Nora's Nursery Privacy Policy
Privacy Policy
PRIVACY STATEMENT
Last Updated: March 3, 2026
Nora’s Nursery (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Statement explains how we collect, use, disclose, and protect your personal information, and the rights available to you under applicable privacy laws.
SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION?
When you purchase something from our store, as part of the buying and selling process, we collect personal information you provide to us such as your name, billing address, shipping address, email address, phone number, and payment details.
When you browse our store, we also automatically receive certain information such as your internet protocol (IP) address, browser type, device information, and operating system to help us improve your experience and analyze website usage.
Email & marketing communications (if applicable):
With your permission, we may send you emails or other communications about our store, new products, promotions, and updates. You may opt out at any time.
We only collect personal information that is reasonably necessary to operate our business and provide our services.
SECTION 2 – CONSENT
How do you get my consent?
When you provide us with personal information to complete a transaction, place an order, arrange for delivery, make a return, or contact customer support, we imply your consent to collect and use that information for that specific purpose.
If we request your personal information for a secondary purpose, such as marketing, we will either ask for your express consent or provide you with an opportunity to opt out.
How do I withdraw my consent?
If you change your mind, you may withdraw your consent for us to contact you or for the continued collection, use, or disclosure of your information at any time by contacting us at:
info@norasnursery.com
Nora’s Nursery
117 Corstate Ave.
Concord, Ontario, Canada L4K 4Y2
You may also unsubscribe from marketing emails using the link provided in our emails.
SECTION 3 – DISCLOSURE
We may disclose your personal information if required to do so by law or if you violate our Terms of Service.
We do not sell personal information for monetary value. However, certain data sharing practices related to advertising may be considered a “sale” or “sharing” under some U.S. state privacy laws.
We may disclose the following categories of personal information to service providers and advertising partners:
-
Identifiers (such as name, email address, IP address)
-
Commercial information (such as order history and purchase details)
-
Internet or network activity (such as browsing behavior and interactions with our website)
These disclosures are made for business and marketing purposes consistent with this Privacy Statement.
SECTION 4 – SHOPIFY
Our store is hosted on Shopify Inc., which provides the e-commerce platform that allows us to sell our products and services.
Your data is stored through Shopify’s data storage, databases, and applications on secure servers protected by firewalls.
Payment
If you choose a direct payment gateway, Shopify stores your credit card information in encrypted form in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Purchase transaction data is retained only as long as necessary to complete your transaction and is then deleted.
For more information, you may review Shopify’s:
Terms of Service: https://www.shopify.com/legal/terms
Privacy Policy: https://www.shopify.com/legal/privacy
SECTION 5 – THIRD-PARTY SERVICES & ADVERTISING
We use trusted third-party service providers to help operate our business and deliver services. These providers collect, use, and disclose your information only as necessary to perform services on our behalf.
These providers may include, but are not limited to:
-
Shopify (e-commerce platform)
-
Klaviyo (email and SMS communications)
-
Meta (Facebook & Instagram advertising)
-
Google (analytics and advertising)
-
Pinterest (advertising)
-
Payment processors and fulfillment partners
Some of these providers may be located outside your jurisdiction, and your information may be subject to the laws of those locations.
Targeted Advertising
We may use cookies, pixels, and similar technologies to deliver relevant advertising and measure campaign performance. This may involve sharing certain information with advertising partners.
You have the right to opt out of targeted advertising and certain data sharing as described in Section 10 below.
Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Statement or our Terms of Service.
SECTION 6 – SECURITY
We take reasonable administrative, technical, and physical precautions to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.
Credit card information is encrypted using SSL technology and stored using AES-256 encryption. While no method of transmission over the Internet is 100% secure, we follow PCI-DSS requirements and generally accepted industry standards.
SECTION 7 – COOKIES
We use cookies and similar technologies to operate our website and improve your experience. Common cookies used include:
-
_session_id – session tracking
-
_shopify_visit – visit tracking
-
_shopify_uniq – visit count
-
cart – shopping cart contents
-
_secure_session_id – session security
-
storefront_digest – storefront access
You may manage or disable cookies through your browser settings.
Where required by applicable law, we will honor legally recognized universal opt-out signals sent by your browser.
SECTION 8 – AGE OF CONSENT
By using this site, you represent that you are at least the age of majority in your jurisdiction, or that you are the age of majority and have given consent for any minor dependents to use this site.
SECTION 9 – DATA RETENTION
We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Statement, unless a longer retention period is required or permitted by law.
SECTION 10 – YOUR PRIVACY RIGHTS
Depending on your state or country of residence, you may have the right to:
-
Access the personal information we hold about you
-
Correct inaccurate personal information
-
Delete your personal information
-
Request a copy of your personal information
-
Opt out of targeted advertising or certain data sharing
-
Appeal a denied privacy request
How to Exercise Your Rights
You can submit a request using our Privacy Rights Request Form:
Or by contacting us at info@norasnursery.com.
We will respond to verified requests within the timeframe required by applicable law.
Appeals
If your request is denied, you may appeal our decision by replying to our response or contacting us with the subject line “Privacy Request Appeal.”
Non-Discrimination
We will not discriminate against you for exercising any of your privacy rights.
SECTION 11 – CHANGES TO THIS PRIVACY POLICY
We reserve the right to update this Privacy Statement at any time. Changes take effect immediately upon posting. If material changes are made, we will update the “Last Updated” date above.
If our business is acquired or merged, your information may be transferred to the new owners so we may continue to serve you.
QUESTIONS & CONTACT INFORMATION
If you would like to access, correct, amend, or delete personal information, register a complaint, or request more information, contact our Privacy Compliance Officer:
info@norasnursery.com
Nora’s Nursery
[Re: Privacy Compliance Officer]
117 Corstate Ave.
Concord, Ontario, Canada L4K 4Y2
