Privacy Policy

The legal operator of NORBY ARTE will be the data controller for store-related processing. Its full identity, postal address and email have not yet been provided. For now, privacy enquiries can be sent via WhatsApp to +351 962 026 220; this contact does not replace the missing controller disclosures.

The website currently has no enabled account or checkout service. The shopping cart stores item references, quantities and personalization details, which may contain names, dates or messages, in local storage on your browser under the key “norby-arte-cart”. Adding a piece to the cart does not submit an order to us.

Search terms appear in the shop page URL and may remain in browser history or ordinary hosting request logs. Avoid putting confidential or sensitive information in searches or engraving fields. The current newsletter form does not transmit or save your email for a mailing list; subscribing is not yet active.

When you choose to contact us through WhatsApp, we receive the information you send, which may include your phone number, profile information, messages and attachments. WhatsApp independently processes information under its own terms and privacy policy.

Page requests, including requests for product images and videos, may disclose IP address, browser/device information, requested URLs and timestamps to the hosting and media-delivery services. External Google Fonts are requested to display the store’s typography. The operator must verify these providers’ actual processing, logging and retention arrangements; this notice does not claim that browsing is anonymous.

Cart storage is used to provide the cart you request. Enquiries about a proposed purchase may be processed to take steps at your request before a contract; order support, once sales open, may be necessary for performing the contract (GDPR Article 6(1)(b)). General support and website security may rely on legitimate interests (Article 6(1)(f)), subject to a documented assessment and your rights. Processing required for accounting or consumer-law obligations relies on the applicable legal obligation (Article 6(1)(c)).

Marketing must not be activated without the applicable legal basis and any consent required by law. Where consent is used (Article 6(1)(a)), it must be optional, specific and withdrawable as easily as it was given. Consent to marketing is not a condition of purchasing. The final purposes and legal bases for hosting and third-party services must be confirmed before sales open.

Information you send may be accessed by the store operator to handle your enquiry. Website hosting, media delivery, Google Fonts and WhatsApp may process technical or contact data for their respective services. No payment or shipping provider is currently connected to checkout.

Provider identities, processor arrangements, locations and any transfers outside the European Economic Area have not yet been fully verified. Before collecting data through new services, the operator must disclose the relevant recipients and, for transfers, the applicable adequacy decision or appropriate safeguards and how to obtain a copy. This notice does not promise that all data stays within the EU.

• WhatsApp Privacy Policy ↗
• Google Privacy Policy ↗

Cart data stays in your browser without an automatic expiry until it is overwritten or removed. Removing cart items updates that record; clearing this site’s browser storage removes it completely. Browser history can be cleared separately.

Enquiry information should be retained only for as long as needed to resolve the enquiry and, where justified, address follow-up issues or legal claims. Order and accounting records, once sales open, must be kept for applicable statutory periods. Exact enquiry periods, statutory record periods and hosting-log retention must be established and published by the operator; no arbitrary retention period is promised here.

Subject to the conditions of the GDPR, you can request access, correction, erasure, restriction and portability of your personal data, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of earlier consent-based processing. Some rights are limited where records must be kept by law.

Contact us using the details above and describe your request. We may request proportionate information to verify your identity. Requests are normally answered within one month; a lawful extension of up to two additional months may apply to complex or numerous requests, with notice within the first month. You may complain to Portugal’s Comissão Nacional de Proteção de Dados (CNPD), or another competent EU supervisory authority.

• CNPD — Portuguese data protection authority ↗

Browsing does not require submitting an enquiry. When you contact us, enough information is needed to understand and respond to your request. For future orders, information needed to fulfil the contract or legal obligations will be identified; without it, an order may not be fulfilled. Marketing details will be optional.

Do not send payment-card details, identity documents or sensitive information through engraving fields or ordinary messages. The operator must implement appropriate technical and organizational safeguards and confirm them before sales open. The current store code does not implement automated decisions or profiling that produce legal or similarly significant effects.

This notice will be updated when the seller details are confirmed or the store adds ordering, payments, delivery or marketing. Material new processing must be explained before it begins; new consent will be obtained where required.