Privacy policy

Privacy Policy

Last updated: 2 October 2026.

Who is responsible for your data

Norwell (norwelluk.shop) is operated by 65.125.491 MARIA GABRIELA DOS SANTOS LIMA, an individual entrepreneur registered in Brazil, CNPJ 65.125.491/0001-42. Registered address: R 1 Unidade 203, No. 5, Parque Atheneu, Goiânia, Goiás, 74890-030, Brazil. Email: hello@norwelluk.shop. Telephone: +55 62 9701-2976 (international charges may apply).

This policy explains how we handle personal information when you visit norwelluk.shop, buy from Norwell or contact us. Norwell is the controller for the customer information we use to run this store. Our store is hosted by Shopify.

Information we collect

  • Contact and delivery details, including your name, email, telephone number, billing and shipping addresses.
  • Order and transaction information, including products, amounts, payment status, delivery, cancellations, returns and refunds.
  • Account information and preferences if you create an account.
  • Messages and information you provide to customer support.
  • Technical and usage information, such as IP address, browser, device, cookies and interactions with the store.

We receive information directly from you, through the store and its technologies, and from service providers involved in payments, hosting and delivery. Payment card information is submitted through checkout to payment service providers. Do not send full card details to our support email or telephone.

How and why we use information

We use customer details to process and deliver orders, arrange returns and refunds, provide support and manage accounts. Where UK data protection law applies, this is normally necessary to perform a contract or take steps at your request before a contract. We use transaction records to meet legal accounting and compliance duties. We use proportionate technical and transaction information for legitimate interests in store security, fraud prevention and service improvement, subject to your rights. Where consent is required, including for relevant marketing or non-essential cookies, processing depends on that consent. You may withdraw consent without affecting earlier lawful processing.

Sharing and Shopify

Information is shared as needed with Shopify, payment service providers, delivery and fulfilment providers, and providers supporting our store. We may disclose information when legally required or to establish or defend legal claims. Marketing or analytics services, where enabled, may receive relevant technical or usage information subject to applicable consent choices. We do not disclose customer information for unrelated purposes merely because an order has been placed.

Shopify processes information to host and operate the store and may act as an independent controller for some of its services. Shopify Network Intelligence is enabled: Shopify may combine information about interactions with this store, other merchants and Shopify to improve services, advertising and personalisation, subject to applicable privacy choices. Customer data hosting is currently in the United States. See Shopify’s Privacy Policy and Shopify’s privacy portal for its practices and available choices.

Cookies and marketing choices

Essential cookies support shopping, checkout, security and account functions. Where enabled, analytics and advertising technologies help measure or personalise the store. Use the cookie preference controls provided on the website to manage optional technologies, and your browser settings to manage cookies. Blocking essential cookies may affect store functions. You may unsubscribe from promotional emails using the link in those messages or by contacting us. Order and service messages may still be sent.

International processing

Norwell operates in Brazil, and Shopify and other service providers may process data in other countries. Where UK law requires safeguards for an international transfer, appropriate recognised safeguards or a lawful exception must apply. Contact us for information about safeguards relevant to your data.

Retention and security

We retain information for as long as reasonably needed for orders, customer support, returns, legal recordkeeping, fraud prevention and disputes. Retention depends on the type of record and applicable obligations. We use the security features of our store platform and limit access to customer information. Submit payment information only through the secure HTTPS checkout; payment providers handle card processing. No online system can guarantee absolute security.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of personal information, object to certain processing, and withdraw consent. These rights are subject to legal conditions; some records must be retained. Contact hello@norwelluk.shop to make a request. We may need proportionate information to verify your identity and will respond within applicable statutory deadlines. You may object to direct marketing at any time.

Complaints

Contact us if you have a privacy concern. UK individuals may also complain to the Information Commissioner’s Office (ICO) or another competent supervisory authority.

Children, other websites and changes

This store is not directed at children and we do not knowingly collect children’s personal information. Contact us if a child has supplied information that needs review. External websites have their own privacy practices. We may update this policy to reflect changes to the store or legal requirements, publishing the revised version and date and providing further notice when required.

Contact

For privacy questions and requests, email hello@norwelluk.shop, call +55 62 9701-2976, or write to the registered business address above.