Privacy Policy

Nora Sydney (“we”, “us”, “our”) operates the online store at nora-sydney.com. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. We handle your personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).

Last updated: 21 October 2026

Who we are

Nora Sydney is an online store. We have no physical shop, and you can contact us by email at support@nora-sydney.com. Please send privacy requests and questions to that address.

What personal information we collect

Information you give us

Your name, email address, delivery address and billing address, and a phone number if you give one at checkout.
Your order details, such as the items you bought and the order total.
Messages, order numbers and photos you send us when you contact customer support, for example a photo of a damaged item.
Your email address and preferences if you sign up to our newsletter.

Payment information

Payments are made at the Shopify checkout and are handled by Shopify and the payment provider. We do not store your full card details. We receive confirmation that your payment succeeded and limited details about the payment method used.

Information collected automatically

When you visit our website, we and our service providers collect technical information using cookies, log files, pixels and similar technologies. This includes your IP address, device type, browser type, operating system, the pages and products you view, the links you click, the website that referred you, and the date and time of your visit.

How we use your personal information

To process and deliver your order and keep you updated about it, including order confirmations and shipping updates.
To handle returns, refunds, faulty or incorrect items and other customer support requests.
To prevent fraud and keep our website and checkout secure.
To understand how our website is used and to improve it.
To advertise our store, including measuring how well our ads perform on Facebook and Instagram.
To send you marketing emails, but only if you have agreed to receive them.
To meet our legal obligations and to establish, exercise or defend legal claims.

Cookies, the Meta pixel and advertising

Cookies are small files stored on your device. We use them to make the website and checkout work (for example, to remember what is in your cart), to keep the website secure and to understand how it is used.

We also use the Meta pixel, a piece of code provided by Meta Platforms, the company behind Facebook and Instagram. The pixel records actions such as the pages and products you view, items you add to your cart and purchases you make, and sends this information to Meta. We use it to measure and improve our advertising and to show our ads to people who may be interested in them. Meta handles this information under its own Privacy Policy, and it may link it to your Facebook or Instagram account.

You can control cookies and advertising in several ways:

Change your browser settings to block or delete cookies. Some parts of the website, such as the cart, may not work without them.
Adjust your ad preferences in your Facebook and Instagram settings to limit how your activity is used for ads.
Email us if you would like help with any of this.

Email marketing

We send newsletters and promotional emails only to people who have agreed to receive them. Every marketing email has an unsubscribe link, and you can also unsubscribe by emailing us. You will still receive messages about your orders. We comply with the Spam Act 2003 (Cth) when we send marketing emails.

Who we share your information with

We share personal information only as needed to run our store and our advertising. This includes:

Shopify, which hosts our website and runs our checkout and order management. See Shopify's privacy policy.
Payment providers, which process your payment.
Delivery and fulfilment partners, such as carriers and our returns warehouse in the United Kingdom, which need your name, address and contact details to deliver your order and handle returns.
Meta Platforms, through the Meta pixel, as described above.
Email and other service providers, such as our email marketing, customer support and website analytics tools.
Professional advisers and authorities, where we are required or permitted by law to share information with them.

If our business is ever sold or restructured, personal information may be transferred to the new owner on the terms of this policy.

Disclosure overseas

Many of the providers above operate outside Australia or store information on servers outside Australia, for example in the United States and in the United Kingdom, where our returns warehouse is located. By using our website and placing an order, you understand that your personal information may be disclosed to recipients overseas. We take reasonable steps to make sure overseas recipients handle your information appropriately.

How long we keep your information

We keep personal information only for as long as we need it for the purposes in this policy, including to handle returns and disputes and to meet our legal, tax and accounting obligations. When we no longer need it, we delete it or de-identify it. If you unsubscribe from marketing, we stop sending marketing emails but may keep a record of your request so that we can honour it.

Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, including by using Shopify's secure, encrypted checkout. No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by law.

Your choices and rights

You can ask us to:

tell you what personal information we hold about you and give you access to it;
correct personal information that is inaccurate, out of date or incomplete;
delete your personal information; and
stop sending you marketing emails.

To make a request, email support@nora-sydney.com. We may ask you to confirm your identity first so that we do not disclose information to the wrong person. We will respond within a reasonable period. We may not be able to delete some information, for example order records that we must keep by law, and if we cannot meet a request we will explain why.

Complaints

If you have a concern about how we have handled your personal information, email us at support@nora-sydney.com with the details and we will investigate and respond. If you are not satisfied with our response, you can contact the OAIC at www.oaic.gov.au.

Children

Our website is not directed at children, and we do not knowingly collect personal information from anyone under 18.

Links to other websites

Our website may link to other websites, including Facebook and Instagram. We are not responsible for their privacy practices, so please read their privacy policies.