Privacy Policy
Last Updated: October 1, 2026
NORLANYA TECHNOLOGY CO., LIMITED (“NORLANYA”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information collected through www.norlanya.com (the “Site”).
This Privacy Policy explains what personal information we collect, how and why we use it, when it may be disclosed to third parties, how long we retain it, and the rights and choices available to you.
This policy applies to visitors to the Site, customers, account holders, people who contact us for enquiries or after-sale support, and other individuals whose personal information we process in connection with our business.
1. Who We Are
The controller or data user responsible for personal information processed through this Site is:
NORLANYA TECHNOLOGY CO., LIMITED
Registered Address: Room S050, 2/F, The Capital, 61–65 Chatham Road South, Tsim Sha Tsui, Hong Kong
Email: [email protected]
After-Sales Support: [email protected]
Where required by applicable law, NORLANYA is responsible for determining the purposes and means of processing personal information collected through the Site.
2. Personal Information We Collect
We collect personal information that you provide directly to us, information generated when you use the Site, and limited information received from service providers involved in processing your order or providing our services.
Depending on how you interact with us, this may include your name, company or salon name, billing and shipping address, country or region, telephone number, email address, account information, product and order information, invoice number, purchase history, product serial number, warranty and after-sale information, technical support correspondence, photos or videos you submit for troubleshooting, reviews or other content you choose to submit, IP address, browser and device information, pages viewed, referral information, cookies and similar technical identifiers.
When you make a payment through a third-party payment provider such as PayPal, payment credentials are generally processed by that provider. NORLANYA may receive transaction information such as payment status, transaction reference, payer information and other information necessary to process the order, but we do not necessarily receive or store your complete payment credentials.
3. How We Collect Personal Information
We may collect personal information when you browse or purchase products from the Site, create or manage an account, place an order, contact us, submit an enquiry, request technical or after-sale support, submit a warranty or return request, upload files through a support form, subscribe to marketing communications where offered, leave a product review, or otherwise communicate with us.
We may also automatically collect limited technical information through cookies, server logs, security technologies and similar tools when you use the Site.
4. How We Use Personal Information
We use personal information where necessary to operate our business and provide our products and services.
This includes processing and fulfilling orders; arranging shipping and customs-related documentation; managing accounts; processing payments and refunds; communicating about orders; providing product information, warranty service, technical support and repairs; handling returns, complaints and disputes; preventing fraud, abuse and security threats; maintaining and improving the Site; diagnosing technical problems; maintaining business, accounting and tax records; complying with legal and regulatory obligations; and, where permitted, providing marketing communications or measuring the effectiveness of our services.
Where required by applicable law, we will obtain consent before using personal information for a purpose that requires consent.
5. Legal Bases for Processing
Where the GDPR, UK GDPR or similar laws require us to identify a legal basis for processing, we may rely on performance of a contract, for example to process an order or provide warranty service; legitimate interests, for example to operate, secure and improve our Site and business; legal obligations, including accounting, tax, fraud-prevention and regulatory requirements; and consent, where consent is legally required, such as for certain marketing or non-essential cookie activities.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
These types of legal bases are among the information GDPR transparency rules require controllers to disclose.
6. Orders, Accounts and WooCommerce
Our online store uses WordPress and WooCommerce functionality.
When you browse the store, create an account or place an order, information may be processed to remember products you viewed, maintain your shopping cart, calculate shipping or taxes, complete checkout, create and manage your customer account, process orders, prevent fraud and provide customer service.
Order information may be retained where reasonably necessary for accounting, tax, warranty, dispute-resolution and legal compliance purposes.
7. Payments
Payments may be processed by third-party payment service providers, including PayPal, depending on the payment method selected by the customer.
Payment providers process personal information according to their own privacy policies and legal obligations. We disclose only the information reasonably necessary to process or reconcile a payment.
We recommend reviewing the privacy policy of the payment provider you choose before completing payment.
8. Contact and After-Sale Support Forms
When you submit a contact, enquiry or after-sale support form, we process the information you provide in order to respond to your request.
After-sale information may include product model, serial number, order or invoice information, purchase channel, purchase date, fault descriptions and files such as photographs or videos.
Information provided for technical support will be used primarily for troubleshooting, warranty assessment, repair, replacement, return handling and related customer service.
Please avoid sending information that is not reasonably necessary for us to deal with your request.
9. Cloudflare, Website Security and Turnstile
We use Cloudflare services for website delivery, performance and security.
Certain forms may use Cloudflare Turnstile to distinguish legitimate users from automated traffic and protect the Site against spam and abuse.
Turnstile performs browser-side security checks and processes technical signals necessary for that security function. Cloudflare states that Turnstile does not access, store or transmit the contents of form entries or other page inputs as part of the challenge process.
Cloudflare and other security providers may process information such as IP address, browser characteristics and security-related request information in accordance with their respective privacy terms.
10. Cookies and Similar Technologies
The Site uses cookies and similar technologies for functions such as maintaining sessions, shopping carts and customer accounts, remembering preferences, providing security, improving website performance and, where enabled, understanding website usage.
Some cookies are necessary for the Site and online store to function. Other analytics or marketing technologies, where used, may be subject to consent requirements depending on your location.
You may be able to manage non-essential cookies through a cookie consent tool provided on the Site or through your browser settings.
Disabling necessary cookies may prevent features such as shopping carts, checkout, account login or security functions from operating correctly.
11. Analytics and Marketing Technologies
We may use analytics technologies to understand how visitors use the Site and to improve website performance and customer experience.
Where services such as Google Analytics or advertising technologies are enabled, they may process technical and usage information according to their own privacy terms.
Where applicable law requires prior consent for analytics, advertising or similar non-essential technologies, we will seek that consent before activating them.
We do not sell personal information for monetary consideration.
If applicable privacy law treats certain advertising or analytics disclosures as a “sale” or “sharing”, individuals may have additional opt-out rights under that law.
12. Marketing Communications
Where permitted by applicable law, we may send information about NORLANYA products, services or promotions.
Where consent is required, marketing communications will be sent only after the appropriate consent has been obtained.
You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism in the message or by contacting us.
Unsubscribing from marketing does not prevent us from sending transactional or service communications such as order confirmations, shipping notices, warranty communications or responses to support requests.
Hong Kong’s Personal Data (Privacy) Ordinance contains specific requirements relating to the use of personal data for direct marketing, so keeping marketing consent separate from necessary customer-service processing is appropriate.
13. How We Share Personal Information
We may disclose personal information only where reasonably necessary for legitimate business or legal purposes.
Recipients may include hosting and website service providers, content-delivery and cybersecurity providers, payment processors, banks, logistics companies, freight forwarders, couriers, customs-related service providers, email and communications providers, IT and technical service providers, distributors or repair partners involved in providing requested support, professional advisers such as accountants or lawyers, and public authorities where disclosure is required by law.
Service providers are expected to use personal information only for the services they provide or as otherwise permitted or required by law.
We may also disclose information in connection with a merger, restructuring, acquisition, financing, sale of assets or similar corporate transaction, subject to appropriate safeguards.
14. International Data Transfers
NORLANYA operates internationally, and customers, service providers and business partners may be located in different countries.
As a result, personal information may be processed outside the country or region in which it was originally collected.
Where applicable data protection law requires safeguards for international transfers, we will use an appropriate legal mechanism where required, such as contractual safeguards or another permitted transfer mechanism.
We do not rely merely on a visitor’s use of the Site as blanket consent to all international data transfers.
GDPR transparency rules specifically require information about intended transfers to third countries and applicable safeguards where relevant.
15. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and for legitimate business or legal requirements.
Retention periods depend on the type of information and may take into account the duration of the customer relationship, applicable warranty or service periods, accounting and tax obligations, legal limitation periods, fraud-prevention requirements, dispute handling and legal or regulatory obligations.
When information is no longer reasonably required, we may delete, anonymize or otherwise securely dispose of it, subject to applicable legal requirements.
Both GDPR transparency requirements and Hong Kong privacy guidance recognize retention information as an important part of an organisation’s privacy notice.
16. Data Security
We use reasonable administrative, technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include HTTPS encryption, access controls, website security services, anti-bot protection, software updates, backups and restrictions on access to customer information.
No internet transmission or electronic storage system can be guaranteed to be completely secure. You should also protect your own account credentials and notify us if you believe your account or communications with us have been compromised.
17. Your Privacy Rights
Depending on your location and applicable law, you may have rights to request access to personal information we hold about you, correction of inaccurate information, deletion in certain circumstances, restriction of processing, portability of certain information, objection to certain processing, withdrawal of consent and objection to direct marketing.
You may also have the right to complain to an applicable privacy or data-protection authority.
For example, GDPR provides rights including access, rectification, erasure, restriction, portability and objection. European Commission California law, where applicable to a particular business and consumer, provides rights including access/knowledge, deletion, correction and certain opt-out rights.
To exercise a privacy right, contact us at [email protected].
We may need to verify your identity before responding. Rights may be subject to exceptions or limitations under applicable law.
18. Children’s Privacy
The Site and NORLANYA products are not directed specifically at children.
We do not knowingly seek to collect personal information from children where parental or guardian consent would be required by applicable law.
If you believe that a child has provided personal information to us in circumstances where such information should not have been collected, please contact us so that we can review and, where appropriate, delete the information.
19. Product Reviews and User Content
If you submit a review, comment, photograph or other content for public display, information included in that content may become publicly visible.
Please do not include sensitive personal information, private contact details or information about another person unless you are authorised to do so.
Where a profile image service such as Gravatar is actually enabled on the Site, information associated with that service may also be processed according to the provider’s privacy practices.
20. Third-Party Websites and Services
The Site may contain links to third-party websites or use third-party services.
NORLANYA does not control the independent privacy practices of third parties. Their collection and use of personal information are governed by their own privacy notices.
You should review the relevant third-party privacy policy before providing personal information directly to that third party.
21. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business, website technologies, service providers or applicable legal requirements.
The current version will be published on this page and identified by the Last Updated date.
Material changes may be communicated through the Site or by another reasonable method where required by law.
22. Contact Us
If you have questions about this Privacy Policy, wish to exercise an applicable privacy right or have a complaint concerning our handling of personal information, please contact:
NORLANYA TECHNOLOGY CO., LIMITED
Registered Address: Room S050, 2/F, The Capital, 61–65 Chatham Road South, Tsim Sha Tsui, Hong Kong
Email: [email protected]