Privacy Policy

1. Who We Are

Nora Furnishings Ltd
Registered address: Daidalou 4, 2235 Latsia, Nicosia, Cyprus
Website: www.noraoffice.com
Email: info@noraoffice.com
Phone: +357 22 481968

We act as the Data Controller for the purposes of the GDPR.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

• Name and surname
• Email address
• Telephone number
• Delivery and billing address
• Payment details (processed securely by third-party payment processors)
• Website usage data via cookies

3. How We Collect Your Data

Your data may be collected when you:

• Place an order via our website
• Fill in a contact form
• Subscribe to our newsletter
• Interact with our social media platforms
• Browse our website (via cookies)

4. Why We Use Your Data

We process your data to:

• Fulfil orders and deliver products
• Communicate with you regarding inquiries, support, or marketing
• Improve website functionality and user experience
• Comply with legal obligations and prevent fraud

5. Legal Basis for Processing

We rely on the following lawful bases under the GDPR:

• Contractual necessity: to fulfil a purchase
• Legal obligation: tax, accounting, and compliance
• Legitimate interest: marketing, business improvement
• Consent: for newsletters and cookies where required

6. Data Sharing

We only share data when necessary with:

• Payment processors
• Delivery partners
• Marketing service providers
• Legal or governmental authorities when required

We never sell or rent your data to third parties.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described, or as required by law (e.g. up to 7 years for tax and accounting compliance).

8. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, email us at info@noraoffice.com.

9. Security

We apply appropriate technical and organisational measures to secure your data, including encryption, secure servers, and access control.