Privacy policy

PRIVACY POLICY

[Last Update: May 4, 2026]

This Privacy Policy (“Privacy Policy”) describes how Veridian Flow LLC. (“Company”, “we” or “our”) collects, uses, and discloses Personal Data (as defined below), in connection with:

• Visitor of our website available at: www.noritamy.com and other digital pages we operate that directs to our website, and any content, features or services included therein (“Website” and “Visitors”, respectively);
• Individuals who have placed an order to purchase jewelry and other available products and goods through our Website (“Customer” and “Product”). 

Visitors and Customers shall be further referred to herein as “you” and “your”. The Website and any services provided therein including order placement and any services related to the Product shall be further referred to herein as “Services”.

This Privacy Policy further explains how we safeguard your Personal Data, how such data may be used or shared with others, and how you may exercise your rights related to your Personal Data, as required under applicable data protection laws. 

This Privacy Policy is an integral part of our Terms of Serviceat: https://www.noritamy.com/policies/terms-of-service (“Terms”). Any capitalized terms not defined herein shall have the meaning ascribed to them in the Terms.

UNDER APPLICABLE DATA PROTECTION LEGISLATION, YOU ACKNOWLEDGE THAT YOU ARE NOT UNDER ANY STATUTORY OBLIGATION TO PROVIDE PERSONAL DATA TO THE COMPANY. HOWEVER, IF YOU DO NOT PROVIDE US WITH CERTAIN PERSONAL DATA, WE WILL NOT BE ABLE TO FULFILL CERTAIN PURPOSES, FOR EXAMPLE, PROVIDE CERTAIN SERVICES OR ENABLE CERTAIN USE OF OUR WEBSITE AND SERVICES, ALL AS DESCRIBED UNDER SECTION 3 “‎THE DATA WE COLLECT & PURPOSE OF COLLECTION AND USE‎” OF THIS PRIVACY POLICY. 

This Privacy Policy governs the use, processing and sharing of Personal Data. It further includes disclosure specifications required under certain data protection laws (for example our lawful basis for processing Personal Data as required under the EU and UK General Data Protection Regulations (“GDPR”). Certain jurisdictions require that applicable disclosures will be provided in a certain way and format, and therefore if you are a US resident, please refer to Section 12 “Additional Notice for US Residents”, which includes additional information about privacy rights for U.S. residents. If you are a California resident – please review our CCPA Privacy Notice, which serves as a Notice at Collection as required under the California Privacy Rights Act (“CCPA”).

 

1. POLICY AMENDMENTS

We reserve the right to amend this Privacy Policy from time to time, at our sole discretion. The most recent ‎version of the Privacy Policy will always be posted on the Website and be reflected in the “Last Update” ‎heading. We will provide notice to you if these changes are material, and, where required by applicable law, ‎we will obtain your consent. Otherwise, any amendments to the Privacy Policy will become effective ‎immediately upon the display of the modified Privacy Policy. We recommend you review this Privacy Policy ‎periodically to ensure that you understand our most updated privacy practices.‎

 

2. CONTACT INFORMATION AND DATA CONTROLLER INFORMATION

Veridian Flow LLC is the “data controller” or “business” (as such term is defined under privacy legislation) of the Personal Data collected by us, as detailed under this Privacy Policy. This means that the Company is responsible for deciding how, and the purposes for which, your Personal Data is processed as well as to enable you to exercise your rights related to your Personal Data processed by the Company.

For any question, inquiry or concern related to this Privacy Policy or the collection and use of your Personal Data, you may contact our privacy team as follows:

Address: 140 Broadway st, New York, NY, 10005, USA

Email address: hey@noritamy.com

Note That, in the event your order was processed and the Product was sold to you by our Franchisee (as detailed in our Terms of Service), such Franchisee is also the “data controller” or “business” of the Personal Data collected and processed when you place an order and for order fulfillment and billing purposes.

 

3. THE DATA WE COLLECT & PURPOSE OF COLLECTION AND USE 

Depending on your interaction with us and our Services, we may collect certain information related to such interaction and use, as follows: 

“Non-Personal Data” – meaning, information which does not identify a specific natural person and cannot reasonably be used for such identification. Non-Personal Data includes technical information regarding your device or browser, type of operating system, scope, frequency, interactions with the Website, and other technical information regarding the device used – all when collected on an aggregate basis, or otherwise not combined with any identifiers. Non-Personal Data may be used by us without limitation and for any purpose. Some of this information may be considered “de-identified” under U.S. privacy laws and when we rely on data that has been “de-identified”, we will take reasonable measures to ensure that the de-identified information cannot be associated with an individual, household, or device and not attempt to re-identify it. We may further process and anonymize Personal Data in a manner that the data will be Non-Personal Data.

“Personal Data” – meaning information that identifies an individual or may with reasonable effort or by reasonable means identify an individual. This may include online identifiers such as IP address, name, emails, etc., and other information that is associated with you. If we combine Personal Data with Non-Personal Data, we will treat the combined data as Personal Data.

Below, we detail the types of Personal Data we collect and how and for which purposes we use your Personal Data.

(i) Online Identifiers & Usage Data

Personal Data Sets:

When you access our Website or otherwise interact with its content and features or use our Services (including if you are our Customer and you access and interact with our Website to place an order, open an Account or registered to our Loyalty Program), certain information regarding your access and use is collected through use of our, or our third-party service providers’ and marketing partners’, cookies and tracking technologies (for more information, see Section 5 below “Cookies and Similar Tracking Technologies We Use”).

This information includes online identifiers associated or transmitted from your browser anddevice, such as Internet Protocol address (IP), a “cookie” identifier, user agent, tags, and other unique online identifiers generated (“Online Identifiers”). Online Identifiers, such as IP address, are also used to extract your approximate location (e.g., country and Zip).

This also includes information regarding your use and interactions with the Website such assession durations and time and date stamp (i.e., when have you accessed our Website or used certain Services and for how long), the content you viewed, click streams, actions made, etc., crash data,  referring URL, language preferences, Products added to the cart, etc. (collectively “Usage Data”).

If the Usage Data is associated with an Online Identifier it is processed by us as Personal Data.

Purpose of Collection and Use:

Online Identifiers and Usage Data are collected and used for the following purposes:  

● Services’ functionality, operation, security, fraud prevention, and to resolve errors and technical issues;
● To customize the Services based on your approximate location (i.e., to present you the webpages with applicable language and currency applicable to your territory, etc.)
● To have internal analytics and statistics, used by us to enhance and improve our Services.
● To promote, advertise and market our Website and Services. This includes targeted advertisements (which is further subject to your cookies’ settings and preferences – see section 5 of this Privacy Policy “Cookies and Similar Tracking Technologies We Use”).

Lawful Basis (where the GDPR applies):

Online Identifiers and certain Usage Data which are collected for the basic operation of the Services, through first party cookies, will be processed based on our legitimate interest.

Depending on your jurisdiction, third-party cookies will be able to process Personal Data solely if you provided your consent.  You may withdraw consent or otherwise change your cookies’ settings and preferences – see Section 5 of this Privacy Policy “Cookies and Similar Tracking Technologies We Use”.

(ii) Contact Information & Communications

Personal Data Sets:

We collect contact information, such as, name, date of birth, email address, phone number and address (“Contact Information”), if you contact us with any inquiries, be provided with information regarding our Product, sign up to receive our marketing materials and newsletter(including an annual promotional code during your birth month), contact our customer support, etc., either through an online form available on our Website, by sending us an email or by any other means.

We will further collect and store the content of communications with you, including email correspondence and any information you choose to share with us through your correspondence or other communications with us, and may also process data related to such communications such as interactions with email communications (access time and date), etc. (“Communications Data”).

Purpose of Collection and Use:

Contact Information and Communications Data are collected and used for the following purposes:  

● To respond to your inquiries or send you the information and to send you marketing material related to our Services in which you have shown your interest, including promotions, such as special offers.
● To have records of our communications, to improve our support and marketing efforts, or in the event we reasonably determine it is needed in order to comply with any regulatory requirement, or for handling and defending against any dispute you might have with us.
● To have internal analytics and statistics, used by us to enhance and improve our Services.

Where applicable, we will further store your Contact Information in order to include you, and maintain, our marketing and mailing lists, as well as the "opt-out" list (solely the necessary information for such purpose), to ensure we respect your choice and comply with applicable laws in this regard.

Lawful Basis (where the GDPR applies):

In the event you contact us or sign up to receive or marketing materials, we process Contact Information in order to respond to your inquiry or request, based on your consent. You can unsubscribe from receiving marketing materials at any time through the “unsubscribe” link we provide within the body of the message or by contacting us.

In other cases, Contact Information and Communications Data are processed and stored subject to our legitimate interests.

(iii) Information Provided When You Place Orders

Personal Data Sets:

If you place an order, as part of the checkout process, you will be requested to provide us with certain information such as your full name, email address, telephone number, as well as billing and shipping address.

Note that, you will further be required to provide your payment method details, however, as your payment is being processed by our third-party payment processor, we will not store or have access to your full payment information, rather, where applicable, solely the 4 last digits of your payment method and expiry date which we must obtain for record keeping purposes.

We will further retain records of the Products’ orders you have made from us, any returns or refund provided, promotions or coupons used, etc.

(collectively “Orders Information”).

Purpose of Collection and Use:

Orders Information is collected and used for the following purposes:  

● To provide the Services, including to fulfil and deliver your orders, to process returns, handle any inquiry you may have.
● To communicate with you and send you transactional and operational messages (for example, a confirmation message, billing, invoices, shipping status or updates to your orders).
● To send you marketing communications, materials, and other information regarding our Products, including special offers, etc. Where required under applicable law, we will seek for your prior consent and in any event, you may opt-out and unsubscribe from marketing communications, at any time. However, please note that even if you opt-out from our marketing communication, we will still use your contact details to send you service-related and operational communications.
● To maintain bookkeeping records and to comply with any regulatory requirement (e.g., tax related, etc.).
● To have internal analytics and statistics, used by us to enhance and improve our Services, as well as to customize our Services and promotional offers, to analyze Customers’ preferences, enhance and personalize your shopping experience, and improve our Services.

Lawful Basis (where the GDPR applies):

Order Information processed to provide you the Services and send you service-related, transactional and operational communications, is based on contract necessity.

In other cases, including for marketing and bookkeeping purposes, as well as to enhance and improve our Services, Orders Information is processed and stored subject to our legitimate interests.

(iv) Account Data

Personal Data Sets:

If you choose to create an account with us (“Account”), during the registration process you will be requested to provide us with certain information such as your full name, email address and telephone number. If you choose to sign in through your account on third-party platforms (as we may make available) we will be provided with certain information about you, depending on your privacy settings in such accounts, which may include your full name, email address and other public profile information.

Additionally, will collect actions made on your account such as Products added to your cartor Wishlist, etc. (collectively “Account Data”). 

Purpose of Collection and Use:

Account Data is collected and used for the following purposes:  

● To create and designate the Account, authentication and validate access, enable log-in, access and use of the Services.
● To send you with needed service, operation or transaction information related to our engagement (e.g., billing and invoicing, technical updates, etc.).
● To send you marketing communications, materials, and other information regarding our Products, including special offers, etc. Where required under applicable law, we will seek foryour prior consent and in any event, you may opt-out and unsubscribe from marketing communications, at any time. However, please note that even if you opt-out from our marketing communication, we will still use your contact details to send you service-related and operational communications.

Lawful Basis (where the GDPR applies):

We process your Account Data as part of the performance of our contract with you.

For marketing purposes, we will process your data subject to our legitimate interests.   You can opt-out at any time using the “unsubscribe” or other option we provide within the body of the message.

(v) Loyalty Program

Personal Data Sets:

As part of our Services, you may register to our Loyalty Program to receive special offers and discounts exclusive to our program members. During the registration process you will be requested to provide us with certain information such as your full name, and email address. We will further collect data related to your Loyalty Program member account together with your Orders Information to calculate your loyalty points (“Loyalty Program Data”).

Purpose of Collection and Use:

Loyalty Program Data are collected and used for the following purposes:  

● To create and designate your loyalty member account, authentication, enable log-in, access and use of the Services.
● To calculate and manage your loyalty points.  
● To send you information related to your loyalty member account.
● For Direct Marketing.

Lawful Basis (where the GDPR applies):

We process your Loyalty Program Data as part of the performance of our contract with you.

For Direct Marketing purposes, we will process your data subject to our legitimate interests.   You can opt-out at any time using the “unsubscribe” or other option we provide within the body of the message

In addition, we will further maintain a suppression file – meaning lists of applicable email addresses that have requested to opt-out, under our legitimate interest and to ensure we comply with such preference and choice.

 

Please note that, in addition to the purposes set forth above, we may use certain Personal Data to prevent potentially prohibited or illegal activities, fraud, misappropriation, infringements, identity thefts, and any other misuse of the Services and to enforce our Terms, as well as to protect the security or integrity of our databases and the Services, and to take precautions against legal liability. We will not collect additional categories of Personal Data or use the Personal Data for any purpose that is materially different, unrelated, or incompatible purpose without obtaining your consent unless we are required or permitted by applicable law.

 

4. HOW WE COLLECT YOUR DATA

Depending on the nature of your interaction with us and our Websites and Services, we may collect Personal Data as follows:

● Automatically – we may use cookies or similar tracking technologies to gather some information automatically when you interact with our Websites and Services (see Section 5 of this Privacy Policy “Cookies and Similar Tracking Technologies We Use”.
● Provided directly by you – we will collect information if and when you choose to provide us with the information, such as where you create an Account, place and order, contact us, etc.

 

5. COOKIES AND SIMILAR TRACKING TECHNOLOGIES WE USE

We use “cookies” (or similar tracking technologies such as tags, pixels, etc.) when you access to, interact with, or use our Websites. The use of cookies is a standard industry-wide practice. A “cookie” is a small piece of information that a website assigns and stores on your device or browser while you are viewing a website. Cookies can be used for various purposes, including allowing you to navigate between pages efficiently, enable automatic activation of certain features (e.g., shopping cart), for statistical purposes, as well as for advertising purposes.

The information generally collected and stored by cookies includes Online Identifiers (such as cookie ID, IP address, etc.) and Usage Data (such as actions made, click stream, time and date stamp, content viewed, directing URLs, etc.) – both as defined under Section 3 of this Privacy Policy “The Data We Collect & Purpose of Collection and Use”).  

Cookies can be either placed by us, or by third parties such as analytic providers, marketing partners, social media, etc. In addition, the duration of such cookies (meaning the period until such are deleted) can be either “session” – meaning deleted when you close your browser, or “persistent” – meaning longer periods according to their purpose and settings, provided however that you can delete or block cookies through your browser or device settings as further explained below.

Note that, most browsers will allow you to erase cookies from your computer’s hard drive, block acceptance of cookies, or receive a warning before a cookie is stored. Please refer to the setting or the support page of your browser to learn more about how you can adjust your privacy and security settings.

Please note that once you choose to opt out or disable cookies, some features of our Website and Services may not operate properly and your online experience may be limited. In addition, even if you do opt-out, you may still receive some content and advertising, however, it will not be targeted content or advertising.

Where we use third-party advertising cookies, such third-party may independently collect Personal Data, through the use of such tracking technologies, and may combine such information with other information they have independently collected relating to your online activities across the Internet, for the purpose of enhanced targeting functionality and delivering personalized ads, as well as providing aggregated analytics related to the performance of advertising campaigns you interacted with. These third parties collect and use this information under their own privacy policies and are responsible for their practices.

 

6. SHARING PERSONAL DATA WITH THIRD PARTIES

We share your Personal Data with third parties, including our affiliated companies, partners or service providers that help us provide, operate and manage our Websites, business operation, marketing operations and our Services. The categories of such third-party recipients, the type of Personal Data we will share and the purposes for which we will share the Personal Data are as follows:

● Our Service Providers– we share Personal Data with our service providers to perform requested services on our behalf. These third parties may include technology and hosting providers (such as cloud hosting, analytic tools, management or security tools, communications tools, processing payments), as well as shipping and delivery services, etc. These providers are prohibited from using Personal Data we share with them for any purposes other than providing us with the requested functions and services. The type of Personal Data that will be shared can be any data processed by us, as needed for the provisions of the specific services.
● Marketing Partners – we may share Personal Data with marketing partners we engage with or use their tools and services to market and promote our Website and Services, for example, for our marketing campaigns and targeted online advertising. These partners may include social media platforms or other marketing services operators. The Personal Data shared may include Online Identifiers and Usage Data, (as defined under Section 3 of this Privacy Policy “The Data We Collect & Purpose of Collection and Use”). These partners may combine your Personal Data with other data they collect independently from your visits and interactions across the web.
● Our Company Group & Corporate Transactions – we share Personal Data, internally within our company group to fulfil certain purposes for which Personal Data is collected and retained, or in the event of a corporate transaction (for example, sale of a substantial part of business, merger, consolidation, etc.). The types of Personal Data that will be shared can be any data processed by us, as needed, however our affiliated companies or acquiring company will assume the rights and obligations as described under this Privacy Policy.
● Enforcement of our Rights, Security and Fraud Prevention & Law Enforcement - we may disclose certain Personal Data to law enforcement, governmental agencies, or authorized third parties as needed to comply with applicable laws or in response to a verified order. We may further share Personal Data to enforce our policies and agreements, as well as defend our rights, including the investigation of potential violations thereof, alleged illegal activity or any other activity that may expose us, you, or third parties to legal liability, and solely to the extent required. The types of Personal Data that will be shared are as needed to fulfil the purposes set forth above, for example, subject to law enforcement authority request.

For avoidance of doubt, we may further transfer and disclose or otherwise use Non-Personal Data or information which is linked to anonymous random identifiers or information that is aggregated in a non-identifiable way, at our discretion and without limitations.

 

7. YOUR RIGHTS RELATED TO YOUR PERSONAL DATA

Depending on your relationship with us, your jurisdiction and the data protection laws that apply to you, you have the right to control and request certain limitations or rights to be executed.

The principal rights that may apply to your Personal Data (subject to your jurisdiction and additional conditions) may include:  

• Right to Be Informed – you have the right to be provided with information regarding our privacy practices, including the Personal Data we collect and how we use it – as we detailed under this Privacy Policy. If you have any additional questions, you can contact us as set forth under this Privacy Policy.
• Right to Access/Inspect Your Personal Data – you have the right to ask us to confirm whether or not we collect and use your Personal Data and which Personal Data we specifically hold about you, and to ask for a copy of your Personal Data or otherwise access it.
• Right to Correction/Rectification – you have the right to ask us to correct inaccuracies or update your Personal Data we hold or request deletion for inaccurate Personal Data, considering and subject to the nature and purposes of the processing.  
• Right to Deletion/“To Be Forgotten” – you have the right to request the deletion of certain Personal Data we process, if specific conditions are satisfied, for example, if you think  we no longer need it for the purpose we collected it; where we have used it unlawfully; where the collection was based on your consent; or where we are subject to a legal obligation to delete  it. Deletion request will be subject to our rights and obligations under applicable law (for example, our legitimate interests to maintain record keeping, providing a service you requested, taking actions reasonably anticipated within the context of our ongoing business relationship with you, debugging and detecting security incidents, protecting against deceptive, fraudulent, or illegal activity; exercising rights under law, etc.). 
• Right to Withdraw Consent – when we collect and process your Personal Data based on your consent, you have the right to withdraw such consent at any time.
• Right to Opt-Out– you have the right to opt-out from receiving our marketing communications, if applicable, by unsubscribing through the message received.
• Right to Object – you have the right to object to any use of your Personal Data which is based on our legitimate interest if you believe your fundamental rights and freedoms to data protection outweigh our legitimate interest.
• Right to Restrict Processing – you have the right to ask us to restrict or limit the purpose for which we process your Personal Data, where certain conditions are satisfied.  
• Data Portability Right – you have the right to request to be provided with a copy of your Personal Data in a portable format and, to the extent technically feasible, readily usable format that allows you to transmit the Personal Data. 
• Right to Appeal or Lodge a Complaint – If we decline to take action on your request to exercise your rights, we will inform you within the timeframe set out under applicable law, and we will explain the justification for declining your request as well as how you may appeal, if applicable. Where applicable, we will inform you of action taken or not taken in response to your appeal, including the reasons for the decision. If the appeal is denied, you may submit a complaint to the applicable authority or Attorney General of your state. Where the GDPR applies, you have the right to lodge a complaint with the applicable Data Protection Authority in the EU or the Information Commissioner in the UK. 

You may submit a request to exercise most of your privacy rights under applicable privacy laws by contacting us at: : hey@noritamy.com. We will respond and fulfill your request within the timeframe required under applicable laws. When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.

 

8. DATA RETENTION

We retain Personal Data we collect as long as it remains necessary for the purposes set forth above, all in accordance with applicable laws, or until an individual expresses a preference to delete its Personal Data.

In certain circumstances, we will retain your Personal Data for longer periods of time and mainly:

● Where we are required to retain Personal Data in accordance with legal, regulatory, tax, or accounting requirements;
● Where we deem retention is necessary to obtain an accurate record of your dealings with us in the event of any complaints or challenges; or
● If we reasonably believe there is a prospect of litigation relating to your Personal Data.

Please note that, except as required by applicable law, we may at our sole discretion, delete data from our systems, without notice to you, once we deem it is no longer necessary for such purposes.

 

9. DATA SECURITY

Securing your Personal Data is of high priority. We design our systems with your security and privacy in mind. We have implemented physical, technical, and administrative security measures that comply with applicable laws and industry standards, such as encryption, access restrictions and permissions, etc.

Note that we cannot be held responsible for unauthorized or unintended access beyond our control, and we make no warranty, express, implied, or otherwise, that we will always be able to prevent such access.

Please contact us at: hey@noritamy.com, if you feel that your privacy was not dealt with properly, in a way that was in breach of our Privacy Policy, or if you become aware of a third party's attempt to gain unauthorized access to any of your Personal Data. We will make a reasonable effort to notify you and the appropriate authorities (if required by applicable law) if we discover a security incident related to your Personal Data.

 

10. INTERNATIONAL DATA TRANSFER

Our data servers in which we host and store the information and our facilities from which we provide Services are located globally. In the event that we need to transfer your ‎Personal Data out of your jurisdiction, we will take appropriate measures to ensure that your Personal Data ‎receives an adequate level of protection as required under applicable law. Furthermore, when Personal ‎Data that is collected within the European Economic Area ("EEA") is transferred outside of the EEA to a ‎country that has not received an adequacy decision from the European Commission, we will take necessary ‎steps in order to ensure that sufficient safeguards are provided during the transferring of such Personal ‎Data, in accordance with the provision of the standard contractual clauses or other mechanism approved by the European Union. ‎

 

11. PROTECTING CHILDREN

The Services are not intended for use by children (the phrase "child" shall mean an individual that is under ‎the age defined by applicable law) and individuals under the age of 16 are not permitted to place orders. Accordingly, we do not knowingly process children's information. We will discard any ‎information we receive from a user that is considered a "child" immediately upon discovering that such a ‎user shared information with us. Please contact us at :hey@noritamy.com, if you have reason to ‎believe that a child has shared any information with us. ‎

 

12. ADDITIONAL NOTICE FOR US RESIDENTS

Residents of certain U.S. states may have additional rights under applicable privacy laws and be entitled to additional disclosures.

"Personal Data" under applicable US privacy laws, generally means any information that is linked or reasonably linkable to an identified or identifiable individual (and usually does not include publicly available information that is lawfully made available from government records, or that a consumer has otherwise made available to the public; de-identified or aggregated consumer information; or information excluded from the states laws scope.)

We are required to provide you with a clear and accessible privacy notice that includes the categories of Personal Data processed, purpose of processing, instructions for exercising consumer rights and appealing decisions, categories of Personal Data shared with third parties, categories of third parties with whom data is shared, and any sale of data or targeted advertising.

Categories of Personal Data & Categories of third parties with whom Personal Data is shared:

Under the Section “‎THE DATA WE COLLECT & PURPOSE OF COLLECTION AND USE ”of this Privacy Policy, we describe our collection and processing of Personal Data, the categories of Personal Data that we are collecting and processing, and the purposes for which Personal Data is processed, stored or used.

Additionally, under the Section “SHARING DATA WITH THIRD PARTIES” of this Privacy Policy, we detail and disclose the categories of third parties we share Personal Data with. We will not collect additional categories of Personal Data or use the Personal Data we collected for a materially different, unrelated, or incompatible purpose without obtaining your consent.

“Sale” of Personal Data:

Under US privacy laws, in principle, the term “sale” is referring to disclosing or making available Personal Data to a third-party in exchange for monetary or other valuable consideration. We do not “sell” information as most people would commonly understand that term, we do not, and will not, disclose your Personal Data in direct exchange for money or some other form of payment. However, when we use marketing cookies on our Websitefor advertising purposes, including targeted advertising, this practice is defined as a “sale” under certain US laws.

Consumer Rights:

Residents of certain U.S. states may have additional rights under applicable privacy laws, subject to certain limitations, which may include:

● Access - the right to confirm whether we are processing their Personal Data and to obtain a copy of their Personal Data in a portable and, to the extent technically feasible, readily usable format.
● Delete - the right to delete their Personal Data provided to or obtained by us.
● Correct - the right to correct inaccuracies in their Personal Data, taking into account the nature and purposes of the processing of the Personal Data.
● Opt-Out of Sale - the right to opt out of the “sale” of Personal Data – meaning to opt out of use of cookies for advertising purposes, as further explained under Section 5 of this Privacy Policy.

We do not profile you in a manner that has a significant effect on you or other individuals, therefore we do not provide an opt-out option from such use of Personal Data.

The Section “YOUR RIGHTS RELATED TO YOUR PERSONAL DATA” provides additional information regarding your principal rights.

Exercising Your Privacy Rights:

You may submit a request to exercise most of your privacy rights under U.S. state privacy laws by contacting us at: hey@noritamy.com.

When you submit a request, we will take steps to verify your identity and your request by matching the information provided by you with the information we have in our records. In some cases, we may request additional information to verify your identity, or where necessary to process your request. If we are unable to verify your identity after a good faith attempt, we may deny the request and, if so, will explain the basis for denial and how to remedy any deficiencies, where applicable.

Authorized agents may initiate a request on behalf of another individual by contacting us. Authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.  

If we decline to take action on your request, we shall so inform you without undue delay, within the timeframe set out under applicable law. Our notification will include a justification for declining to take action and instructions on how you may appeal. Within the timeframe set out under applicable law of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint to the applicable authority or Attorney General of your jurisdiction.