The Norwex Group (“we / us / our”), which includes all global Norwex companies and locations (https://norwex.com), respects and is committed to protecting your privacy through our compliance with this Privacy Policy (“policy”). This policy explains how we collect, process, use, and share information about visitors to our websites, mobile applications, and any other website on which we post a direct link to this Privacy Policy (collectively, “website”) and when we provide you services (“services”). It also describes your rights with respect to the processing of your personal data and how you can contact us to exercise those rights or with questions about our privacy practices
Please note that this policy does not apply to information collected on thirdparty sites or by any third-party application that may link to or be accessible from the websites.
This policy may change from time to time and your continued use of the website is deemed to be acceptance of such changes, so please check this policy periodically for updates.
- When and how we collect your personal data
- The types of personal data we collect
- How and why we use your personal data
- How we will we share your personal data
- Your choices about your personal data
- How we secure your personal data
- How and where we process and store your personal data
- How long we keep your personal data
- Your rights under the UK GDPR & EU GDPR
- Your rights under the CCPA (defined below)
- Your rights under the PDPA (defined below)
- Privacy policies of other websites
- Changes to our privacy policy
- How to contact us
From the first moment you interact with us, we are collecting your personal data. Sometimes you provide us with data, sometimes data about you is collected automatically. Here’s when and how we do this.
We collect your personal data when:
- You browse any page of our website
- You register for an account
- You complete a transaction with us without registering for an account
- You fill out a form requesting to speak with a Consultant
- You fill out our Join Us form to become a Consultant
- You fill out our Party Contact form
- You send emails to us
- You interact with us for customer support
You provide personal data when:
- You register for an account
- You complete a transaction with us without registering for an account
- You fill out a form requesting to speak with a Consultant
- You fill out our Join Us form to become a Consultant
- You fill out our Party Contact form
- You send emails to us
- You interact with us for customer support
- Your contact information, including your name, email, phone number, mailing address and your billing address, if the two are not the same.
- A password when you set up an account with us.
- National Identification information, such as passports, social security number (United States), or any other type of unique identifier used on a national level.
- Local and/or state, provincial, etc. information, such as driver’s license.
- Date of Birth.
- Financial and accounting records, along with credit and debit cards.
- Payment information if you complete a transaction with us.
- Any other information provided at the time of registering to use our websites, subscribing to our services, posting material, or requesting further services or information.
- Data that identifies you such as your IP address, login information, browser type and version, time zone setting, browser plug-in types.
- Internet activity, including your interactions with our Services, URL clickstreams (the path you take through our site), products/Services viewed, page response times, download errors, how long you stay on our pages, what you do on those pages, how often, and other actions. For more information about cookies used on our website, please see our separate Cookie Notice < https://norwex.com/cookie-notice/>.
Does Norwex Group collect children’s data? No. Our websites are not intended for use by children under 13 years of age, and we do not knowingly collect personal data, contact, or solicit information of any kind from children under 13. If you believe that we might have any personal data from or about a child under 13, please contact us so we can delete that personal data immediately, at CDNcompliance@norwex.com or UScompliance@norwex.com or EUcompliance@norwex.com or tw-compliance@norwex.com, depending on the country in which you are located.
For Taiwan, a person who is under 18 years old is required to obtain his/her statutory guardian's permission before using our websites. When you use our websites, you represent and warrant that you are an adult or have otherwise obtained your statutory guardian's permission.
You are responsible for any content, including personal data, that you contribute to be posted, published or displayed on the websites, or transmit to other users of the websites (collectively, "User Contributions"). Your User Contributions are posted on and transmitted to other users of the websites at your own risk. Although we limit access to certain pages, and you may set certain privacy settings for such information by logging into your account profile, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the websites with whom you may choose to share your User Contributions; therefore, we cannot guarantee who will view your User Contributions. We are not responsible for circumvention by third parties of any privacy settings or security measures contained on the websites. You understand and acknowledge that, even after removal, copies of your User Contributions may remain viewable in cached and archived pages, or may have been copied or stored by other websites users. Proper access and use of information provided on the websites, including User Contributions, is governed by this privacy policy and our terms of use. Known or suspected violations should be reported to CDNcompliance@norwex.com or UScompliance@norwex.com or EUcompliance@norwex.com or tw-compliance@norwex.com, depending on the country in which you are located.
Data protection law means that we can only use your data for certain reasons and where we have a legal basis to do so. Here are the reasons for which we process your data:
- Delivering Services: Performing our contractual obligations to provide services to you.
Legal basis: Contract - Customer support: Responding to questions and solving issues via phone or email.
Legal basis for this data usage: Contract - Marketing purposes (with your consent): Sending you emails and messages about new features, products and services, contests, and content.
Legal basis for this data usage: Consent, if required by law. - Running & Improving our Site and Services: Managing your requests, login, and authentication, remembering your settings, hosting and back-end infrastructure, testing features, managing landing pages, and identifying fraud.
Legal basis: Contract, Legitimate Interests, if permitted under applicable laws
Consent: You have given clear consent for us to process your personal data for a specific purpose based on the information that we have provided to you. You can choose to withdraw your consent using specific features provided to enable you to withdraw consent, like an email unsubscribe link.
Contract: Processing your data is necessary for performing services under a contract, or because we have asked you to take specific steps before entering into that contract.
Legitimate interests: Processing your data is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. These legitimate interests are:
- Gaining insights from your behavior on our website and within our services sites.
- Delivering, developing, and improving our services.
- Enabling us to enhance, customize or modify our services and communications.
- Determining whether marketing campaigns are effective.
- Enhancing data security.
In each case, these legitimate interests are only valid if they are not outweighed by your rights and interests and permitted under the law in your jurisdiction.
We may disclose personal data that you provide via this website to our group companies (i.e., our holding company and its subsidiaries and affiliates); and direct contractors and authorized service providers that perform certain services on our behalf. Unless we tell you otherwise, our service providers may only use data we share with them in in accordance with our instructions. These services may include: web hosting providers, web analytics providers, email service providers, and cloud-survey platform providers.
We may also use your personal data, or permit carefully selected third parties to use your personal data, to contact you about goods and services that may be of interest to you where you have consented to be contacted for such purposes. If you do not want us to use your personal data in this way, or to provide your personal data to third parties for marketing purposes, please check the relevant box located on the form on which we collect your data and / or adjust your user preferences accordingly in your account profile.
In the event (whether prospective or actual) of a merger, acquisition, or any form of sale of some or all of Norwex’s assets, in which case personal data held by Norwex’s about its customers will be among the assets transferred to the (prospective) buyer, to the extent permitted by law.
We may also disclose your personal data to third parties to comply with any court order or other legal obligation; enforce or apply our terms of use or terms of sale and other agreements; and protect the rights, property, or safety of Norwex, our customers, or others. This includes exchanging your personal data with other companies and organizations for the purposes of fraud protection and credit risk reduction to the extent permitted by law.
As the owner of your own personal data, you have choices, specifically, the following: You have several choices available when it comes to your personal data:
Limit the amount of Personal Data provided to Norwex: If you have a personal or business relationship with Norwex, you have the right to limit the types of personal data we store, process, and/or transmit.
Opt-Out of Marketing: You can exercise your right to prevent such processing by checking certain boxes on the forms we use to collect your data. You can also exercise the right at any time by contacting us at
CDNcompliance@norwex.com or
UScompliance@norwex.com or
EUcompliance@norwex.com or
tw-compliance@norwex.com, depending on the country in which you are located.
Opt-Out of Electronic Communications: You have the right to opt out of receiving promotional messages from Norwex using the “unsubscribe” hyperlink at the bottom of every email. Alternatively, you may email Norwex with “Unsubscribe” in the subject, at
CDNcompliance@norwex.com or
UScompliance@norwex.com or
EUcompliance@norwex.com or
tw-compliance@norwex.com, depending on the country in which you are located, with your request.
Please note that even if you opt out of promotional messages, Norwex may still send you additional messages relating to your account and other important data, to the extent permitted by law.
We have implemented measures designed to secure your personal data from accidental loss and from unauthorized access, use, alteration, and disclosure. All of your personal data you provide to us is stored on secure servers behind firewalls. All payment transactions you make via our websites are encrypted using SSL technology.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our websites; any transmission is at your own risk. Once we have received your data, we will use strict procedures and security features to try to prevent unauthorized access.
We may transfer your personal data to Norwex databases in countries other than where it was provided, including the locations of any Norwex companies and locations and our service providers. When we do so, we transfer your personal data in compliance with the applicable data protection laws. Further our privacy program requires the same high level of security and protection of personal data in all geographies with procedures in place to help us ensure this is so. In addition, personal data, particularly data collected in the EU or the EEA, shall only be transmitted to controllers outside of the European Union if the appropriate level of data privacy has been ensured, such as the EU standard contractual clauses or individual contractual agreements that meet the relevant requirements of European law or the application of a Privacy Shield Certification.
We will only retain your personal data for as long as necessary for the purposes set out in this policy; for as long as your account is active; or as needed to provide services to you.
Norwex will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and as otherwise described in this policy.
You can exercise your rights by sending us an email at CDNcompliance@norwex.com or EUcompliance@norwex.com. Please note that we are required to verify your identity before we are able to process any of the requests described in this Section; and at our discretion, deny your request if we are unable to verify your identity.
Right of Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data. This includes the right to ask us supplementary information about:
- The categories of data we’re processing
- The purposes of data processing
- The categories of third parties to whom the data may be disclosed
- How long the data will be stored (or the criteria used to determine that period)
- Your other rights regarding our use of your data
Right to Rectification (Correction): You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to Erasure (Right to be Forgotten): You have the right to obtain the erasure of personal data concerning you without undue delay and the Norwex will erase personal data without undue delay when various grounds apply.
Right to Restriction of Processing: You have the right to obtain restriction of processing when various grounds apply.
Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to Norwex, in a structured, commonly used, and machine-readable format and you have the right to transmit those data to another entity without hindrance from Norwex.
Right to Object: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. Norwex shall no longer process the personal data unless there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
You have the right to lodge a complaint regarding our use of your data: If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority. For the EU, see https://ec.europa.eu/info/law/law-topic/dataprotection_en. For the UK, see https://ico.org.uk/
The California Consumer Privacy Act (“CCPA”) provides California residents with specific rights regarding their personal data.
Right To Know & Data Portability: You may request that we disclose:
- The categories of personal data collected
- Specific pieces of personal data collected
- The categories of sources from which we collected personal data
- The purposes for which we use the personal data
- The categories of third parties with whom we share the personal data
- The categories of your personal data that we sell or disclose to third parties
- You may also request we provide you a copy of your personal data in a readily portable format.
Deletion: You have the right to request we delete any of your personal data we collected from you and retained, subject to certain exceptions. We may deny your deletion request if retaining the personal data is necessary for us or our service providers to:
- Complete the transaction for which we collected the personal data, provide a requested good or service, take actions reasonably anticipated within the context of our ongoing business relationship, or otherwise perform our contract.
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
- Debug products to identify and repair errors that impair existing intended functionality.
- Exercise free speech, ensure the right of another individual to exercise their free speech rights, or exercise another right provided for by law.
- Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
- Enable solely internal uses that are reasonably aligned with individuals’ expectations based on your relationship with us.
- Comply with a legal obligation.
- Make other internal and lawful uses of that personal data that are compatible with the context in which you provided it.
Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
The Personal Data Protection Act in Taiwan ("PDPA") applies to the collection, processing and use of personal data in Taiwan. You may contact us either in writing or by e-mail (tw-compliance@norwex.com) to exercise the following rights in accordance with the PDPA:
- Check and review your personal data;
- Request a copy of your personal data;
- Supplement or correct your personal data;
- Request us to cease the collection, processing, or use of your personal data; and
- Request us to delete your personal data.
If you chose not to provide your personal data or provide incomplete personal data, we may not be able to provide you with some of the services.
The Our Company website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
It is our policy to post any changes we make to our privacy policy on this page. It is your responsibility to visit this page from time to time to check for any change. Your continued use of the websites or our services shall be deemed to be your consent to such changes.
The date this privacy policy was last revised is identified at the top of the page.
You may contact us with any questions you may have on our privacy policy. Please contact us by email at CDNcompliance@norwex.com or UScompliance@norwex.com or EUcompliance@norwex.com or twcompliance@norwex.com, depending on the country in which you are located, or by regular mail at:
If you are resident in USA:
Chief Information Officer
Norwex USA, Inc.
800 W. Bethel Road
Coppell, TX 75019
USA
If you are resident in Canada:
Chief Information Officer
Norwex Canada Inc.
P.O. Box 714
Stn Main
Dauphin, Manitoba R7N 3B3
Canada
If you are a resident of the European Economic Area:
Chief Information Officer
Norwex USA, Inc.
800 W. Bethel Road
Coppell, TX 75019
USA
If you are resident in Taiwan:
Norwex Compliance Department
Norwex Taiwan Ltd
14F., No. 206, Sec. 1, Keelung Rd.,
Xinyi Dist., Taipei City 110058
Taiwan (R.O.C.)
