Privacy Policy

Last Updated: 06/29/2026

Thank you for visiting Norkaya ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal information. This policy explains what information we collect, how we use and share it, and the rights you have regarding your data when using our website and mobile application (collectively, the "Services").

1. Information We Collect and Why

We collect information to process your orders, communicate with you, and improve your shopping experience.

We may also aggregate or de-identify information so it can no longer be linked to you. We reserve the right to use and share this anonymous data for any business purpose at our discretion.

2. How Data is Gathered

• Direct Input: You provide data directly when you buy products, register an account, sign up for marketing messages, write reviews, or contact our support team.
• Automated Tracking: We automatically log technical data as you browse our platform, open our emails, or click on our digital ads.
• Third Parties: We occasionally receive demographic or address-verification data from business partners and data aggregators to keep our system records accurate.

3. Cookies, Analytics, and Advertising Tracking

We use cookies, tracking pixels, and web beacons to save your preferences, keep your shopping cart intact, and analyze our web traffic.

Google Analytics

We utilize Google Analytics to understand how visitors interact with our platform. This software captures technical behaviors, pages visited, and traffic sources. We use Google Consent Mode to manage these tracking flows. If you grant consent, Google may associate your activity with your signed-in Google account information to provide us with cross-device behavior reporting. If you deny consent, Google only receives anonymous, aggregated pings without personal identifiers. You can opt out completely by installing the Google Analytics Opt-out Browser Add-on or by reviewing the Google Privacy & Terms site.

Meta Ads & Pixel Tracking

We use the Meta Pixel and Meta Conversions API (CAPI) to measure the effectiveness of our Facebook and Instagram ads, build retargeting audiences, and optimize our ad delivery. Under data protection laws, we and Meta Platforms Ireland Ltd. act as joint data controllers for this tracking. This system shares network activity (such as your IP address, browser type, and specific items viewed or purchased) with Meta. This data helps Meta serve you more relevant ads on their platforms. You can learn more or adjust your preferences via the Meta Privacy Policy.

Opt-Out and Global Privacy Signals

While our platform does not respond to automated "Do Not Track" browser tags, we do actively recognize the Global Privacy Control (GPC) signal to handle opt-out requests automatically. You can also adjust your tracking and cookie choices at any time via our website's Cookie Preference Center or by updating your individual ad settings directly inside your Google and Meta user accounts.

4. Secure Data Sharing

We do not sell your personal data for money. We only share information to run our business or fulfill legal obligations:

• Logistics Partners: We share your contact details with payment gateways and shipping carriers (like DHL and UPS) to securely charge and deliver your orders.
• Marketing Networks: We transmit basic browser, device, and event indicators to third-party ad networks (Google Ads and Meta Ads) to display relevant items when you browse social media or third-party web pages, provided you have given us tracking consent. We never share your SMS opt-in or text messaging consent data with third parties for marketing purposes.
• Legal Requirements: We will disclose records if required by law, court order, or to protect the safety, legal rights, and property of our company or our customers.
• Corporate Shifts: In the event of a brand merger, asset sale, or corporate reorganization, your data will transfer to the new owner under these same privacy guidelines.

5. Your Rights: Portability, Retention, and Closure

We retain your personal files only as long as necessary to complete your transactions, preserve financial records, resolve disputes, or meet regulatory laws.

Access and Portability

You have the right to request a portable, easily readable copy of the personal data we hold about you. This allows you to view your profile history or transfer your records to another service provider.

Account Closure and Erasure

You have the right to permanently close your account and wipe your data. This is an irreversible step that deletes your entire purchase history, active wishlists, and loyalty points tracking.

To download your data or close your account, contact us using the methods listed in Section 9. Our team will respond within 48 hours to verify your identity, and requests will be completed within 30 business days.

6. Children's Privacy Shield

Our services are designed strictly for users who are at least 16 years old. We do not knowingly collect or track personal information from anyone under the age of 16. If we discover that an underage user has submitted data without verifiable parental consent, we will delete those records immediately.

7. State-Specific Privacy Rights

California Residents (CCPA/CPRA)

Sharing internet activity data with marketing vendors for targeted advertising qualifies as "selling or sharing" data under California law. You hold the following distinct rights:

• Right to Opt-Out: You can stop the sharing of your data for targeted ads by clicking the "Do Not Sell My Personal Information" link in our website footer or by turning on a Global Privacy Control (GPC) signal in your browser.
• Right to Know & Access: You can request a clear report detailing what categories of data we collected about you, our business purposes, and who we shared it with over the past 12 months.
• Right to Delete & Correct: You can demand that we fix inaccurate profile parameters or completely purge your personal files, except where we must keep them for legal or contract compliance.
• Right to Fair Treatment: We will never deny you service, change your prices, or alter your delivery metrics for exercising your privacy rights.

Residents of Other US States (including CO, CT, DE, IN, IA, KY, MD, MN, MT, NE, NH, NJ, OR, RI, TN, TX, UT, and VA)

If you reside in a state with comprehensive privacy frameworks, you have the statutory right to confirm if we process your data, access a portable copy of your information, correct structural errors, delete your profile, or opt out of targeted web advertising.

To execute any state-specific data rights, reach out via the contact information in Section 9. If we deny an operational request, you can appeal our choice by replying with "PRIVACY APPEAL" in the subject line. If your appeal is rejected, you may file an official complaint with your state's Attorney General.

8. Updates to This Policy

We reserve the right to alter this Privacy Policy at our discretion. Any changes will be posted immediately on this page with an updated "Last Updated" date. Continuing to use our platform or buying items after updates are posted confirms your acceptance of the new terms.

9. Contact Us

For questions regarding our privacy rules, or to execute your access, portability, or deletion rights, please contact us through at least one of the options below:

• Brand Name: Norkaya
• Support Email: privacy@norkaya.com
• Mailing Address: Unit 2201-02, 22/F, Universal Trade Centre, 3 Arbuthnot Road, Central, Hong Kong