At NORETI™, we value privacy, discretion and trust.

This Privacy Policy explains how NORETI (“NORETI”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal information when you visit www.noreti.co , purchase our products, communicate with us, subscribe to our communications, or otherwise interact with NORETI.

This Privacy Policy applies to customers and visitors worldwide. Depending on where you live, additional privacy rights may apply under the laws of your jurisdiction.

By using our website or providing personal information to us, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The personal information we collect depends on how you interact with NORETI.

Information You Provide to Us

We may collect information such as:

- your name;

- email address;

- telephone number;

- billing address;

- shipping address;

- account information;

- order and purchase information;

- product preferences;

- communications you send to us;

- customer service enquiries;

- reviews, feedback or survey responses;

- marketing preferences; and

- information you voluntarily provide when interacting with NORETI.

Payment Information

When you make a purchase, payment information is processed by the payment providers available through our website.

NORETI generally does not directly store complete credit or debit card numbers. Payment information is handled by our payment processors and commerce providers in accordance with their own security and privacy practices.

Information Collected Automatically

When you visit our website, certain information may be collected automatically, including:

- IP address;

- browser type;

- device type;

- operating system;

- approximate geographic location;

- pages viewed;

- referring website;

- interactions with our website;

- date and time of visits;

- shopping and checkout activity;

- cookie identifiers; and

- similar technical or usage information.

This information may be collected through cookies, pixels, analytics technologies and similar tools.

2. How We Collect Information

We may collect personal information:

Directly from you, such as when you place an order, contact us, subscribe to communications or create an account.

Automatically, through cookies and similar technologies when you use our website.

From service providers, such as payment processors, delivery providers, website and commerce providers, analytics providers and marketing platforms.

From third-party platforms, where you interact with NORETI through services such as social media, advertising platforms or shopping platforms.

We aim to collect only information reasonably necessary for operating our business and providing our products and services.

3. How We Use Your Information

We may use personal information to:

- process and fulfil orders;

- process payments;

- arrange shipping and delivery;

- communicate with you regarding your order;

- provide customer service;

- process returns, exchanges and refunds;

- maintain customer accounts;

- detect and prevent fraud or misuse;

- maintain the security of our website and systems;

- improve our products, services and website;

- understand how customers use our website;

- conduct analytics and measure website performance;

- personalise your shopping experience;

- send marketing communications where permitted;

- measure and improve advertising campaigns;

- comply with legal, regulatory, tax and accounting obligations;

- establish, exercise or defend legal claims; and

- otherwise operate and improve NORETI.

Where required by applicable law, we will obtain your consent before using personal information for particular purposes.

4. Legal Bases for Processing

Where privacy law requires us to identify a legal basis for processing personal information, including under European and UK data protection laws, we may rely on one or more of the following:

Performance of a contract — for example, processing your information to fulfil and deliver an order.

Legitimate interests — where processing is reasonably necessary for our business operations and those interests are not overridden by your rights.

Consent — where you have provided consent, including for certain marketing communications, cookies or advertising technologies.

Legal obligations — where processing is necessary to comply with applicable laws, regulations, tax obligations or lawful requests.

The appropriate legal basis depends on the particular information and purpose involved.

5. How We Share Personal Information

We do not sell personal information in the ordinary meaning of selling customer information for money.

We may disclose personal information to trusted third parties where reasonably necessary to operate NORETI, including:

- website and e-commerce providers;

- payment processors;

- banks and payment networks;

- shipping, courier and logistics providers;

- cloud hosting and technology providers;

- analytics providers;

- email and communications providers;

- advertising and marketing platforms;

- fraud prevention and security providers;

- professional advisers such as accountants, lawyers and insurers;

- government agencies, regulators or law enforcement where legally required; and

- parties involved in a business restructuring, merger, acquisition or transfer.

These providers may process information on our behalf or independently in accordance with their own privacy obligations.

We seek to disclose only information reasonably necessary for the relevant service or purpose.

6. Squarespace

The NORETI website is built and operated using Squarespace.

Squarespace may process certain information relating to website visitors and customers to provide website hosting, e-commerce functionality, security, analytics and other services.

Certain information may therefore be processed through Squarespace's infrastructure when you visit our website or place an order.

Squarespace also uses cookies and related technologies as part of operating websites on its platform. Squarespace Help

7. Payment Providers

Payments made through NORETI are processed through third-party payment providers available at checkout, which may include Stripe and other supported payment services.

These providers may collect payment and transaction information necessary to authorise and process your purchase.

Their processing of your information is also governed by their respective privacy policies.

8. Shipping & Delivery Providers

When you purchase a product, we may provide information such as your:

- name;

- delivery address;

- telephone number;

- email address; and

- relevant order or customs information

to courier, postal, logistics, fulfilment and customs providers where necessary to deliver your order.

For international shipments, information may also need to be provided to customs authorities, border agencies and other government bodies.

9. Cookies & Similar Technologies

NORETI and our service providers may use cookies, pixels and similar technologies to operate and improve our website.

These technologies may be used for:

Essential functions — such as maintaining shopping carts, checkout functionality, security and website operation.

Preferences and functionality — such as remembering settings and improving your experience.

Analytics — helping us understand website traffic and how visitors interact with our website.

Advertising and marketing — measuring campaigns and, where permitted, delivering or measuring personalised advertising.

Where required by applicable law, non-essential cookies will be used only after appropriate consent has been obtained.

You may be able to manage cookie preferences through our cookie consent tools and your browser settings.

For visitors from jurisdictions such as the EU and UK, Squarespace recommends providing detailed information about cookies, their purposes, duration, consent and third-party recipients. Squarespace Help

10. Marketing Communications

If you subscribe to NORETI marketing communications, we may send you information about:

- new collections;

- product launches;

- exclusive releases;

- offers;

- promotions;

- NORETI news; and

- other brand communications.

You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the communication or by contacting us.

Transactional communications relating to purchases, payments, delivery, security or customer service are not marketing communications and may still be sent where necessary.

11. Advertising & Analytics

We may use analytics and advertising services to understand how visitors interact with NORETI and to measure or improve our marketing.

Depending on the services enabled on our website, these providers may collect information using cookies, pixels or similar technologies.

Where applicable law treats certain advertising-related disclosures as a “sale,” “sharing,” or targeted advertising, eligible individuals may have the right to opt out.

For example, California law provides qualifying consumers with rights concerning access, deletion, correction, sale or sharing of personal information and non-discrimination for exercising privacy rights. California DOJ

Where legally required, NORETI will provide appropriate mechanisms for exercising these rights.

12. International Data Transfers

NORETI serves customers internationally.

As a result, personal information may be processed or stored in countries other than the country where you live, including locations where our website, payment, cloud, logistics, analytics and other service providers operate.

Privacy and data protection laws may differ between countries.

Where required by applicable law, we or our service providers will use appropriate safeguards for international transfers of personal information.

13. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

- fulfil orders;

- maintain business and transaction records;

- provide customer service;

- meet accounting and taxation requirements;

- prevent fraud;

- resolve disputes;

- enforce agreements; and

- comply with legal obligations.

Retention periods may vary depending on the type of information, the purpose for which it is processed and applicable legal requirements.

When information is no longer reasonably required, we may delete, anonymise or securely dispose of it, subject to applicable law.

14. Your Privacy Rights

Depending on where you live and the laws applicable to you, you may have rights regarding your personal information.

These may include the right to:

- access personal information we hold about you;

- correct inaccurate or incomplete information;

- delete certain personal information;

- restrict certain processing;

- object to certain processing;

- withdraw consent where processing relies on consent;

- receive or transfer certain information in a portable format;

- opt out of certain marketing;

- opt out of certain targeted advertising, sale or sharing where applicable;

- limit certain uses of sensitive personal information where applicable; and

- make a complaint to an appropriate privacy or data protection authority.

These rights are not absolute and may vary according to your jurisdiction and the circumstances.

We may need to verify your identity before fulfilling certain privacy requests.

You will not be discriminated against for exercising privacy rights available to you under applicable law.

15. European Economic Area, Switzerland & United Kingdom

If you are located in the European Economic Area (EEA), Switzerland or United Kingdom, applicable data protection laws may provide additional rights concerning your personal data.

Depending on the circumstances, these may include rights of access, correction, erasure, restriction, objection and data portability, as well as the right to withdraw consent.

You may also have the right to lodge a complaint with the data protection authority responsible for your jurisdiction.

16. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights under state law.

Depending on your jurisdiction and whether the relevant law applies to NORETI, these may include rights to:

- know or access personal information;

- request deletion;

- request correction;

- obtain a portable copy of certain information;

- opt out of certain targeted advertising;

- opt out of certain sales or sharing of personal information; and

- appeal certain privacy-request decisions.

California's CCPA, for example, provides qualifying consumers with rights to know, delete, correct and opt out of certain sale or sharing of personal information. California DOJ

Where required, we will recognise legally valid privacy preference signals, such as Global Privacy Control (GPC).

17. Australian Privacy

Where Australian privacy law applies to NORETI's handling of personal information, we will handle personal information in accordance with applicable requirements, including the Privacy Act 1988 (Cth) and Australian Privacy Principles where applicable.

Australian privacy guidance emphasises transparency regarding what information is collected, how it is collected and used, access and correction, complaints and overseas disclosures. OAIC

Nothing in this global Privacy Policy is intended to reduce privacy rights available under Australian law.

18. Children's Privacy

NORETI's products and website are intended for a general adult consumer audience and are not directed at children.

We do not knowingly seek to collect personal information from children in circumstances prohibited by applicable law.

If you believe a child has provided personal information to us improperly, please contact us so that we can investigate and, where appropriate, delete the information.

19. Data Security

We take reasonable administrative, technical and organisational measures designed to protect personal information against:

- unauthorised access;

- loss;

- misuse;

- alteration;

- disclosure; and

- destruction.

We also rely on reputable service providers to operate important parts of our website, commerce and payment infrastructure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

20. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

NORETI does not control the privacy practices of independent third parties.

We encourage you to review the privacy policies of third-party websites and services before providing personal information to them.

21. Business Transfers

If NORETI or substantially all or part of its business is sold, merged, reorganised or transferred, personal information may be transferred as part of that transaction.

Where required, we will take reasonable steps to ensure personal information continues to receive appropriate protection.

22. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to:

- our business;

- our website;

- technology;

- service providers;

- privacy practices; or

- applicable legal requirements.

When we make changes, we will update the “Last updated” date at the top of this page.

Where required by law, we may provide additional notice or request consent before material changes take effect.

23. Contact Us

If you have questions about this Privacy Policy, wish to exercise a privacy right, or have concerns about how your personal information has been handled, please contact:

NORETI™

Website: www.noreti.co

Email: hello@noreti.co

Please include “Privacy Request” in the subject line where appropriate.

We will review privacy requests and complaints and respond within the timeframe required by applicable law.

NORETI™ — Timeless by Heritage.