Legal
Privacy Policy
This policy explains what personal data Noralia Commerce Ltd collects when you use this website or leave a request, why we collect it, and what rights you have.
Last updated: 14 September 2026
1. Who we are
Noralia Commerce Ltd, Piccadilly Business Centre, Aldow Enterprise Park, Manchester, M12 6AE, United Kingdom, is the data controller for the personal data described in this policy. You can reach us at business@noralia-commerce.ltd.
2. What we collect
- Details you submit through a request form: name, email address, phone number, product interest and message.
- Correspondence you send us by email or over the phone.
- Basic technical data generated by your browser, such as IP address and device type.
3. Why we use it
- To respond to your request and advise you on products — our legitimate interest and, where relevant, steps taken at your request before entering a contract.
- To fulfil and deliver an order you confirm with us — performance of a contract.
- To meet legal, accounting and product-safety obligations — legal obligation.
We do not sell your data and we do not send marketing messages unless you ask us to.
4. Who we share it with
Only with service providers who help us operate: our website and database hosting provider, our email provider, delivery carriers and, where required, professional advisers or public authorities. They act on our instructions and may not use your data for their own purposes.
5. How long we keep it
Enquiries that do not lead to an order are deleted within 24 months. Records relating to a completed order are kept for six years to satisfy UK tax and accounting requirements.
6. Your rights
Under UK GDPR you may request access to your data, correction, erasure, restriction or portability, and you may object to processing based on legitimate interests. Email business@noralia-commerce.ltd and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
7. Security and international transfers
Data is stored on access-controlled, encrypted infrastructure. Where a provider processes data outside the UK, we rely on adequacy regulations or standard contractual clauses.
8. Changes
We may update this policy; the date at the top always shows the current version.
