Privacy policy

Last updated: October 2026

1. Who is responsible

The person responsible for processing your personal data is:
Guilherme Rocha Nunes, Chemin des Semilles 13B, 1870 Monthey, Switzerland, hallo@norlo.ch.

This policy is based on the Swiss Federal Act on Data Protection (FADP).

2. What data we process

  • Orders: name, delivery address, email, phone number, products ordered and amount.
  • Payment: you enter your payment details directly with our payment provider. We never see full card numbers.
  • Contact: whatever you write to us by email or through the contact form.
  • Newsletter: your email address, only if you sign up.
  • Website use: technical data such as IP address, browser, device and pages visited, through cookies.

3. What we use it for

To process and deliver your order, answer your questions, send the newsletter (if you signed up), run and improve the website, and meet our legal obligations, such as keeping accounting records.

4. Who we share it with

  • Shopify (Shopify International Ltd., Ireland, and Shopify Inc., Canada) runs our shop. Data may be stored on servers in Canada, the USA and other countries.
  • Payment providers (Shopify Payments) to process your payment.
  • Production and shipping partner: to deliver your order, we pass your name, delivery address and phone number to our partner in China and to the carrier. Under Swiss law, China is not considered to have adequate data protection. The transfer is allowed because it is directly necessary to perform your purchase contract (Art. 17(1)(b) FADP). We only pass on the data needed for delivery.
  • Authorities, where the law requires us to.

We do not sell your data.

5. Cookies and analytics

Our shop uses the cookies needed for the basket and checkout. We only use analytics and marketing cookies with your consent, given through the cookie banner. You can delete or block cookies in your browser at any time.

6. How long we keep data

We keep order and accounting data for 10 years, as the law requires. We delete other data as soon as we no longer need it. You can unsubscribe from the newsletter at any time.

7. Your rights

You can ask to see your data, have it corrected or deleted, object to its processing, and receive it in a common format. Write to hallo@norlo.ch. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC).

8. Changes

We may update this policy. The version published on this page applies.