Privacy Policy

1. Data controller

Intelvia Ltd

E-Mail: hello@norlum.com

2. Which data we process

• Order data such as name, email, phone number, shipping address, and purchased products.
• Payment-related data via external payment providers (e.g. Stripe, PayPal).
• Technical data such as IP address, browser information, and usage timestamps.
• Communication data from support inquiries.

3. Purposes of processing

• Contract fulfillment including shipping, payment, and customer service.
• Compliance with legal obligations (e.g. commercial and tax law).
• Abuse and security prevention as well as technical website stability.
• Improving our offer based on aggregated usage data.

4. Legal bases (EU/EEA)

• Art. 6(1)(b) GDPR for contract fulfillment and pre-contractual inquiries.
• Art. 6(1)(c) GDPR for legal obligations.
• Art. 6(1)(f) GDPR for legitimate interests (security, fraud prevention, shop operations).
• Art. 6(1)(a) GDPR for consent-based processing (e.g. newsletter), where applicable.

5. Recipients and third-party providers

We use external service providers for payment processing and order fulfillment (including payment providers and technical hosting services). Data is only shared to the extent required for the respective service.

6. International data transfers

As a company registered in Bulgaria, we primarily process data in the EU/EEA. If service providers process data outside the EU/EEA, we use appropriate safeguards where applicable (e.g. contractual guarantees).

7. Storage period

We store personal data only for as long as necessary for the purposes listed above or as required by law.

8. Your rights

• Access to stored personal data.
• Correction of inaccurate data.
• Deletion or restriction of processing.
• Data portability, where applicable.
• Objection to specific processing activities.
• Withdrawal of consent with effect for the future.

Please send requests to support@norlum.com.

9. Note

This page provides general privacy information and does not replace individual legal advice.