# Privacy Policy
Last updated: [DATE]
This policy describes how [LEGAL COMPANY NAME] (“Gemnorra”, “we”, “us”)
collects, uses and shares personal data when you visit gemnorra.com or place
an order.
What we collect
- Contact and order data: name, email, shipping/billing address, phone, payment
confirmation (we do not store full card numbers; Stripe and Airwallex handle
payment data).
- Account data: password hash (you choose your own password), order history.
- Technical data: IP address, browser, device, pages viewed, referring URL,
via cookies and analytics — only after consent where required.
- Marketing data: email if you subscribe to the newsletter.
How we use it
- To process and fulfill orders, including shipping and fraud checks.
- To provide customer support.
- To send transactional emails (order, shipping).
- To send marketing emails, only with opt-in; every email has an unsubscribe
link.
- To comply with legal obligations (tax, accounting, law enforcement requests).
- To improve the site and prevent fraud.
Legal bases (EU/UK, GDPR)
We process data under contract (order fulfillment), legal obligation (tax/
accounting), consent (marketing/non-essential cookies), and legitimate
interest (fraud prevention, site improvement).
Sharing
We share only what is necessary with: payment processors (Stripe, Airwallex),
shipping carriers, hosting/email providers, and analytics providers (Google
Analytics, configured with IP anonymization). We do not sell personal data.
Cookies
We use essential cookies for cart and checkout, and optional cookies for
analytics and marketing. A consent banner lets you choose. See our Cookie
Policy for details.
Your rights
Depending on your region, you may request access, correction, deletion,
restriction, portability, or objection to processing of your data. Contact
hello@gemnorra.com. We respond within 30 days. EU/UK users may also complain
to their data protection authority.
Data retention
We retain order data for as long as required for tax/accounting (typically
6–10 years) and delete or anonymize other data when no longer needed.
Children
The site is not directed to children under 16, and we do not knowingly
collect their data.
Contact / DPO
[LEGAL COMPANY NAME]
[ADDRESS]
hello@gemnorra.com
This template is a starting point. For EU/UK sales and California/US state
privacy laws (CCPA, VCDPA, CPA, etc.), have a privacy professional review it.