Cookie Notice 🍪

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or smartphone) when you visit a website. They are widely used across the internet to make websites function correctly, to improve user experience, and to provide information to the owners of websites. Cookies are not programs and cannot carry viruses or malware.

When you visit norixmedia.com, our web server sends a cookie to your browser, which then stores it in a designated folder on your device. The next time you visit our site, your browser sends the cookie back to our server, allowing us to recognise you and remember certain details such as your language preference, whether you accepted our cookie banner, or items you were looking at in our product range.

In addition to traditional cookies, this notice also covers similar technologies such as local storage (used by your browser to store small amounts of data locally), session storage (temporary data that is cleared when you close your browser tab), and pixel tags (tiny invisible images embedded in web pages or emails that help us understand user behaviour). Throughout this document, we refer to all of these technologies collectively as "cookies" for simplicity.

Cookies can be set by the website you are visiting (known as "first-party cookies") or by other organisations whose content appears on that page, such as analytics providers or advertising networks (known as "third-party cookies"). We explain both types in the sections below.

2. How NorixMedia Uses Cookies

NorixMedia Ltd. uses cookies on norixmedia.com for several specific purposes. We believe in using the minimum number of cookies necessary to deliver a functional and helpful experience for our visitors. Here is an overview of why we use cookies:

• Website functionality: To ensure the website operates correctly, including remembering your cookie consent choice, keeping you logged in if applicable, and storing your shopping preferences such as selected gardening kits.
• User preferences: To remember settings you have chosen, such as your preferred language (English, Gaeilge, Deutsch, etc.) and your location within the EU for delivery estimation purposes.
• Analytics and performance: To understand how visitors use our website, which pages are most popular, how long people spend on different sections, and where visitors encounter difficulties. This data helps us improve the site for everyone.
• Marketing measurement: If you have consented, to track how effective our advertising campaigns are and to understand which channels bring visitors to our site. We do not use cookies to build personal advertising profiles without your explicit consent.
• Security: To detect and prevent fraudulent activity, protect against automated abuse (such as spam form submissions), and ensure the integrity of transactions processed through our website.

We do not sell cookie data to any third parties. We do not use cookies to identify you personally unless you have voluntarily provided your personal information through a form on our website. Our analytics data is aggregated and anonymised wherever technically possible.

3. Types of Cookies We Use

We categorise our cookies into three groups based on their purpose. The table below provides a summary, and detailed explanations of each category follow in subsequent sections.

4. Essential Cookies

Essential cookies are fundamental to the proper operation of norixmedia.com. Without them, basic features like page navigation, form submissions, and cookie consent management would not work. These cookies are set automatically when you visit our website and do not require your consent under the EU ePrivacy Directive (Directive 2002/58/EC as amended by Directive 2009/136/EC), as they are strictly necessary for providing the service you have requested.

We review our essential cookies regularly to ensure they remain necessary. If an essential cookie is no longer needed for site functionality, we remove it. You cannot opt out of essential cookies while using our website, as doing so would prevent core features from working.

5. Analytics Cookies

We use analytics cookies to gather statistical information about how visitors use norixmedia.com. This data is crucial for understanding what works well on our site and what needs improvement. For example, analytics data tells us which gardening products attract the most interest, how visitors navigate between pages, and whether the checkout process causes any confusion.

We use Google Analytics 4 (GA4) as our primary analytics platform. GA4 processes data on servers operated by Google LLC. Where technically possible, we have configured GA4 to anonymise IP addresses before storage, meaning that your full IP address is not retained by Google on our behalf. We have also disabled the data sharing options that would allow Google to use our analytics data for its own advertising purposes.

Analytics cookies are only placed on your device after you click "Accept" on our cookie consent banner. If you click "Reject" or do not interact with the banner, these cookies are not set, and no analytics data is collected from your visit.

The data collected through analytics cookies includes: pages visited, time spent on each page, your approximate geographic location (country and city level only), the type of device and browser you use, the website or search engine that referred you to norixmedia.com, and the screen resolution of your device. None of this data is linked to your personal identity unless you have separately provided your details through a form on our site.

6. Marketing Cookies

Marketing cookies help us measure the performance of our advertising campaigns across platforms such as Google Ads and Meta (Facebook/Instagram). When you consent to marketing cookies, we can track whether a visit to norixmedia.com originated from one of our advertisements and whether that visit resulted in a meaningful action such as completing an order form.

Marketing cookies are only activated when you explicitly opt in by clicking "Accept" on our cookie consent banner. We do not use marketing cookies to build personal profiles for targeted advertising on our own website. Their sole purpose is to measure campaign performance and understand which advertising channels are most effective in reaching people interested in home gardening products.

If you consent to marketing cookies, data collected by Meta and Google may be used by those platforms in accordance with their own privacy policies. We encourage you to review the privacy policies of Google and Meta for full details of how they process data.

7. Third-Party Cookies

Some cookies on norixmedia.com are set by third-party services that we use to enhance your experience or to support our business operations. These third parties have their own cookie policies and privacy practices, which we do not control. However, we have carefully selected these partners and only work with organisations that maintain appropriate data protection standards.

The third-party services that may set cookies on our website include:

• Google LLC (Google Analytics, Google Ads): Provides website analytics and advertising measurement services. Data may be processed on servers in the European Economic Area and, in some cases, in the United States under Standard Contractual Clauses approved by the European Commission.
• Meta Platforms Ireland Ltd (Facebook Pixel): Measures the effectiveness of Facebook and Instagram advertising campaigns. Meta Platforms Ireland Ltd operates under EU jurisdiction with its European headquarters in Dublin, Ireland.
• Iconify (Icon delivery): Delivers icon assets used in the website design. This service may use minimal technical cookies or caching mechanisms to improve loading performance.
• Google Fonts: Serves typeface files used for website typography. Google may collect your IP address for the purpose of delivering these font files. No cookies are set, but connection logs may be maintained.

We regularly review the third-party services integrated into our website. If a third party changes its data practices in a way that conflicts with our standards or with EU data protection law, we will either renegotiate the arrangement or remove that service from our website.

8. Cookie Duration and Retention

Cookies used on norixmedia.com fall into two categories based on how long they remain on your device:

We aim to set the shortest possible retention period for each cookie while still fulfilling its purpose. Here is a summary of maximum retention periods by category:

• Essential cookies (local storage): 12 months maximum
• Essential cookies (session storage): Cleared when browser tab is closed
• Analytics cookies (Google Analytics): 13 months
• Marketing cookies (Google Ads, Meta): 90 days

You can delete all cookies at any time through your browser settings. Instructions for doing so are provided in Section 10 below.

9. Managing Your Cookie Preferences

When you first visit norixmedia.com, a cookie consent banner appears in the bottom-right corner of your screen. This banner gives you two clear options:

Your choice is stored in your browser's local storage for 12 months. After this period, the consent banner will appear again so you can make a fresh decision. You can also change your mind at any time by clearing your browser's stored data for norixmedia.com (see Section 10 for instructions), which will cause the consent banner to reappear on your next visit.

If you do not interact with the cookie banner at all, only essential cookies will be active. We do not assume consent from inaction. Analytics and marketing cookies require an explicit "Accept" action before they are loaded.

10. Browser-Level Cookie Controls

In addition to using our cookie consent banner, you can control cookies at the browser level. Most modern browsers allow you to view and delete cookies, block all cookies, block only third-party cookies, or set rules for specific websites. Here are links to cookie management instructions for the most commonly used browsers:

• Google Chrome: Settings → Privacy and security → Cookies and other site data. You can block third-party cookies, clear cookies on exit, or manage site-specific permissions.
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data. Firefox offers Enhanced Tracking Protection with Standard, Strict, and Custom levels.
• Apple Safari: Preferences → Privacy → Manage Website Data. Safari blocks cross-site tracking by default through its Intelligent Tracking Prevention feature.
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data. Edge offers Basic, Balanced, and Strict tracking prevention levels.

To clear local storage and session storage data used by our essential cookies, you can use your browser's developer tools (usually accessible by pressing F12), navigate to the "Application" or "Storage" tab, and delete stored data for norixmedia.com.

11. Legal Basis for Using Cookies

Our use of cookies complies with the following European Union legislation:

• ePrivacy Directive (Directive 2002/58/EC as amended by 2009/136/EC): This directive requires consent before placing cookies on a user's device, with an exception for cookies that are strictly necessary for providing a service explicitly requested by the user. Our essential cookies fall under this exception. Analytics and marketing cookies require and receive your consent before activation.
• General Data Protection Regulation (GDPR, Regulation 2016/679): Where cookies process personal data (such as IP addresses or unique identifiers), we rely on consent as the legal basis under Article 6(1)(a) for analytics and marketing cookies. For essential cookies that process personal data, we rely on legitimate interest under Article 6(1)(f), as these cookies are necessary for the basic functioning of the website service you have requested.
• Irish Data Protection Act 2018 (S.I. No. 336/2011): As an Irish-registered company, we also comply with the Irish transposition of the ePrivacy Directive and the supplementary provisions of the Data Protection Act 2018, which governs data protection in Ireland alongside the GDPR.

We implement a "consent before cookies" model. Non-essential cookies are only loaded after you have made an active choice to accept them. We do not use cookie walls (where access to content is blocked until cookies are accepted), as this practice is not considered valid consent under current GDPR guidance from the European Data Protection Board.

12. International Data Transfers

Some of the third-party services that set cookies on our website are operated by companies headquartered outside the European Economic Area (EEA). When data collected through cookies is transferred outside the EEA, we ensure appropriate safeguards are in place:

• Google LLC (United States): Google participates in the EU-U.S. Data Privacy Framework and has been granted an adequacy finding by the European Commission (adopted July 10, 2023). Additionally, Standard Contractual Clauses (SCCs) approved by the European Commission are in place as a supplementary safeguard.
• Meta Platforms (Ireland/United States): Meta Platforms Ireland Ltd acts as the data controller for EU users. Where data is transferred to Meta Platforms Inc. in the United States, this is covered by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

We monitor developments in international data transfer law, including any changes to adequacy decisions or the Data Privacy Framework, and will update our practices accordingly. If an existing safeguard mechanism is invalidated, we will work with affected providers to implement alternative compliant transfer mechanisms or cease the data transfer.

13. Your Rights Under GDPR

Where cookies process your personal data, you have the following rights under the General Data Protection Regulation (Articles 15-22):

To exercise any of these rights in relation to cookie data, please contact us at [email protected]. We will respond to your request within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC), which is the supervisory authority for data protection in Ireland. The DPC can be contacted at: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland. Website: www.dataprotection.ie.

14. Children's Privacy

Our website is not directed at children under 16 years of age. We do not knowingly set cookies that collect personal data from children. If a parent or guardian becomes aware that a child has provided personal information through our website or that cookies are being used to track a child's browsing activity, please contact us at [email protected] and we will take steps to remove that data promptly.

While some of our gardening kits are suitable for children to use with adult supervision, any orders must be placed by a person aged 16 or over. The cookie consent mechanism on our website is designed for adults, and we assume that any visitor who clicks "Accept" on the cookie banner is at least 16 years old or is using the website under the supervision of a parent or guardian who has given consent on their behalf.

15. Changes to This Cookie Notice

We may update this Cookie Notice from time to time to reflect changes in the cookies we use, changes in legislation, or updates to our business practices. When we make material changes to this notice, we will:

• Update the "Last Updated" date at the top of this page
• Display a notice on our website informing you of the changes for at least 14 days
• Re-trigger the cookie consent banner if the changes affect the categories of cookies used or the purposes for which they are processed
• Notify registered customers by email if the changes are significant and affect data already collected

We recommend checking this page periodically to stay informed about how we use cookies. The current version of this notice has been in effect since January 15, 2026.

16. Contact Us

If you have questions, concerns, or requests related to this Cookie Notice or how NorixMedia uses cookies, please contact us using any of the methods below. We aim to respond to all enquiries within 5 business days.

For matters specifically related to your data protection rights, you may also contact the Irish Data Protection Commission directly at 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, or via their website at www.dataprotection.ie.