Privacy Policy

Last updated: 4 June 2026

NORJ is operated by DK Brand Design (“we,” “us,” “our”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use norjshop.com (“the Site”) and purchase our products.

By using the Site, you agree to the practices described in this policy. If you do not agree, please do not use the Site or provide your personal information.

1. Information we collect

We collect only the information necessary to process your orders and provide our services:

• Account information: Full name, email address, and password when you create an account.
• Order information: Shipping address (recipient name, phone number, street address, ward, district, city/province), email address, and phone number when you place an order. Guest checkout is available — an account is not required.
• Payment information: All payments are processed by VNPay. We do not collect, store, or have access to your bank card details, ATM information, or QR Pay credentials. VNPay handles all payment data under their own privacy and security policies.
• Newsletter: Your email address if you subscribe to our newsletter. Subscription is voluntary and uses double opt-in (you must confirm via email before being added).
• Browsing data: We store your currency preference and login session using cookies. We store your shopping cart contents in your browser’s local storage. We do not use tracking cookies, advertising pixels, or third-party analytics.

2. How we use your information

We use your personal information for the following purposes only:

• To process and fulfil your orders, including shipping and delivery.
• To send you order confirmation and shipping notification emails.
• To manage your account, saved addresses, and order history.
• To send newsletter updates if you have subscribed (you may unsubscribe at any time).
• To respond to your enquiries via email.
• To detect and prevent fraudulent transactions.

We do not use your information for advertising, profiling, or automated decision-making.

3. Who we share your information with

We share your information only with the following service providers, and only to the extent necessary to operate the Site and process your orders:

• VNPay: Payment processing. Receives your order reference and payment amount. VNPay is regulated by the State Bank of Vietnam.
• Resend: Email delivery. Receives your email address to send transactional and newsletter emails.
• Vercel: Website hosting.
• Supabase: Database and authentication services.

Some of these service providers may process data on servers located outside Vietnam. By using the Site, you consent to this processing. We do not sell, rent, or trade your personal information to any third party.

4. Cookies and local storage

The Site uses a minimal number of cookies and browser storage:

• Authentication cookies: To keep you logged in to your account. These are essential for the Site to function.
• Currency preference: A cookie that remembers whether you prefer to view prices in VND or USD.
• Shopping cart: Your cart contents are stored in your browser’s local storage, not on our servers (unless you are logged in).

We do not use advertising cookies, tracking pixels, or third-party analytics tools.

5. How long we keep your information

• Account data: Retained for as long as your account is active. You may request deletion at any time.
• Order records: Retained for a minimum of 5 years for tax and accounting compliance under Vietnamese law.
• Newsletter subscribers: Retained until you unsubscribe. Unsubscribed emails are marked inactive and not used for further communication.
• Shopping cart: Automatically expires after 14 days of inactivity.

6. Your rights

Under Vietnamese data protection regulations, you have the right to:

• Know what personal information we hold about you.
• Access and receive a copy of your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information (subject to legal retention requirements).
• Withdraw your consent for data processing at any time.
• Unsubscribe from marketing communications at any time.
• Lodge a complaint with the relevant authorities if you believe your rights have been violated.

To exercise any of these rights, please contact us at andrew@dkbranddesign.com.

7. Data security

We take reasonable measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure authentication, and access controls. Payment information is handled entirely by VNPay and never passes through or is stored on our servers.

However, no method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Children

The Site is intended for a general audience. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected information from a child under 16, we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

10. Contact

For any questions or requests regarding this Privacy Policy or your personal data, contact us at: