Privacy Policy
Privacy Policy
Last updated: June 2026
In accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), NORULI informs Users about the processing of their personal data through the Website https://noruli.com.
1. Data Controller
The data controller is NORULI. Full identification details are available in the Legal Notice of this website. For any privacy-related queries, you can contact us at info@noruli.com.
2. Data we collect and purpose
NORULI only processes the data necessary for each purpose:
| Data | Purpose | Legal basis |
|---|---|---|
| Name, address, email, phone | Order management and shipping | Contract execution |
| Customer service | Legitimate interest/consent | |
| Billing information | Tax and legal obligations | Legal obligation |
| Browsing data (cookies) | Statistical analysis and advertising | Consent |
No specially protected data is processed, nor are any automated decisions with legal effect on the User made.
3. Data recipients
The data will not be transferred to third parties except in the following cases:
- Transport and logistics companies, with the necessary data for delivery.
- Payment gateways (PayPal, Shopify Payments or others) for secure transaction management.
- Advertising platforms (Meta) when the User has consented to marketing cookies.
- Legal obligation, when required by applicable regulations.
All providers with access to personal data are subject to data processing agreements with the guarantees required by the GDPR.
4. International Transfers
Some technical or logistical providers may be located outside the European Economic Area. In such cases, data transfers are carried out under the appropriate safeguards provided for in the GDPR, such as the standard contractual clauses approved by the European Commission.
5. Storage period
- Order and billing data: 5 years (tax obligation).
- Customer service inquiries: 1 year from resolution.
- Browsing data: as indicated in the Cookie Policy.
6. User Rights
The User may exercise the following rights recognized by the GDPR at any time:
- Access, rectification and deletion of your data.
- Limitation or opposition to treatment.
- Data portability in structured format.
- Revocation of consent given.
To exercise these rights, send a request to info@noruli.com indiWhen you specify the right you wish to exercise, we may request verification of your identity.
You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe that the treatment does not comply with the regulations.
7. Security
NORULI applies the necessary technical and organizational measures to guarantee the security of personal data and prevent its loss, alteration or unauthorized access.
© 2026, Noruli