Privacy Policy

1. Who we are

NOORMARE B2B is a wholesale supplier of lifestyle products. We sell to businesses, not to consumers, and we act as the controller of the personal data described below. For any question about this policy, or to exercise a right, contact us at [email protected].

2. What we collect

We only ask for what we need to quote, produce and ship an order.

• Account data — email address, company name, contact person, WhatsApp or phone number, country or region, business type. Your password is stored only as a one-way hash; nobody on our team can read it.
• Inquiry data — the products, quantities, colours, trade terms, target price and message you send, together with the inquiry number we assign.
• Order and sample data — delivery address, consignee, and the shipping or payment details you give us once an order is placed.
• Technical data — IP address, browser and device type, pages viewed, language preference, the page that referred you, and the time of your visit.
• Correspondence — the emails and messages you exchange with our sales team.

We do not collect card numbers on this website. Bank details are exchanged only through the channel agreed with your sales contact.

3. How we use it

• Reply to your inquiry and prepare a quotation.
• Arrange samples, production, shipping, insurance and customs documentation.
• Run your account, including saved items, browsing history and past inquiries.
• Keep the site secure: detect abusive traffic, password-guessing attempts and fraud.
• Send the catalogue you subscribed to, and service messages about your own inquiries.
• Meet tax, customs, accounting and record-keeping obligations.

We do not run automated decision-making or profiling on your data, and we do not sell it. We do not send marketing email unless you subscribed to the catalogue, and you can withdraw at any time.

4. Cookies and local storage

A cookie is a small text file your browser stores for a website. This site uses three, all of them first-party:

• PHPSESSID — a session cookie that keeps you signed in. It expires when you close the browser.
• nm_inq — remembers up to 10 inquiries you sent without signing in, for 30 days, so you can reopen them on this device. It is cleared when you sign in and those inquiries are linked to your account.
• lang — remembers whether you chose English or Arabic, for 30 days.

We do not use advertising, cross-site tracking or third-party analytics cookies. You can delete or block cookies in your browser settings. Blocking PHPSESSID prevents sign-in; blocking nm_inq means guest inquiries cannot be reopened on this device.

5. Who we share it with

• Our hosting and email providers, who operate the server and deliver our mail on our behalf.
• Freight forwarders, couriers and customs brokers — only the details needed to ship your order.
• Auditors, banks or public authorities, where the law requires us to disclose.

We never sell, rent or trade personal data. Every provider we use is bound to process it only for the purpose we instruct.

6. Where your data is processed

Our website and mailbox are hosted on servers located in mainland China. If you contact us from another country, your data will be transferred there for the purposes described above. We take reasonable steps to keep it protected in line with this policy, and we transfer only what is needed to answer you and fulfil an order.

7. How long we keep it

• Account — while your account exists. If you delete it, the profile is anonymised immediately and the email address is replaced with a placeholder.
• Inquiries and orders — kept as commercial records for accounting and after-sales purposes, detached from your identity once the account is deleted.
• Guest device cookie — 30 days, or until you clear it yourself.
• Server logs containing IP addresses — up to 90 days, unless a security investigation requires longer.

8. Your rights

You can, at any time:

• Ask for a copy of the personal data we hold about you.
• Correct your company, contact and address details in the account centre.
• Delete your account yourself — Account centre → Delete account. This removes your profile, saved items and browsing history.
• Withdraw consent for the catalogue mailing, using the link in any of our emails or by writing to us.
• Object to a particular use, or ask us to restrict it.

Write to [email protected] and we will answer within 30 days. To protect you, we may ask you to confirm control of the account email before we act on a request.

9. How we protect it

• Traffic to this site is encrypted with HTTPS.
• Passwords are stored as one-way hashes, never in readable form.
• One active session per account: signing in on a new browser or device closes the session on the previous one, and you are told when that happens.
• Access to customer records is limited to the sales staff who need it to answer you.

No system is completely secure. If a breach ever affects your data, we will notify you and the relevant authority as applicable law requires.

10. Children

This is a business-to-business website and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, write to us and we will delete it.

11. Links to other sites

Our pages may link to courier tracking, payment or social platforms. Those sites have their own privacy policies, and this one stops at our domain.

12. Changes to this policy

If we change how we handle personal data, we will update this page and move the date at the top. Material changes affecting account holders will also be announced when you next sign in.