Legal
Privacy Policy
Who we are
NORALF, Copenhagen, Denmark, is the data controller. Contact: hello@noralf.dk.
What we collect
Your name, email, shipping and billing address, phone number if you give it, and order details.
Payment card details are handled by Shopify and our payment providers. We never see or store full card numbers.
How we use it
To process and deliver your order, handle returns, answer your questions, and meet legal requirements such as bookkeeping.
If you sign up for our newsletter, we use your email to send it. You can unsubscribe at any time.
Legal basis
Performance of a contract (orders), legal obligation (bookkeeping) and consent (newsletter).
Who we share it with
Shopify, which runs our shop and checkout; payment providers; and shipping carriers to deliver your order. They only process data on our behalf or as needed to deliver the service.
Some providers may process data outside the EU under appropriate safeguards.
How long we keep it
Order data as long as Danish bookkeeping law requires. Newsletter data until you unsubscribe.
Your rights
You have the right to access, correction, deletion, restriction, objection and data portability, and to withdraw consent. To request deletion or anything else, write to hello@noralf.dk.
You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).
Cookies
The shop uses the cookies and local storage needed to run the bag and checkout.
Last updated: October 2026