Privacy Policy

Norr & Co. Trading LLC ("Norr & Co.", "we", "us") makes personalized jewelry. Personalization means you trust us with names, dates, and sometimes photographs of people and pets you love. This policy explains, in plain language, what we collect, why, and the control you have over it.

What we collect

• Order details — your name, shipping address, email, and the items you purchase.
• Personalization content — engraving text, chosen fonts and finishes, and any photos you send us (for example, a pet portrait reference).
• Payment information — processed entirely by our payment providers (Stripe, PayPal, or Etsy). We never see or store your full card number.
• Correspondence — emails and messages you send us, including order notes.
• Basic technical data — your shopping cart is stored in your own browser's local storage; it never leaves your device unless you place an order.

How we use it

• To make and ship your piece, and to contact you about your order;
• To meet legal and tax obligations (order records);
• To send our monthly Gift Letter — only if you subscribe, and every email has a one-click unsubscribe.

We do not sell, rent, or trade your personal information. We do not run advertising trackers on this site.

Who we share it with

Only the partners required to fulfil your order, each bound by their own privacy obligations:

• Payment processors (Stripe, PayPal, or Etsy) — to take payment;
• Shipping carriers (e.g. USPS, Royal Mail, DHL) — your name and delivery address only;
• Authorities — only where the law requires it.

How long we keep it

Order and tax records: up to 7 years, as US law requires. Portrait reference photos: deleted within 90 days after your order ships, unless you ask us to keep them for a future order. Newsletter emails: until you unsubscribe.

Your rights

Wherever you live, you may ask us to:

• Show you the personal data we hold about you;
• Correct anything that is wrong;
• Delete your data (subject to the legal record-keeping above);
• Stop marketing to you at any time.

If you are in the UK, EU, or EEA, you have these rights under UK GDPR / GDPR, and you may also complain to your local data protection authority. If you are in California, you have equivalent rights under the CCPA — and again: we do not sell personal information.

To exercise any of these, email hello@norrcotradingllc.com. We respond within 30 days.

Security

Payments are encrypted end-to-end by our payment providers. Access to order data is limited to the people who make and ship your piece. No method of transmission is 100% secure, but we keep our data footprint deliberately small — we hold the minimum needed to serve you.

Children

Our products are gifts often bought for children, but our shop is directed at adults. We do not knowingly collect personal data from anyone under 16.

Changes

If we change this policy, we will update the date at the top. Material changes will be flagged on this page before they take effect.