Privacy policy

Last updated: 4 September 2026

This policy explains what personal data Nortlex Commerce LTD collects when you use nortlex.com, why we collect it, who we share it with, and what rights you have. We are the data controller for that information.

Who we are

Nortlex Commerce LTD, trading as Nortlex, registered in England and Wales.
Registered office: 24 Pembridge Square, London, Greater London, W2 4DR, United Kingdom.
Email: support@nortlex.com · Phone: +44 121 516 8820

What we collect

  • Order information — your name, delivery and billing address, email address, phone number, and the items you bought.
  • Payment information — processed directly by our payment provider. We receive confirmation that a payment succeeded, the card type and the last four digits. We never see or store your full card number.
  • Account information — if you create an account, your login details and saved addresses.
  • Support correspondence — emails and calls about your order.
  • Device and usage data — IP address, browser and device type, pages viewed, and how you reached the site. This is collected through cookies and similar technologies, and only where you have consented to analytics or marketing cookies.

Why we use it, and our lawful basis

  • To fulfil your order — take payment, dispatch your order, handle returns and refunds. Lawful basis: performance of a contract.
  • To provide customer support — answer questions about sizing, delivery and returns. Lawful basis: performance of a contract.
  • To meet legal obligations — keep tax and accounting records. Lawful basis: legal obligation.
  • To prevent fraud — screen orders for fraudulent payment. Lawful basis: legitimate interests.
  • To understand how the site is used — measure traffic and improve the shop. Lawful basis: consent, given through the cookie banner.
  • To advertise — show our products in Google Shopping and measure whether an advert led to a sale. Lawful basis: consent, given through the cookie banner.
  • To send marketing emails — only if you sign up. You can unsubscribe from any email. Lawful basis: consent.

Who we share it with

We do not sell your personal data. We share it only with the providers that make the shop work:

  • Shopify Inc. — hosts this store and processes your order data on our behalf. Shopify is our platform provider and data processor.
  • Mollie B.V. — our payment provider, based in the Netherlands, processes card payments. You are redirected to Mollie to enter your card details, so they go directly to Mollie over an encrypted connection and are handled under the PCI-DSS standard. Nortlex never receives your full card number.
  • Royal Mail — receives your name, delivery address and contact details so your order can be delivered and tracked.
  • Google LLC — we use Google Analytics to understand how visitors use the site, and Google Merchant Center and Google Ads to list our products in Google Shopping and to measure advertising. These only run once you accept analytics or marketing cookies.
  • Professional advisers and authorities — accountants, or law enforcement where we are legally required to disclose.

Cookies

We use cookies to keep your basket working, to measure site usage, and to measure advertising. Non-essential cookies only run if you accept them in the cookie banner, and you can change your choice at any time. Our Cookie Policy explains each category in detail.

Where your data goes

Some of our providers, including Shopify and Google, are based outside the United Kingdom. Where personal data is transferred abroad, it is protected by UK adequacy regulations or by the International Data Transfer Agreement and appropriate safeguards.

How long we keep it

  • Order and transaction records: 7 years, to meet UK tax and accounting requirements.
  • Customer account details: until you ask us to delete the account.
  • Marketing consent records: until you unsubscribe, plus 2 years.
  • Support correspondence: 3 years from the last contact.
  • Analytics data: as configured in Google Analytics, up to 14 months.

Your rights

Under UK data protection law you have the right to:

  • Ask for a copy of the personal data we hold about you
  • Have inaccurate data corrected
  • Ask us to delete your data, where we have no ongoing legal reason to keep it
  • Ask us to restrict how we use it
  • Object to processing based on our legitimate interests
  • Receive your data in a portable format
  • Withdraw consent at any time, including for cookies and marketing

To exercise any of these, email support@nortlex.com. We respond within one month.

Complaints

If you are unhappy with how we have handled your data, please contact us first at support@nortlex.com. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

Children

This shop is not intended for children. We do not knowingly collect data from anyone under 16.

Changes to this policy

We update this policy when our practices change. The date at the top shows when it was last revised.