Privacy notice
This notice explains how this website uses personal data. Last updated: 18 September 2026.
Who is responsible?
Nora French
info@norafrench.nl
Sweerts de Landasstraat 85
6814 DC Arnhem
Nederland
Website visits and security
When you visit, our hosting service receives technical data such as your IP address, the requested address, time and browser information. This is needed to deliver the website, investigate errors and prevent abuse. The legal basis is our legitimate interest in operating a working, secure website.
Contact and enquiries
If you contact us, we use your name, email address, message and any company details to reply and prepare a collaboration. This is done at your request before a possible contract, or under our legitimate interest in answering other questions. Without contact details we cannot reply.
An email link opens your own email app, where you send the message yourself. When a web form is available, the submitted details are stored in the private administration system. We do not automatically add contact details to newsletters.
Orders and withdrawals
When ordering is available, we process your name, email address, order details and, where needed, delivery address to perform the contract. Payments are handled by the payment provider you select; we do not store full card details. We retain required financial records for accounting and legal obligations. A withdrawal declaration contains your name, purchase reference, email address and submission time.
Cookies, analytics and Instagram
Your shopping bag and checkout details may be kept temporarily in your browser tab. The administrator login uses a secure session cookie and a language preference. These functions are necessary for the service you request. Your privacy choice is stored for up to 180 days.
Optional analytics and external Instagram media are enabled only with your consent, when those services are available. Our own analytics count events by day, page and language; they do not create visitor profiles. Loading external Instagram images sends data including your IP address and browser information to Meta. Meta may process data outside the EEA under its own privacy policy.
Read about cookies and change your choices. You can withdraw consent at any time using “Privacy choices” in the footer. This does not affect processing that took place lawfully before withdrawal.
Who receives data?
Only where needed: hosting and email services, the chosen payment provider, delivery services, accounting support and competent authorities where required by law. Service providers processing data on our behalf must have appropriate agreements and security measures. We do not sell customer data.
How long is data kept?
Enquiries are kept for as long as handling, follow-up or an ongoing collaboration requires. We then assess what can be deleted; a legal retention duty or an ongoing dispute may require longer retention. Basic financial records are generally kept for seven years. Aggregate daily statistics are kept for up to thirteen months. Consent records contain choices and a random reference, not an IP address; they are kept for up to twelve months and removed by the scheduled maintenance task.
Your rights
You can request access, correction, deletion, restriction or portability of your data where the law provides these rights. You may object to processing based on legitimate interests. Send your request to the email address above. We normally respond within one month; if a permitted extension is needed, we inform you within that month. We ask for additional identification only where needed to handle your request safely.
You can complain to the Autoriteit Persoonsgegevens.
This website does not make decisions with legal or similarly significant effects based solely on automated profiling.