Privacy Policy
This Privacy Policy explains how Noporixal collects, uses and protects your personal data when you visit our website, create an account, contact us or place an order. We process your data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Controller
Business Name: Noporixal
Legal Entity: Strive UG (haftungsbeschränkt), trading as Noporixal
Managing Director: Patrick Dauelsberg
Commercial Register Number: HRB 38159 HB
Registered Court: Amtsgericht Bremen
Business Address: Parkstraße 12, 28209 Bremen, Germany
Email: info@noporixal.com
Phone: +49 157 83629041
Data We Collect
Depending on how you use our website, we may collect the following data: your name, email address, phone number and billing and shipping address; order details such as the products, flavours, sizes and prices you choose, as well as any returns; your chosen payment method and payment status (full card or bank details are handled by our payment providers and are never stored by us); account details if you create a customer account; messages you send us; reviews or photos you choose to share; and technical data such as your IP address, browser type, device and the pages you visit. Data from analytics and marketing cookies is only collected if you have given your consent.
We do not ask for any health information to process your order. If you choose to share health details with us, for example when asking for product advice, we only use them to answer your question and delete them as soon as they are no longer needed.
Why and How We Use Your Data
We use your data to process and deliver your orders, manage your customer account, handle returns and refunds and answer your questions, for example about a product or its use (Art. 6(1)(b) GDPR). We also use it to keep our website secure and running smoothly and to prevent fraud, based on our legitimate interest (Art. 6(1)(f) GDPR). With your consent, we send newsletters, publish your reviews or photos and use analytics and marketing cookies (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Where you voluntarily share health information with us, we process it only on the basis of your explicit consent (Art. 9(2)(a) GDPR). We also keep records that we are required to keep under commercial and tax law (Art. 6(1)(c) GDPR). You can withdraw your consent or unsubscribe at any time.
Cookies
Strictly necessary cookies make essential functions like your shopping cart, checkout and login work and do not require your consent (§ 25(2) TDDDG). Analytics, personalisation and marketing cookies are only used if you accept them in our cookie banner. You can change your choice at any time in the cookie settings or in your browser.
Sharing Your Data
We only share your data when it is necessary: with payment providers to process your payment, with shipping carriers to deliver your order, with our website, hosting and IT service providers who work on our behalf under data processing agreements (Art. 28 GDPR), with tax advisors, and with public authorities if we are legally required to do so. When you visit our social media pages, the platform operators process your data according to their own privacy policies. If data is transferred to countries outside the EU or EEA, we make sure it is properly protected through an adequacy decision or the EU Standard Contractual Clauses. We will never sell your personal data.
How Long We Keep Your Data
We only keep your data for as long as necessary. Order and invoice records are stored for up to 10 years as required by German commercial and tax law. Account data is kept until you delete your account, newsletter data until you unsubscribe, and reviews or photos until you ask us to remove them. Messages and technical log data are deleted as soon as they are no longer needed.
Your Rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, to receive your data in a portable format and to withdraw your consent at any time (Art. 15 to 21 and Art. 7(3) GDPR). To use any of these rights, just contact us at info@noporixal.com. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen (Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen), Bremen, Germany.
Data Security
We use appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption across our entire website. No transmission over the internet can be guaranteed to be completely secure, but we take every reasonable step to keep your data safe.
Children
Our shop is intended for adults. We do not knowingly collect personal data from children under the age of 16. If you believe a child has provided us with personal data, please contact us so we can delete it.
Automated Decision Making and Updates
We do not use automated decision making or profiling that has legal or similarly significant effects on you. We may update this Privacy Policy from time to time, and the latest version is always available on our website.