Effective date: 1st January 2026

Norwex USA, Inc. (“Norwex,” “we,” “us,” or “our”) designs and sells products intended to help reduce chemicals in your home. This Website Privacy Notice (“Notice”) explains how we collect, use, disclose, share, and safeguard personal information when you visit or interact with our websites, mobile applications, and other online services (collectively, the “Services”). It also describes your privacy rights and how to exercise them.

If you sign up as a Consultant, this [Consultant Privacy Notice] also applies to you.

This Notice does not apply to third-party websites or services that may link to or be accessible from our Services. Please review their privacy notices.

1. When and How We Collect Personal Information

2. What We Collect and Why We Use It

3. How We Use Personal Information

4. How We Disclose Personal Information

5. How We Secure Personal Information

6. Data Retention

7. Your Privacy Rights and Choices

8. International Transfer

9. Changes to Our Privacy Notice

10. Contact Us

We collect personal information from the following sources:

·         Directly from you – when you create an account, place an order, contact customer service, participate in a promotion, or complete a form.

·         Automatically – via cookies, pixels, SDKs, and similar technologies that log device, browsing, and usage activity when you use the Services.

·         From third parties – analytics providers, advertising and social-media platforms, payment and fraud-prevention partners.

·         From our affiliates and service providers – to process payments, fulfill and deliver orders, support returns, or maintain your account.

Your choices for automatic collection: You can control cookies and similar technologies using your browser/device settings and our Cookie Consent Manager (see “Cookies & Online Analytics” below).

Children: Our Services are not directed to children, and we do not knowingly collect personal information from children under 16. If we learn we collected such information, we will delete it.

We collect the following categories of personal information for the purposes described below.

A. Categories, Types, and Purposes

Sensitive Personal Information (SPI): We do not routinely collect SPI (e.g., race/ethnicity, biometric/health data, etc.). If we ever collect SPI, we will update this privacy notice and will treat it as “limited use” sensitive personal information as required by law, and you may have the right to limit its use/disclosure.  We do not collect precise geolocation data.

B. Cookies, Tracking & Online Analytics

·         We use cookies, pixels, SDKs, and similar tools to recognize your browser/device, remember preferences, analyze site traffic, and personalize content/ads.

·         Manage your choices at any time via browser/device settings and our Cookie Consent Manager.

·         We honor the Global Privacy Control (GPC) signal as an opt-out of sale/sharing (see Section 7).

We use personal information to:

·         Provide, operate, personalize, and improve the Services and your shopping experience.

·         Process orders, deliveries, returns, and payments; communicate about your account or orders.

·         Provide customer service and support, including troubleshooting.

·         Analyze site performance and user activity; secure our systems; prevent fraud and misuse.

·         Send marketing communications and personalize offers according to your choices.

·         Comply with legal, regulatory, tax, accounting, and contractual obligations.

Profiling/Automated Decision-Making: We may use inferences to personalize content and advertising. We do not engage in automated decision-making that produces legal or similarly significant effects. If that changes, we will update this Notice and describe your related rights.

“Sale” or “Sharing” for Targeted Advertising:

·         As defined by US Privacy Laws, we may sell or share certain identifiers, device data, and inferences with advertising and analytics partners for cross-context behavioral advertising (also called “targeted advertising” in some states).

·         “Targeted advertising” (various states) means displaying ads to you based on personal information obtained from your activities across non-affiliated websites/apps over time.

·         To exercise your “Do Not Sell or Share My Personal Information” right, you can opt-out of all cookies by managing your cookie preferences via our Cookie Consent Manager available on the website or by using the Global Privacy Control (GPC) signal (see Section 7)

·         We do not otherwise sell your personal data.

We disclose personal information as necessary to support our operations and for the purposes above. All service providers and contractors must process personal information only on our instructions and must maintain appropriate confidentiality and security, and we do not allow these providers to use personal information for their own purposes.

Who we disclose information to and why:

We have implemented and maintain reasonable and appropriate administrative, technical, and physical safeguards designed to secure your personal data from accidental loss and from unauthorized access, use, alteration, and disclosure. No method of transmission or storage is 100% secure, but we take commercially reasonable steps to reduce risk, including access controls, encryption and secure transmission, vendor due diligence and contractual security obligations, workforce training and confidentiality obligations, and monitoring, logging, and regular security reviews.

We keep personal information no longer than necessary for the purposes described in this Notice, or as required by law or contract. When personal information is no longer needed, we delete or de-identify it. If deletion is not feasible (e.g., backups), we securely store and isolate it from further processing until deletion is possible.

We set retention periods considering the nature of the data, business/legal needs, statutory requirements, and technical feasibility. Your deletion requests may affect retention (see Section 7).

Opt-Out of Marketing: You can opt in or out of certain processing on the forms we use to collect your data, or by clicking the "Unsubscribe" hyperlink at the bottom of emails. Please note that even if you opt out of promotional messages, Norwex may still send non-promotional service messages, such as order updates or account-related notices.

Under privacy laws in the US, individuals have rights regarding their personal data, subject to certain limitations and exceptions. We will verify your identity before processing your request and will acknowledge and respond to the request within the timeframe required by applicable law.

You can reach us by email: privacy@norwex.com. We honor the Global Privacy Control (GPC) signal as an opt-out of sale/sharing for the browser sending the signal.

You may also designate an authorized agent to make a request on your behalf, and we will require proof of authorization and identity verification. If your request is denied or we are unable to verify your identity, we will provide an explanation.

Right To Know & Access - You may request the categories and specific pieces of personal information we collected about you in the past 12 months, the sources, purposes, and categories of third parties to whom we disclosed it.

Right to Data Portability – Obtain your personal information in a portable, readily usable format.

Right to Correction - – Request correction of inaccurate personal information.

Right to Delete – Request deletion of personal information, subject to permitted exceptions.

Right to Opt-Out of the Sale or Sharing of Personal Data – As noted above, you may opt out of the sale or sharing of your personal information to third parties for targeted advertising using the Global Privacy Control, our Cookie Consent Manager tool, or via our “Do Not Sell or Share My Personal Information” link. We do not otherwise sell your personal data.

Right to Limit Use of Sensitive Personal Information – A s noted above, we do not collect sensitive personal information.

Right to Access Automated Decision-Making Information: We do not use your personal data for automated decision making or profiling that produces legal or similarly significant effects.

Right to Non-Discrimination – We will not discriminate against you for exercising these rights.

Right to Withdraw Consent – Where processing is based on consent, you may withdraw it going forward.

Right to Appeal – If we deny your request, you have the right to appeal our decision by contacting us at Privacy@Norwex.com. We will respond to your appeal within the timeframe required by law.

Right to Lodge a Complaint – Under the California Consumer Privacy Act (“CCPA”), residents of California have the right to file a complaint with the California Privacy Protection Agency (“CPPA”) if they believe we have violated their privacy rights: https://cppa.ca.gov/

We store and process information primarily in the United States but may transfer and process it in other countries where Norwex group companies and service providers operate.  If we transfer your personal information outside the United States, for example, to service providers located abroad, we ensure that appropriate safeguards such as contractual protections, confidentiality requirements, and other organizational/technical measures are in place to provide protections comparable to those described in this Notice.

This notice may change from time to time and your continued use of our website is deemed to be an acceptance of such changes. If we make material changes, we will provide notice before the changes take effect. Check this notice for updates.

The date this privacy notice was last revised is identified at the top of the page.

If you have questions about this Notice, please contact us by email at privacy@norwex.com or by mail at:

Norwex USA, Inc.
450 South Denton Tap Road

P.O. Box 1727
Coppell, TX 75019, USA