Privacy Policy
Last updated 15 August 2026.
This website is operated by Jiamei Manufacturing Group Limited (Hong Kong Business Registration No. 51780017), registered at FLAT/RM 826, 8/F, OCEAN CENTRE HABOUR CITY, 5 CANTON ROAD, TST, KL. In these terms “we”, “us” and “our” refer to Jiamei Manufacturing Group Limited trading as Norva Parfums.
We are the data controller for the personal information described below.
What we collect
| When you order | Name, shipping and billing address, email address, phone number if you give one, order contents and order history |
|---|---|
| When you pay | Payment confirmation and the last four digits and card type. We never see or store your full card number — it goes directly to the payment processor |
| When you create an account | Email address, password (stored hashed, not in plain text), saved addresses |
| When you subscribe | Email address, and whether you opened or clicked our emails |
| When you contact us | Whatever you write to us, plus your name and email so we can reply |
| Automatically | IP address, browser and device type, pages viewed, referring site — see our Cookie Policy |
Why we use it
- To fulfil your order — take payment, ship the parcel, handle returns and answer questions. This is necessary to perform our contract with you.
- To run the business — fraud prevention, accounting, keeping the site working and secure. This is our legitimate interest.
- To meet legal obligations — tax and accounting records, customs declarations.
- To send marketing email — only if you opted in, and you can unsubscribe from any email in one click.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
Who else sees it
Only the parties we need to involve in order to serve you:
- Payment processors — to take payment and handle refunds and chargebacks
- Shipping carriers — your name, address and phone number, so the parcel can be delivered
- Our hosting and email providers — who store the data on our behalf under contract
- Authorities — where we are legally required to disclose
Because we are based in Hong Kong and ship to North America, your data is transferred internationally. We only use providers
that offer appropriate safeguards for that transfer.
How long we keep it
Order and transaction records are kept for 7 years to satisfy tax and accounting requirements. Account data is kept until you ask us to
delete the account. Marketing consent is kept until you unsubscribe. Support conversations are kept for 2 years.
Your rights
Wherever you live, you can ask us to:
- tell you what personal data we hold about you, and give you a copy
- correct anything that is wrong
- delete your data, where we are not legally required to keep it
- stop sending you marketing
- stop or limit certain processing, or object to it
If you are in the EU or UK you have these rights under the GDPR and may complain to your national data protection authority.
If you are in California you have the rights set out in the CCPA/CPRA, including the right not to be discriminated against for exercising them.
We do not sell or share personal information as those terms are defined in the CCPA.
To exercise any of these, contact us. We respond within 30 days and will not charge you for it.
Children
This site is not directed at children and we do not knowingly collect data from anyone under 18. If you believe a child has given us
personal information, contact us and we will delete it.
Security
The site runs over HTTPS, passwords are stored hashed, and access to order data is limited to the people who need it.
No system is perfectly secure, but if a breach ever affects your data we will tell you and the relevant authority without undue delay.
Changes and contact
If we change this policy we will update the date at the top. For anything privacy-related, contact us.