At Nora Furnishings Ltd, we value your privacy and are committed to protecting the personal data of our customers and website visitors. This policy outlines how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the relevant laws of the Republic of Cyprus.

1. Who We Are

Nora Furnishings Ltd
Registered Address: Daidalou 4, 2234 Latsia, Nicosia, Cyprus
Website: www.nora.com.cy
Email: info@nora.com.cy
Phone: +357 22481968

We act as the Data Controller for the purposes of GDPR.

2. What Personal Data We Collect

We may collect and process the following types of personal data:

  • Name and surname
  • Email address
  • Telephone number
  • Delivery and billing address
  • Payment details (processed securely by third-party payment processors)
  • Website usage data via cookies

3. How We Collect Your Data

Your data may be collected when you:

  • Place an order via our website
  • Fill in a contact form
  • Subscribe to our newsletter
  • Interact with our social media platforms
  • Browse our website (via cookies)

4. Why We Use Your Data

We process your data to:

  • Fulfill orders and deliver products
  • Communicate with you regarding inquiries, support, or marketing
  • Improve website functionality and user experience
  • Comply with legal obligations and prevent fraud

5. Legal Basis for Processing

We rely on the following lawful bases under the GDPR:

  • Contractual necessity: to fulfill a purchase
  • Legal obligation: tax, accounting, and compliance
  • Legitimate interest: marketing, business improvement
  • Consent: for newsletters and cookies where required

6. Data Sharing

We only share data when necessary with:

  • Payment processors
  • Delivery partners
  • Marketing service providers
  • Legal or governmental authorities when required

We never sell or rent your data to third parties.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described, or as required by law (e.g. up to 7 years for tax and accounting compliance).

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time

To exercise any rights, email us at info@nora.com.cy

9. Security

We apply appropriate technical and organizational measures to secure your data, including encryption, secure servers, and access control.