser.
The retention schedule for accounts, orders, support records, logs and backups is being finalised. A privacy request does not automatically remove records that must lawfully be retained.
Your choices
You can review orders and edit supported account or address fields through My account. A dedicated privacy-request channel is not yet available.
Depending on applicable law, you may have rights to access, correct, erase or receive a copy of data, object to or restrict certain uses, withdraw consent where it is the basis for a use, or complain to a relevant authority. Requests can require proportionate identity verification and are subject to applicable exceptions. There is currently no automated export or deletion request form.
Security & updates
Account permissions and order-ownership checks restrict access to order details. No security measure can guarantee that information will never be lost or accessed improperly.
This notice must be updated when the website’s data practices change. Operator details, service providers and a monitored privacy contact are being finalised.