Privacy Policy

Last Updated: July 2026

Norva Foods is a trading name of Rasool Limited (Company No: 16098897 · VAT: 510 3608 37) ("we", "our", or "us"). We are the data controller for personal data collected via norvafoods.co.uk and related customer communications.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Information We Collect

Information you provide

Name and contact details (email, phone)

Billing and delivery addresses

Order and payment-related details (payment card data is handled by our payment providers; we do not store full card numbers)

Messages you send us (email, WhatsApp, contact forms)

Marketing preferences

Information collected automatically

Device and browser information

IP address and approximate location

Pages visited, referral source, and usage data

Cookies and similar technologies (see Cookies & PECR below)

2. Lawful Bases for Processing

We only process personal data where we have a lawful basis under UK GDPR, including:

Contract — to take and fulfil your order, arrange delivery, and provide customer service

Legal obligation — for tax, accounting, consumer law, and regulatory requirements

Legitimate interests — to secure and improve our website, prevent fraud, and understand how our services are used (balanced against your rights)

Consent — for non-essential cookies and certain electronic marketing, where required by PECR

You may withdraw consent at any time where processing is based on consent.

3. How We Use Your Information

Processing, fulfilling and delivering orders

Communicating about your orders and responding to enquiries

Handling returns, refunds and complaints

Sending service messages (for example dispatch updates)

Sending marketing communications where permitted (you can opt out at any time)

Improving our website, products and services

Preventing fraud and maintaining security

Complying with legal obligations

4. Who We Share Data With

We share personal data only as needed with trusted processors and partners, including:

Shopify — e-commerce platform and checkout

Payment providers — to process payments securely

Courier / logistics partners — to deliver your order

Email / messaging tools — to send order and service communications

Professional advisers or authorities — where required by law or to protect our legal rights

We do not sell your personal data.

5. International Transfers

Some of our providers may process data outside the UK. Where that happens, we use appropriate safeguards recognised under UK data protection law (such as the UK International Data Transfer Agreement / Addendum or adequacy decisions), where required.

6. How Long We Keep Data

We keep personal data only as long as needed for the purposes above, including:

Order and transaction records — typically for up to 6 years after the tax year (legal / accounting requirements)

Customer service correspondence — usually up to 2 years after resolution, unless a longer period is needed for a dispute

Marketing lists — until you unsubscribe or we decide the list is no longer used

Cookie / analytics data — according to the retention periods of the tools we use

7. Data Security

We use appropriate technical and organisational measures to protect personal data, including HTTPS/TLS encryption for our website and payment flows handled by PCI-compliant providers. No method of transmission over the internet is completely secure.

8. Your Rights Under UK GDPR

You have the right to:

Access your personal data

Rectify inaccurate data

Request erasure in certain circumstances

Restrict or object to certain processing

Data portability (where applicable)

Withdraw consent where processing is based on consent

Lodge a complaint with the Information Commissioner's Office (ICO) — ico.org.uk

To exercise your rights, email info@norvafoods.co.uk. We may need to verify your identity before responding. We aim to respond within one month.

9. Cookies & PECR

We use cookies and similar technologies in line with PECR. Strictly necessary cookies are required for the site and checkout to work. Non-essential cookies (for example analytics) are only set after you choose them in our on-site cookie banner, or otherwise give consent where required.

You can change your mind later by clearing site data for norvafoods.co.uk in your browser (this resets the banner) or by contacting us. Blocking some cookies may affect site functionality.

Optional analytics (when enabled) only load if you select Allow analytics or Accept all.

10. Marketing

Where we send electronic marketing, we do so in line with PECR — typically with consent, or soft opt-in for similar products to existing customers where that applies. Every marketing email includes an unsubscribe option.

11. Children

Our website and products are aimed at adults. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it where appropriate.

12. Data Controller & Contact

Data controller: Rasool Limited trading as Norva Foods, London, United Kingdom (Company No: 16098897 · VAT: 510 3608 37)

Email: info@norvafoods.co.uk

Phone / WhatsApp: +44 7386 900180

ICO: ico.org.uk

13. Updates

We may update this Privacy Policy from time to time. The "Last Updated" date at the top will change when we do. Continued use of our site after updates means you should review this page periodically.