Privacy policy

Privacy Policy

This Privacy Policy describes how Nalora collects, uses, and protects your personal data when you visit naloraofficial.com, place an order, or contact us. We attach great importance to the protection of your data and are committed to processing it transparently and securely.

1. Who We Are

The website naloraofficial.com is operated by Liora Jewelry LLC, a company incorporated under U.S. law, with its registered office at 500 4th St NW Suite 102 #2464, Albuquerque, NM 87102, United States.

Liora Jewelry LLC is the data controller of your personal data within the meaning of the General Data Protection Regulation (GDPR).

For any questions regarding your data, you may contact us at contact@naloraofficial.com.

2. Data We Collect

Data You Provide to Us

Order information: first name, last name, shipping address, billing address, email address, phone number
Personalization information: first names, dates, initials, or messages you choose to have engraved on your jewelry
Payment information: processed directly by our payment provider; we never store your credit card numbers
Customer account information, if you create one
Content of your exchanges with our customer service
Email address, if you subscribe to our newsletter

Automatically Collected Data

When you browse our site, we automatically collect certain technical information: IP address, browser type, operating system, pages viewed, visit duration, referring site, and data related to products viewed or added to the cart. This data is collected via cookies and similar technologies described in section 7.

3. Why We Use Your Data

We use your personal data for the following purposes:

Purpose	Legal Basis
Process and deliver your orders, including the manufacturing of your personalized jewelry	Performance of a contract
Manage payments and prevent fraud	Performance of a contract and legitimate interest
Send you emails related to your order (confirmation, shipping, tracking)	Performance of a contract
Respond to your requests and provide after-sales service	Performance of a contract and legitimate interest
Send you our offers and news by email	Consent
Remind you of an abandoned cart	Legitimate interest or consent depending on your country
Analyze site traffic and improve our services	Consent (analytical cookies)
Display personalized advertisements and measure their performance	Consent (advertising cookies)
Comply with our legal, accounting, and tax obligations	Legal obligation

4. With Whom We Share Your Data

We never sell your personal data. We only share it with service providers who help us operate our store:

Shopify Inc.: hosting of our online store and order management. You can view Shopify's privacy policy at https://www.shopify.com/legal/privacy
Payment providers (Shopify Payments, PayPal, and other payment methods offered during checkout): secure processing of your payments
Manufacturing workshops: transmission of personalization information necessary for the creation of your jewelry
Carriers and logistics services: delivery of your orders
Emailing tools: sending transactional emails and, with your consent, our marketing communications
Analytics and advertising tools (Google, Meta, Pinterest, TikTok): audience measurement and advertising campaigns, only with your consent
Administrative or judicial authorities: when required by law

Each of these providers only has access to the data strictly necessary for their mission and is committed to protecting it.

5. International Data Transfers

Liora Jewelry LLC is established in the United States. Your data may therefore be transferred and processed outside your country of residence, including outside the European Union.

When we transfer data of residents of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including standard contractual clauses adopted by the European Commission and, where applicable, the EU-U.S. Data Privacy Framework for certified providers.

6. Retention Period

We retain your data only for as long as necessary for the purposes for which it was collected:

Order and billing data: 10 years, in accordance with our accounting obligations
Customer account data: until your account is deleted, then 3 years from your last activity
Prospecting data (newsletter): 3 years from your last contact or until you unsubscribe
Exchanges with customer service: 3 years from the closing of the request
Browsing data and cookies: maximum 13 months

7. Cookies and Similar Technologies

Our site uses cookies, small files placed on your device during your visit. We use three categories of cookies:

Essential cookies: indispensable for the functioning of the site (cart, payment, security). They do not require your consent.
Analytical cookies: allow us to understand how the site is used in order to improve it.
Advertising cookies: allow us to offer you advertisements tailored to your interests on other sites and social networks, and to measure the effectiveness of our campaigns.

During your first visit, a banner allows you to accept or refuse non-essential cookies. You can change your choices at any time via the “Cookie Preferences” link at the bottom of the page or by configuring your browser. Refusing non-essential cookies does not prevent browsing or purchasing on our site.

For more information on cookies used by Shopify, you can consult https://www.shopify.com/legal/cookies

8. Your Rights

In accordance with applicable regulations, you have the following rights regarding your personal data:

Right of access: obtain a copy of the data we hold about you
Right to rectification: correct inaccurate or incomplete data
Right to erasure: request the deletion of your data, subject to our legal retention obligations
Right to restriction of processing: request the temporary suspension of the processing of your data
Right to data portability: receive your data in a structured, machine-readable format
Right to object: object to the processing of your data based on our legitimate interest, and at any time to commercial prospecting
Right to withdraw your consent: at any time, without affecting the lawfulness of processing carried out beforehand
Right to define directives regarding the fate of your data after your death

To exercise these rights, please write to us at contact@naloraofficial.com, specifying the subject of your request. We may ask for proof of identity if necessary. We will respond within one month.

If you believe your rights are not being respected, you can lodge a complaint with the supervisory authority in your country. In France, this is the CNIL (www.cnil.fr).

You can unsubscribe from our marketing emails at any time by clicking on the unsubscribe link at the bottom of each message.

9. Information for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights: the right to know what data we collect, the right to request its deletion, the right to correct inaccurate data, and the right not to be discriminated against for exercising these rights.

We do not sell your personal data. Some advertising cookies may constitute a “share” within the meaning of the CCPA; you can refuse this via our cookie preferences. To exercise your rights, please write to us at contact@naloraofficial.com.

10. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration. All data exchanged with our site is encrypted via the SSL/TLS protocol. Payments are processed by PCI DSS certified providers.

11. Minors

Our site is intended for adults. We do not knowingly collect personal data from minors under 16 years of age. If you believe a minor has provided us with data, please contact us so that we can proceed with its deletion.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or regulations. The date of the last update is at the top of this page. In the event of a significant change, we will notify you by email or by a notice on our site.