Privacy Policy

Nora ("Nora," "we," "us," or "our") operates noramaui.com and a retail storefront at 1280 S Kihei Rd, Suite 118, Kihei, HI 96753. This policy explains what information we collect, how we use it, and the choices you have.

• Information you give us: name, email address, phone number, shipping and billing address, and order details when you place an order, sign up for our newsletter, or contact us.
• Payment information: card payments are processed by Square, Inc. Nora does not receive or store full card numbers. Square handles card data under its own privacy policy.
• Automatically collected information: IP address, browser type, device type, referring page, and pages viewed, collected through Google Analytics 4 and our hosting provider's standard server logs.
• Cookies and local storage: we use browser local storage to keep the items in your shopping cart between pages and visits, and cookies for analytics. You can clear or block these through your browser settings; blocking them may prevent the cart from working.

We use the information we collect to process and fulfill orders, arrange shipping or in-store pickup, respond to inquiries, send order confirmations and (if you opt in) occasional updates about new pieces, calculate applicable Hawaii General Excise Tax, prevent fraud, and understand how the site is used so we can improve it.

Nora maintains a Google OAuth application used solely to manage our own advertising accounts through Google's APIs. When an authorized Nora administrator signs in with Google, we receive only the account information and advertising data needed to operate those accounts. We do not request or access the Google account data of site visitors or customers through this application.

Nora's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising to third parties, and do not allow humans to read it except where required for security, to comply with applicable law, or with the user's explicit consent.

We do not sell, rent, or trade your personal information. We share it only with service providers who need it to operate our business, including Square (payment processing), Vercel (website hosting), Google (analytics and advertising), Formspree (contact form delivery), our email provider, and shipping carriers. We may also disclose information where required by law or to protect our legal rights.

We keep order and transaction records for as long as needed to fulfill orders and meet tax, accounting, and legal obligations. Newsletter subscriptions are kept until you unsubscribe. Analytics data is retained according to our Google Analytics settings.

The site is served over HTTPS and payment data is transmitted directly to Square's PCI-compliant systems. No method of transmission or storage is completely secure, but we take reasonable steps to protect the information we hold.

You may request access to, correction of, or deletion of the personal information we hold about you, and you may opt out of marketing email at any time using the unsubscribe link or by contacting us. California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to request deletion; we do not sell personal information. To make any request, email info@noramaui.com and we will respond within 30 days.

This site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. The "Last updated" date above reflects the most recent version.