You are about to type a card number into a website you have never used before. Here is precisely what happens to it, and what does not.
NORÉA never sees your card
Checkout runs on Shopify's own payment infrastructure, on Shopify's domain, not ours. Card details are captured, encrypted and processed by Shopify Payments and its acquiring banks. They never touch this store's servers, are never emailed to us, and are never stored by us. What we can see in our order screen is the last four digits and the card brand — the same thing that is printed on your receipt.
PCI DSS Level 1
Shopify is certified PCI DSS Level 1, the highest of the four compliance levels defined by the Payment Card Industry Security Standards Council, and is audited against it annually. That certification covers the checkout you are sent to, the storage of payment data and the connections to the card networks.
Encryption in transit
Every page of this store and the entire checkout are served over TLS 1.3 with HSTS enabled. You can verify it yourself: the padlock in the address bar, and a certificate issued to norea-6000.myshopify.com. If you ever land on a NORÉA checkout without a padlock, close the tab — it is not us.
Strong Customer Authentication
European cards are subject to SCA under PSD2. Depending on your bank you will be asked to confirm the payment in your banking app or by a one-time code. We cannot bypass it and neither can anyone pretending to be us.
What we accept
- Visa, Mastercard and American Express
- Apple Pay and Google Pay — the merchant never receives your real card number, only a device token
- Shop Pay — Shopify's accelerated checkout, with details held by Shopify, not by us
- PayPal — handled entirely inside PayPal, with their buyer protection attached
Fraud and chargebacks
Orders are screened by Shopify's fraud analysis. If an order is flagged we may email you to confirm before dispatching; we will never ask for a full card number, a PIN, a CVV or a password by email. If you receive such a message claiming to be from NORÉA, it is not from us — forward it to care@norea.com and delete it.
What we store
Name, delivery address, email, order contents and the last four digits of the card. Nothing else. We use it to fulfil the order and to answer you if you write in. You can ask for a copy or for deletion at any time — see the privacy policy.
Prices
All prices are shown in euro and include Spanish VAT for destinations inside the European Union. Shipping is calculated before you pay, on the final step, and there are no charges added after that step. No subscription is created, and no card is stored for future use unless you deliberately save it with Shop Pay.