Privacy Policy

This Privacy Policy explains how Norcrest, operated by Zuber Commerce LLC (“Norcrest”, “we”, “us”, or “our”), collects, uses, shares, and protects your personal information when you visit our website, place an order, contact us, or otherwise use our services.

We process personal information in accordance with applicable United Kingdom data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who Is Responsible for Your Information?

For the purposes of applicable data protection law, the data controller is:

Zuber Commerce LLC, trading as Norcrest
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110
United States

Email: contact@norcrestshop.com

Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

• Your name;
• Billing and delivery addresses;
• Email address;
• Telephone number;
• Order details and purchase history;
• Information required to process payments and transactions;
• Returns, refunds, exchanges, and customer service records;
• Communications you send to our customer support team;
• IP address;
• Browser, device, and operating-system information;
• Website usage, browsing activity, and interaction data;
• Cookie identifiers and advertising identifiers;
• Marketing preferences and consent records;
• Information used to detect fraud, abuse, or security threats.

Payment card information is generally collected and processed directly by our authorised payment service providers. We do not receive or store complete payment card numbers through our standard checkout process.

How We Collect Your Information

We may collect personal information:

• Directly from you when you place an order or create an account;
• When you contact us or submit a return or refund request;
• Automatically through cookies and similar technologies;
• From payment processors, delivery partners, and fraud-prevention providers;
• From advertising, analytics, and social media platforms where permitted by law.

How We Use Your Personal Information

We may use your personal information to:

• Process, fulfil, deliver, and manage your orders;
• Process payments, refunds, returns, and exchanges;
• Provide customer support and respond to enquiries;
• Send order confirmations, delivery updates, and service messages;
• Maintain and improve our website, products, and services;
• Personalise your shopping experience;
• Measure website traffic, performance, and customer engagement;
• Prevent fraud, misuse, security incidents, and unlawful activity;
• Comply with tax, accounting, regulatory, and legal obligations;
• Establish, exercise, or defend legal claims;
• Send promotional emails or other marketing communications where permitted by law;
• Display or measure personalised advertising where you have provided any consent required by law.

Our Lawful Bases for Processing

Under the UK GDPR, we rely on one or more of the following lawful bases:

• Contract: where processing is necessary to accept, fulfil, deliver, or manage your order.
• Legal obligation: where we must retain or disclose information to comply with applicable laws and regulations.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as fraud prevention, website security, customer service, business administration, and service improvement, provided those interests do not override your rights and freedoms.
• Consent: where you have agreed to optional cookies, certain marketing communications, personalised advertising, or another activity that requires consent.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Marketing Communications

We may send you promotional emails where you have consented or where otherwise permitted under applicable law.

You can unsubscribe at any time by using the unsubscribe link included in a marketing email or by contacting us at contact@norcrestshop.com.

Even after you unsubscribe from marketing, we may still send essential messages about your orders, transactions, account, returns, security, or legal matters.

Cookies and Similar Technologies

We use cookies, pixels, tags, local storage, and similar technologies to:

• Operate essential website and checkout functions;
• Remember your settings and preferences;
• Keep the website secure and prevent fraud;
• Understand how visitors use our website;
• Measure website and advertising performance;
• Personalise content and advertisements where permitted;
• Support analytics, remarketing, and marketing activities.

Where required by law, non-essential cookies and similar technologies will be used only after you have provided consent. You can manage your choices through the cookie banner or privacy-preference controls available on our website.

You may also manage cookies through your browser settings. Disabling essential cookies may prevent certain parts of the website or checkout from functioning correctly.

Shopify

Our store is hosted on Shopify, which provides the e-commerce platform used to operate our website and process customer transactions.

Shopify may collect and process personal information as a service provider to us and, in certain circumstances, for its own purposes. Information processed through Shopify may be stored or handled in countries outside the United Kingdom.

Shopify’s own privacy notices provide additional information about how Shopify processes personal information.

How We Share Personal Information

We may share personal information with service providers and other parties where necessary to operate our business, including:

• Shopify and website-hosting providers;
• Payment processors and financial institutions;
• Product suppliers and order-fulfilment partners;
• Delivery, postal, courier, and logistics providers;
• Customer service and communications providers;
• Fraud detection, payment-security, and identity-verification providers;
• Analytics, advertising, and marketing platforms;
• IT, cloud-storage, security, and technical support providers;
• Professional advisers, including accountants, lawyers, and insurers;
• Government bodies, regulators, courts, or law-enforcement authorities where required by law.

We may also disclose personal information in connection with a merger, acquisition, restructuring, financing, sale of assets, or transfer of all or part of our business, subject to appropriate safeguards.

Service providers are permitted to process personal information only for authorised purposes and must protect it appropriately.

We do not sell your personal information for monetary payment. However, certain advertising or analytics activities may be treated as “selling”, “sharing”, or targeted advertising under some privacy laws outside the United Kingdom. Where applicable, you may manage these activities through our privacy controls.

International Data Transfers

Norcrest is operated by a company established in the United States, and some of our suppliers, service providers, payment processors, technology providers, and logistics partners may be located outside the United Kingdom.

As a result, your personal information may be transferred to, stored in, or processed in countries whose data protection laws may differ from those of the United Kingdom.

Where UK data protection law requires it, we use appropriate safeguards for restricted international transfers. These may include adequacy regulations, contractual protections approved for use under UK law, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful transfer mechanism.

You may contact us for further information about the safeguards relevant to your personal information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including fulfilling orders, maintaining business and transaction records, complying with tax and accounting requirements, resolving disputes, preventing fraud, and enforcing agreements.

The applicable retention period depends on the nature of the information, why it was collected, legal requirements, the risk of harm from unauthorised use or disclosure, and whether the purpose can be achieved by other means.

When information is no longer required, we may delete, anonymise, or securely dispose of it, unless continued retention is required or permitted by law.

Security

We use reasonable technical and organisational safeguards designed to protect personal information against accidental loss, unlawful use, unauthorised access, alteration, disclosure, or destruction.

However, no internet transmission or electronic storage system is completely secure. We therefore cannot guarantee absolute security.

Your Data Protection Rights

Depending on the circumstances and subject to applicable legal limitations, you may have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request erasure of your personal information;
• Request restriction of certain processing activities;
• Object to processing based on legitimate interests;
• Object at any time to the use of your information for direct marketing;
• Request data portability where applicable;
• Withdraw consent where processing is based on consent;
• Request information about relevant international-transfer safeguards;
• Lodge a complaint with the UK Information Commissioner’s Office.

You have the right to object at any time to the processing of your personal information for direct marketing purposes.

To exercise your rights, contact us at contact@norcrestshop.com. We may request information necessary to verify your identity before responding.

We aim to respond within the timeframe required by applicable law. In certain circumstances, we may lawfully refuse a request or charge a reasonable fee, and we will explain the reason where required.

Automated Decision-Making

We and our service providers may use automated tools to identify potentially fraudulent or suspicious transactions. These checks may affect whether an order or payment is accepted, delayed, reviewed, or cancelled.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless permitted by law and appropriate safeguards are in place.

Children’s Privacy

Our website and products are intended for a general adult audience and are not directed at children. We do not knowingly collect personal information from children in circumstances where parental or guardian consent is required by law.

If you believe that a child has provided us with personal information inappropriately, please contact us so that we can review and, where appropriate, delete it.

Third-Party Websites

Our website may contain links to websites, applications, or services operated by third parties. We are not responsible for their content, security, or privacy practices. We recommend reviewing their privacy notices before providing personal information.

Complaints

Please contact us first if you have concerns about how we process your personal information, so that we have an opportunity to address them.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the United Kingdom’s data protection supervisory authority.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, services, technology, or legal obligations.

The updated version will be published on this page. Where changes are material, we may provide an additional notice where required by law.

Contact Us

For privacy-related questions, complaints, or requests to exercise your data protection rights, please contact:

Norcrest / Zuber Commerce LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110
United States

Email: contact@norcrestshop.com