Privacy Policy
PRIVACY POLICY
Last updated: 18 October 2026
At Norveliana, we care about your privacy. This Privacy Policy explains what personal data we collect when you visit norveliana.com or shop with us, why we collect it, how we use it, and what rights you have. We process your data in line with the EU General Data Protection Regulation (GDPR) and applicable Belgian data protection law.
1. WHO WE ARE
Norveliana is the online store for home decor and gifts operated by:
Museaura B.V.
Rue des Mauvaises-Vignes 215 Bus 1
4020 Liège
Belgium
Company number (KBO): 1019.369.535
VAT number: BE1019369535
Director: Khaira Menad Gueddache
Email: info@norveliana.com
Phone: +32 480 82 22 57
Museaura B.V. is the data controller responsible for the processing of your personal data. If you have any questions about this policy or your data, please contact us at info@norveliana.com.
2. WHAT DATA WE COLLECT
We only collect the data we need to run our store, process your orders and improve your shopping experience.
Data you give us directly:
When you place an order, create an account, sign up for our newsletter or contact us, we may collect your name, email address, phone number, billing address, delivery address, order details and any messages you send us.
Payment data:
Payments are handled by secure third-party payment providers. We do not store your full card details on our systems. We only receive confirmation that a payment was made, along with limited information such as the payment method and transaction reference.
Data collected automatically:
When you visit our website, certain technical data is collected automatically, such as your IP address, browser type, device type, operating system, pages visited, time spent on pages, referring website and approximate location based on your IP address. Some of this data is collected through cookies and similar technologies (see Section 7).
3. WHY WE USE YOUR DATA AND OUR LEGAL BASIS
We use your personal data for the following purposes:
To process and deliver your orders, handle payments, send order and shipping confirmations, and manage returns and refunds. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
To answer your questions and provide customer service. Legal basis: performance of a contract or our legitimate interest in helping our customers (Article 6(1)(b) and (f) GDPR).
To manage your customer account, if you choose to create one. Legal basis: performance of a contract (Article 6(1)(b) GDPR).
To send you our newsletter and marketing emails, only if you have signed up. Legal basis: your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email.
To analyse how our website is used and to show you relevant advertising, only where you have agreed to the relevant cookies. Legal basis: your consent (Article 6(1)(a) GDPR).
To keep our website secure, prevent fraud and fix technical problems. Legal basis: our legitimate interest in running a safe and reliable store (Article 6(1)(f) GDPR).
To keep invoices and accounting records as required by Belgian tax and accounting law. Legal basis: legal obligation (Article 6(1)(c) GDPR).
4. WHO WE SHARE YOUR DATA WITH
We never sell your personal data. We only share it with trusted partners where this is necessary to run our store, and only to the extent needed:
Website and store platform: Our store is built and hosted on Wix (Wix.com Ltd.), which processes data on our behalf to operate the website, checkout and customer accounts.
Payment providers: Such as Wix Payments, PayPal, Klarna or other providers shown at checkout, to process your payment securely.
Shipping and delivery partners: To deliver your order, we share your name, delivery address and, where needed, your phone number and email address with the carrier.
Email and marketing tools: To send order emails and, if you have agreed, our newsletter.
Analytics and advertising partners: Such as Meta (Facebook and Instagram) and Google, only if you have accepted the relevant cookies.
Authorities and advisers: Where required by law, for example tax authorities, or our accountants and legal advisers.
All service providers acting on our behalf are bound by data processing agreements and may only use your data according to our instructions.
5. INTERNATIONAL DATA TRANSFERS
Some of our service providers, such as Wix, Meta and Google, may process data outside the European Economic Area (EEA), including in the United States or Israel. Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision by the European Commission (including the EU-U.S. Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
6. HOW LONG WE KEEP YOUR DATA
We keep your personal data only for as long as needed for the purposes described in this policy:
Order and invoice data are kept for the period required by Belgian accounting and tax law, generally 10 years.
Customer account data are kept for as long as your account is active. You can ask us to delete your account at any time.
Newsletter data are kept until you unsubscribe.
Customer service messages are kept for as long as needed to handle your request, and then for a reasonable period in case of follow-up questions.
Cookie data are kept for the periods shown in our cookie banner and settings.
After these periods, your data is deleted or anonymised.
7. COOKIES AND TRACKING
Our website uses cookies and similar technologies. Some cookies are strictly necessary for the website to work, for example to keep items in your shopping cart and to process your checkout. These are used without your consent.
Other cookies, such as analytics and marketing cookies (for example the Meta Pixel and Google tools), are only used if you agree to them through our cookie banner. These help us understand how visitors use our store and show you relevant ads on other platforms.
You can change or withdraw your cookie consent at any time through the cookie settings on our website or in your browser settings. Withdrawing consent does not affect the lawfulness of processing before the withdrawal.
8. YOUR RIGHTS
Under the GDPR, you have the following rights regarding your personal data:
Right of access: You can ask for a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate or incomplete data.
Right to erasure: You can ask us to delete your data, unless we must keep it by law.
Right to restriction: You can ask us to limit how we use your data in certain cases.
Right to data portability: You can ask to receive your data in a structured, commonly used format, or have it sent to another company.
Right to object: You can object at any time to processing based on our legitimate interests, and to the use of your data for direct marketing.
Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time.
To exercise any of these rights, simply email us at info@norveliana.com. We will respond within one month. We may ask you to confirm your identity before handling your request.
9. RIGHT TO LODGE A COMPLAINT
If you believe we have not handled your personal data properly, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a data protection supervisory authority. Our lead supervisory authority is:
Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données)
Rue de la Presse 35 / Drukpersstraat 35
1000 Brussels
Belgium
Website: www.dataprotectionauthority.be
You may also contact the data protection authority in the EU country where you live or work.
10. DATA SECURITY
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Our website uses SSL encryption, and payments are processed through secure, certified payment providers. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
11. CHILDREN
Our store is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time, for example when we add new services or when the law changes. The latest version will always be available on our website, with the date of the last update shown at the top.
13. CONTACT US
If you have any questions about this Privacy Policy or how we handle your data, please get in touch:
Norveliana
Museaura B.V.
Rue des Mauvaises-Vignes 215 Bus 1
4020 Liège
Belgium
Email: info@norveliana.com
Phone: +32 480 82 22 57