Privacy policy

This Privacy Policy explains how The North Bliss collects, uses, protects, retains, and shares personal information when you browse thenorthbliss.com, place an order, create an account where available, contact our team, or interact with our marketing and reviews. It also explains your choices and how to contact us about your information.

The customer-facing policy begins below. The final owner review section is for your internal use and should be removed before copying the policy onto your website. Confirm the operational details listed there before publication.

1 Who we are and what this policy covers

The North Bliss is the brand operating thenorthbliss.com, an online store offering organic foods and wellness products. In this policy, “we”, “us”, and “our” refer to The North Bliss, and “you” refers to a visitor, customer, recipient of an order, or person contacting us. Personal information means information that identifies you or can reasonably be linked to you.

We are responsible for the personal information we use to run our store. Shopify provides our ecommerce platform. Banks, couriers, messaging platforms, and other providers may also process information under their own privacy notices. This policy covers our use of information; it does not replace those providers’ notices or our separate shipping, return, and terms of service policies.

This policy is a notice about our practices. Visiting the website does not, by itself, give consent to every optional use of personal information. Where consent is required for marketing, cookies, or another activity, we obtain it separately.

2 Information you provide to us

Contact and delivery details: your name, email address, phone number, billing or shipping address, and delivery instructions.

Order and transaction details: products ordered, quantities, order numbers, payment method, payment confirmation, delivery status, and return or refund correspondence.

Bank transfer information: payment reference, sender name, amount, date, and proof of transfer you provide to help us match a payment to an order. A payment screenshot may contain additional information that you should hide if it is not needed.

Account details where accounts are available: contact details, account identifiers, sign-in or authentication information handled through the platform, order history, and preferences.

Support and customer content: emails, WhatsApp messages, enquiries, product or packaging photographs, reviews, ratings, and other information you choose to send or publish.

Marketing choices: subscription details, consent records, communication preferences, and requests to stop receiving promotions.

Please provide accurate details and only the information necessary for your request. Do not send passwords, one-time passcodes, full payment card details, unrelated bank statements, or identity documents through ordinary email or WhatsApp. If you order for another person, make sure you are entitled to provide their delivery details and tell them about this policy.

3 Information collected through the website and other sources

When you use our website, Shopify and tools supporting the store may collect technical information such as your IP address, approximate location derived from it, browser and device type, operating system, language, referring website, timestamps, and technical error or security logs.

Depending on the features enabled and your privacy choices, website activity information may include pages visited, products viewed, searches, cart activity, checkout events, purchases, and interactions with advertisements or marketing messages. Cookies, pixels, local storage, and similar technologies may be used for these purposes.

We may receive payment confirmations from banks, delivery updates from couriers, and support or review information from service providers. If you contact us through social media, we receive the information that you share with us or that the platform makes available through that interaction. The information received depends on the service and your settings.

4 How we use personal information

To receive and process orders, confirm payments, arrange delivery, provide order updates, and handle enquiries, complaints, returns, and refunds.

To operate customer accounts and remember shopping preferences where those features are available.

To communicate about an order, verify unclear delivery information, resolve failed delivery attempts, and provide customer support.

To maintain business records, reconcile payments, meet applicable tax and accounting requirements, and establish or defend legal claims.

To secure the website, troubleshoot problems, and detect or investigate suspicious orders, misuse, or fraud.

To understand website performance, improve product information and the shopping experience, and measure campaign effectiveness, subject to applicable privacy choices.

To send offers, product news, or other promotional messages where permitted and in accordance with your preferences; and to provide relevant advertising where enabled and legally permitted.

Some information is needed to complete an order or meet a legal requirement. If you do not provide it, we may be unable to fulfil that order or respond to your request. Optional marketing choices do not determine whether you can buy from us.

5 COD bank transfers and payment privacy

We currently offer Cash on Delivery and bank transfer. For COD orders, the courier receives the contact and delivery information needed to deliver the parcel and collect payment. We use collection and delivery confirmations for order administration.

For bank transfers, your bank processes the transfer under its own privacy and security terms. We use the payment information available to us and any proof you provide to verify and reconcile the payment. Please hide balances, unrelated transactions, and other unnecessary details before sharing a screenshot.

If other payment methods are introduced, the relevant provider may collect payment details directly. The applicable checkout instructions and provider privacy notice will explain that processing. We will update this policy where necessary.

6 Who may receive your information

We share information where needed for the purposes described in this policy, subject to applicable law. Recipients may include the following, depending on the services involved:

Shopify and hosting or technical providers that support the storefront, checkout, accounts, security, and ecommerce operations.

Couriers and fulfilment providers that need names, addresses, phone numbers, parcel details, and COD collection information.

Banks and payment providers involved in payment verification, reconciliation, or refunds.

Email, messaging, customer support, and review providers involved in communications or customer feedback.

Analytics and advertising providers where their tools are enabled, including information about website activity, identifiers, and purchase events, subject to your choices and applicable requirements.

Professional advisers, such as accountants and legal advisers, where needed for legitimate business purposes.

Authorities or other parties where required by a valid legal obligation, or where law permits disclosure to protect people, investigate fraud, resolve disputes, or protect legal rights.

Information may also be disclosed during a proposed or completed business sale, restructuring, or transfer, with appropriate limits and safeguards. We seek to limit disclosures to information needed for the purpose. A provider acting independently may use information under its own notice, while a provider acting on our behalf should process it within the agreed service arrangements.

7 Shopify and third party services

Our store is hosted on Shopify. Shopify processes information to provide ecommerce services to us and may process certain information for its own purposes as described in its privacy notices. Your use of Shopify consumer services, such as Shop where available, may be governed by separate terms and choices.

Shopify’s Consumer Privacy Policy is available at https://www.shopify.com/legal/privacy/consumers. Shopify’s privacy portal is available at https://privacy.shopify.com. Requests about information we control should be sent to us; requests about Shopify’s independent processing may also need to be sent to Shopify.

We may use Google tracking tools, Meta integration, and Judge.me review functionality to support the store. When these services are active, they may process information relevant to their role, such as website events and device identifiers for analytics or advertising, or review details for customer feedback. Their operation depends on our configuration, consent requirements, and your choices.

If you use WhatsApp, Google email services, social media, or links to another website, the relevant platform also processes information under its own privacy notice. Avoid posting private order or payment details in public comments.

8 Cookies analytics and advertising

Cookies are small files stored by your browser. Similar technologies include pixels and local storage. Their functions may include:

Essential functions: keeping the cart working, maintaining sessions, protecting checkout, and preventing misuse.

Preferences: remembering choices such as language or other website settings.

Analytics: understanding visits, page performance, and how shoppers use the store.

Advertising: measuring advertising results and, where enabled, helping show relevant advertisements on other platforms.

Where a cookie or privacy preference tool is provided, use it to review or change optional choices. You can also block or delete cookies in your browser. Blocking essential cookies may affect the cart, checkout, or account functions. Browser choices may need to be repeated on each device and after cookies are cleared.

Where required by applicable law, optional tracking is used only after the required consent or in accordance with an applicable opt-out. A published privacy policy alone does not activate these controls. Advertising platforms may offer their own preference settings; opting out of personalised advertising does not necessarily remove all advertisements.

9 Marketing WhatsApp and abandoned checkout messages

We may send promotional emails, messages, or offers where permitted and in line with your preferences. When required, we obtain consent before sending these communications. We distinguish promotions from necessary messages about payments, deliveries, returns, account security, and other service matters.

To stop promotional emails, use the unsubscribe option where provided or email us. To stop promotional WhatsApp or SMS messages, tell us on that channel or contact us using the details below. Please identify the phone number or email address to which the messages are being sent.

If abandoned-checkout reminders are enabled, we may use checkout contact details and cart information to send a reminder where permitted and subject to the required consent and preferences. We do not treat checkout contact details as unrestricted permission to send promotions. After you opt out, necessary order or security messages may still be sent.

10 Reviews and information you make public

If you submit a review, rating, photo, or other content for publication, information associated with that content, such as your display name and review text, may be visible to other people. Please avoid including phone numbers, addresses, payment details, medical records, or other private information in a public review.

Contact us if you wish to correct or remove personal information from a review. We will assess the request and work with the relevant review provider where needed. Separate permission may be required before we reuse an identifiable customer photo, video, or testimonial in advertising.

11 Sensitive information and children

Our store is not a medical consultation service. You do not need to provide medical records or detailed health information to browse or buy products. If you voluntarily disclose sensitive information in a support enquiry, we use it only as necessary to address that enquiry or meet an applicable obligation, subject to any consent or other legal basis required.

Our website and order services are intended for adults. We do not knowingly seek personal information from children for marketing. A parent or guardian who believes a child has provided personal information should contact us so we can assess the matter and remove information where appropriate. An adult should manage purchases for a child.

12 How long we retain information

We keep personal information for as long as reasonably needed for the purpose for which it was collected and for any applicable legal, accounting, security, or dispute-resolution requirements. Retention depends on the type of record, the relationship with you, and any outstanding order, complaint, investigation, or legal obligation.

Order and payment records may need to be retained after an order is completed. Support records are kept for handling and documenting enquiries. Marketing records are kept while relevant to your subscription and preferences; a limited suppression record may be retained to honour an opt-out. Technical and analytics records follow the relevant system settings and business need.

When information is no longer required, it should be deleted, anonymised, or securely disposed of. Some data may remain temporarily in restricted backups until those backups are replaced through their normal lifecycle. A deletion request does not override a lawful requirement to retain specific records.

13 Security and incident handling

We use reasonable technical and organisational safeguards appropriate to the information and services involved. Access should be limited to people who need it for their role, and information should be handled using appropriate account security and service-provider controls.

No website, storage system, or transmission method is completely secure. Please keep account sign-in details private and notify us if you suspect an unauthorised order or account access. We will assess suspected incidents, take appropriate remedial action, and notify affected individuals or relevant authorities where required by applicable law.

14 International processing and applicable legal grounds

Although our store serves customers in Pakistan, Shopify and other providers may store or process information in other countries. Those countries may have different privacy laws. Where a cross-border transfer is subject to specific legal requirements, the required safeguards or other lawful transfer mechanism must be used.

Where a law requires us to identify a legal basis, we process information as necessary to perform a contract or take requested steps before a contract, meet a legal obligation, pursue legitimate interests subject to applicable balancing requirements, or rely on consent where required. Consent may be withdrawn for future processing without making earlier lawful processing invalid.

The rights and obligations that apply depend on your location, the processing involved, and the scope of the applicable law. This policy does not assume that every foreign privacy law applies to every visitor. Where additional regional notices are legally required, we will provide them.

15 Your choices and privacy requests

You can contact us to ask about the information we hold, correct inaccurate details, request deletion, or change communication preferences. Depending on the law that applies, you may also have rights to access or receive a copy of your information, obtain a portable copy, restrict or object to processing, withdraw consent, or opt out of certain advertising disclosures.

Some laws describe advertising-related disclosures as a “sale”, “sharing”, or “targeted advertising” even where no cash payment is made for the information. Where those rules apply to our processing, the required disclosures, opt-out options, and recognised preference signals must be provided or honoured. We do not assume that an ordinary “Do Not Track” browser setting has the same effect as a legally recognised opt-out signal.

Email thenorthbliss@gmail.com with the subject “Privacy request”, or contact +92 310 0007814. Describe your request and provide the email or phone number used with us. We may ask for proportionate verification before disclosing, changing, or deleting information, to protect you from unauthorised requests. Do not send sensitive identification unless we specifically explain why it is needed and provide an appropriate method.

An authorised representative may need to show permission to act for you. We will respond within the timeframe required by applicable law and explain any lawful limitation or refusal. Where applicable, you may appeal a decision or complain to the relevant authority. We will not unlawfully discriminate against you for exercising a privacy right.

16 Changes to this policy and contacting us

We may update this policy as our services, practices, or legal requirements change. The updated version will appear at https://thenorthbliss.com/policies/privacy-policy with a revised last updated date. Where required, we will provide additional notice or request consent for a material change.

For privacy questions, requests, or complaints, contact The North Bliss at thenorthbliss@gmail.com or call or WhatsApp +92 310 0007814. Please include enough information for us to identify the matter without sending unnecessary sensitive details.