A Mission to make a Difference

Norwex USA INC. Website Privacy Notice

Premium microfiber & sustainable cleaning products

Effective Date: 17 June 2026

Norwex USA, Inc. and Norwex Canada, Inc. (collectively, “Norwex,” “we,” “us,” or “our”) design and sell products intended to help reduce chemicals in your home.

This Website Privacy Notice (“Notice”) explains how we collect, use, disclose, retain, transfer, and protect personal information when you visit or interact with our websites, mobile applications, and other online services (collectively, the “Services”).

This Notice applies only to personal information collected through the Services from individuals located in the United States and Canada, and is intended to comply with applicable privacy laws, including certain U.S. state privacy laws; the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”); the Personal Information Protection and Electronic Documents Act (“PIPEDA”); and Québec’s Act Respecting the Protection of Personal Information in the Private Sector, as amended by Law 25.

This Notice also describes your privacy rights and choices under applicable law, including additional rights available to residents of certain jurisdictions such as Québec, and how to exercise those rights.

Depending on your location and interactions with the Services, Norwex USA, Inc. or Norwex Canada, Inc. may be responsible for your personal information.

This Notice does not apply to third-party websites, applications, or services that may link to or be accessible from the Services. We encourage you to review the privacy notices of those third parties.

1.      When and How We Collect Personal Information

2.      What We Collect and Why We Use It

3.      How We Use Personal Information

4.      How We Disclose Personal Information

5.      How We Secure Personal Information

6.      Data Retention

7.      Your Privacy Rights and Choices in the U.S. & Canada

8.      International Transfer

9.   Changes to Our Privacy Notice

10. Contact Us

We collect personal information from the following sources:

·        Directly from you when you create an account, place an order, contact customer service, participate in a promotion, or complete a form.

·        Automatically through cookies, pixels, SDKs, and similar technologies that collect device, browsing, and usage information when you use the Services.

·        From third parties including analytics providers, advertising and social-media platforms, payment processors, fraud-prevention providers, and delivery providers.

·        From our affiliates and service providers to process payments, fulfill and deliver orders, support returns, maintain accounts, and support business operations.

Your choices for automatic collection: You can control cookies and similar technologies using your browser/device settings and our Cookie Consent Manager (see “Cookies & Online Analytics” below).

Children: Our Services are not directed to children, and we do not knowingly collect personal information from children under 13 or individuals under 16. If we learn we collected such information, we will delete it.

We collect, use, disclose, and retain personal information for legitimate business, commercial, operational, contractual, security, legal, and compliance purposes.

Where required by applicable law, we rely on consent or another lawful basis permitted by law.

A. Categories, Types, and Purposes

Sensitive Personal Information (SPI): We do not knowingly collect or process sensitive personal information except where necessary to provide requested services, comply with legal obligations, process transactions, or protect against fraud and security risks.

We do not collect precise geolocation information.

If we collect sensitive personal information in the future, we will update this Notice and process such information only as permitted by applicable law.

B. Cookies, Tracking & Online Analytics

·        We use cookies, pixels, SDKs, and similar tools to recognize your browser/device, remember preferences, analyze site traffic, and personalize content/ads.

·        You may manage your privacy choices through:

o   Browser and device privacy settings

o   Our Cookie Consent Manager

o   The “Do Not Sell or Share My Personal Information” link available in the website footer

o   The Global Privacy Control (“GPC”)

·        For additional information, please review our Cookie Notice.

We use personal information to:

·        Provide, operate, personalize, and improve the Services and your shopping experience.

·        Process orders, deliveries, returns, and payments; communicate about your account or orders.

·        Provide customer service and support, including troubleshooting.

·        Analyze site performance and user activity; secure our systems; prevent fraud and misuse.

·        Send marketing communications and personalize offers according to your choices.

·        Comply with legal, regulatory, tax, accounting, and contractual obligations.

Profiling/Automated Decision-Making: We may use analytics and inferences derived from interactions with the Services to personalize content, recommendations, and advertising.  Norwex does not use automated decision-making technologies that produce legal or similarly significant effects on individuals; if this changes, we will update this Notice.

“Sale” or “Sharing” for Targeted Advertising:  As defined under certain U.S. privacy laws, Norwex may “sell” or “share” certain identifiers, device information, online activity information, and inferences with advertising and analytics partners for cross-context behavioral advertising or targeted advertising purposes.

Targeted advertising generally refers to displaying advertisements based on personal information collected from your activities across non-affiliated websites, applications, or services over time.

You may opt out of these activities at any time using:

·        Our “Do Not Sell or Share My Personal Information” link

·        Our Cookie Consent Manager

·        The Global Privacy Control (“GPC”) signal

Norwex does not otherwise sell personal information.

We disclose personal information where reasonably necessary to operate the Services, fulfill transactions, support business operations, comply with legal obligations, and support advertising and analytics activities.

Service providers and contractors process personal information only on our instructions and for authorized business purposes consistent with applicable law.

Certain advertising and analytics partners may process personal information as independent third parties subject to your privacy choices and applicable law.

We have implemented and maintain reasonable and appropriate administrative, technical, and physical safeguards designed to secure your personal data from accidental loss and from unauthorized access, use, alteration, and disclosure.

No method of transmission or storage is 100% secure, but we take commercially reasonable steps to reduce risk, including access controls, encryption and secure transmission, vendor due diligence and contractual security obligations, workforce training and confidentiality obligations, and monitoring, logging, and regular security reviews.

We keep personal information no longer than necessary for the purposes described in this Notice, or as required by law or contract. When personal information is no longer needed, we delete or de-identify it. If deletion is not immediately feasible, we will securely store and isolate the information until deletion is possible.

Retention periods may vary depending on the nature of the information, legal obligations, operational requirements, dispute resolution needs, technical limitations, and your privacy choices.

Depending on your location and applicable law, you may have rights regarding your personal information.  Norwex will take reasonable steps to verify your identity before processing a request and will respond within the timeframe required by applicable law.

You may submit privacy requests by emailing Privacy@Norwex.com or completing the webform found here.

Opt-Out of Marketing: You may opt out of promotional emails at any time by clicking the “unsubscribe” link in marketing communications. Even if you opt out of marketing communications, Norwex may continue sending non-promotional transactional or service-related communications.

Rights Available Under U.S. Privacy Laws

Subject to applicable law, eligible U.S. residents may have the following rights:

·        Right to Know and Access – Request information regarding the categories and specific pieces of personal information collected, used, disclosed, sold, or shared.

·        Right to Data Portability – Obtain personal information in a portable and readily usable format.

·        Right to Correction – Request correction of inaccurate personal information.

·        Right to Deletion – Request deletion of personal information, subject to legal exceptions.

·        Right to Opt Out of Sale or Sharing – Opt out of the sale or sharing of personal information for targeted advertising purposes.

·        Right to Limit Use of Sensitive Personal Information – Norwex uses sensitive personal information only as permitted by applicable law.

·        Right to Be Informed of Automated Decision-Making – Norwex does not use automated decision-making technologies producing legal or similarly significant effects. If this changes, we will update this Notice.

·        Right to Non-Discrimination – Receive equal service and pricing regardless of exercising privacy rights.

·        Right to Withdraw Consent – Where processing is based on consent, withdraw consent going forward.

·        Right to Appeal – Where applicable law provides this right, you can email Privacy@Norwex.com to appeal a decision relating to your privacy request.

Right to Lodge a Complaint – You may have the right to file a complaint with your state’s Attorney General or other applicable regulatory authority if you believe we have violated your privacy rights. For example, residents of California have the right to file a complaint with the California Privacy Protection Agency (“CPPA”): https://cppa.ca.gov/

Rights Available Under Canadian Privacy Laws

Individuals located in Canada may have the following rights under applicable privacy laws, including PIPEDA and Law 25:

·        Right of Access – Request access to personal information and information regarding how it has been used or disclosed.

·        Right to Correction or Rectification – Request correction of inaccurate, incomplete, or outdated personal information.

·        Right to Withdraw Consent – Withdraw consent where processing is based on consent, subject to legal or contractual restrictions.

·        Right to Data Portability – Request computerized personal information in a structured, commonly used technological format, where applicable.

·        Right to Transparency – Request information regarding Norwex privacy practices and personal information management.

·        Right to De-Indexation or Cessation of Dissemination – In certain circumstances provided by law, request cessation of dissemination of personal information or de-indexation of links associated with your name.

·        Right to Be Informed of Automated Decision-Making – Norwex does not use automated decision-making technologies producing legal or similarly significant effects. If this changes, we will update this Notice.

·        Right to File a Complaint – File a complaint with the applicable privacy regulator, including the Office of the Privacy Commissioner of Canada or Québec’s Commission d’accès à l’information.

Norwex Canada, Inc. is responsible for personal information under its control relating to Canadian operations and has designated a Privacy Office responsible for privacy compliance.

Personal information may be collected, stored, accessed, processed, or transferred outside your province, territory, or state of residence, including within the United States and Canada and other jurisdictions where Norwex affiliates or service providers operate.

As a result, personal information may become subject to the laws of the jurisdiction where it is processed, including access by courts, regulators, or law enforcement authorities as permitted by law.

Where required by applicable law, Norwex conducts appropriate privacy and transfer impact assessments and implements contractual, administrative, and technical safeguards designed to protect personal information during cross-border processing.

This notice may change from time to time and your continued use of our website is deemed to be an acceptance of such changes. If we make material changes, we will provide notice before the changes take effect. Check this notice for updates.

The date this privacy notice was last revised is identified at the top of the page.

If you have questions regarding this Notice, our privacy practices, or your privacy rights, please contact:

Privacy Office: Privacy@Norwex.com

Norwex USA, Inc.

450 South Denton Tap Road

P.O. Box 1727

Coppell, TX 75019 USA

Norwex Canada, Inc.

Responsible for personal information governance relating to Canadian operations and individuals located in Canada, including Québec.