Effective Date: November 5th, 2026

NorJourn respects customer privacy and seeks to collect only information reasonably necessary to operate our store, provide services, communicate with customers, and meet legal obligations.

This policy describes how information may be collected, used, shared, stored, and protected.

1. Information Collected

Depending on how customers and visitors interact with the website, NorJourn and its technology providers may collect:

• Names, email addresses, telephone numbers, and billing and shipping addresses.

• Customer-account details and login information.

• Order histories, payment status, delivery records, returns, and refunds.

• Customer-service messages and inquiries.

• IP addresses, browser information, device characteristics, website activity, and cookie identifiers.

• Marketing preferences and related communication information, where applicable.

Payment credentials may be handled by authorized payment providers and the e-commerce platform, depending on the checkout configuration.

NorJourn does not intentionally request sensitive personal information unrelated to legitimate business operations.

2. How Information Is Used

Information may be used to:

• Process and fulfill purchases.

• Manage accounts and communicate with customers.

• Provide shipping and order updates.

• Address returns, refunds, and customer-service inquiries.

• Prevent fraud and protect website security.

• Maintain and improve website functionality.

• Support search engine optimization, analytics, and marketing activities.

• Comply with legal, tax, accounting, and recordkeeping obligations.

3. Website Hosting and Service Providers

Our online store operates on the Warhead e-commerce platform.

Warhead and other service providers may store, access, transmit, or process information to support website operations.

NorJourn may share information reasonably necessary for services involving payment processing, order fulfillment, shipping, communications, website management, security, search optimization, analytics, and marketing.

Service providers may have independent privacy policies and legal obligations. Certain providers may process information in jurisdictions outside the customer's location.

4. Sale and Sharing of Personal Information

NorJourn does not sell customer lists or personal information as part of its business practices and does not intentionally exchange customer information for monetary compensation.

We share relevant information with service providers for legitimate business purposes.

Certain advertising, analytics, and tracking technologies, if enabled, may involve disclosures classified as a sale or sharing of personal information under applicable privacy laws, even without monetary compensation.

Where legally required, NorJourn will provide appropriate notices, consent mechanisms, or privacy choices.

NorJourn does not authorize the sale of sensitive personal information without consent where consent is legally required.

5. Cookies and Website Technologies

Our website uses cookies and may use similar technologies to support essential website functions, account sessions, shopping activity, preferences, security, and performance measurement.

Depending on enabled services, analytics or marketing technologies may also collect technical information concerning website activity.

Visitors can manage some cookies through browser settings. Disabling cookies may affect website functionality.

Additional cookie disclosures or controls will be provided where required by applicable law.

6. Communications and Marketing

NorJourn may send necessary transactional messages, including order confirmations, shipping information, account notices, and customer-service responses.

Promotional communications, where used, will comply with applicable marketing laws and include legally required unsubscribe options.

Customers may withdraw marketing consent or unsubscribe without affecting necessary transactional communications.

7. Data Security and Third-Party Risks

NorJourn seeks to use reasonable safeguards appropriate to its business and the information involved.

Website hosting, payments, communications, and other operations depend in part on independent technology providers.

No electronic system, storage method, or internet transmission can be guaranteed completely secure.

Third-party systems may experience service interruptions, unauthorized access, or security incidents outside NorJourn's direct operational control.

NorJourn will address applicable investigation, notification, and corrective-action requirements in accordance with law.

8. Information Retention

Information may be retained as reasonably necessary to fulfill orders, provide support, maintain required records, prevent fraud, resolve disputes, and satisfy legal obligations.

Retention periods vary depending on the information and service involved.

Information may be deleted, deidentified, or retained as legally permitted and appropriate.

9. Privacy Requests and Customer Rights

Depending on applicable law, customers may have rights to request access to, correction of, or deletion of certain personal information, or to exercise choices regarding particular data uses.

Requests may be submitted through our Contact Us page.

Identity verification may be necessary. Certain information may be retained where legally required or permitted.

10. Children's Privacy

NorJourn's website is not directed toward children under 13.

We do not knowingly solicit personal information directly from children under 13.

Where required by law, appropriate action will be taken regarding personal information collected from children.

11. Independent Websites

Links to websites operated by independent organizations may appear on our website.

These websites are governed by their own terms and privacy practices.

NorJourn does not control the independent privacy practices of unaffiliated websites.

12. Legal Disclosures

Information may be disclosed when reasonably necessary to comply with applicable law, respond to valid legal processes, investigate suspected fraud, protect rights or safety, or enforce lawful website terms.

13. Business Transfers

If NorJourn is sold, reorganized, or its business assets are transferred, relevant information may be transferred as part of the transaction, subject to applicable legal requirements.

14. Changes to This Policy

NorJourn may update this Privacy Policy to reflect changes in operations, technology, or legal requirements.

Updates will be published with an appropriate effective date, and additional notice or consent will be provided when legally required.

15. Contact Information

For privacy questions, requests, or complaints, please use our Contact Us page.

Nothing in this policy restricts rights that cannot legally be waived.