Privacy Policy

Norminary Ltd ("Norminary", "we", "us" or "our") respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it and the rights you may have in relation to it.

1. Who we are
Norminary Ltd is a company registered in England and Wales.
Company number: 16795795
Registered office: 3rd Floor, 86–90 Paul Street, London, England, United Kingdom, EC2A 4NE
Privacy contact: hello@norminary.com
For the personal information described in this policy, Norminary Ltd will normally be the data controller.

2. Information we may collect
Depending on how you interact with us, we may collect:
your name;
email address;
telephone number, where provided;
company, organisation or professional information;
details you provide about a potential project or enquiry;
correspondence between you and Norminary;
information required to provide our services or manage a client relationship;
invoicing, transaction and accounting information;
technical information relating to your use of our website, such as device, browser, IP address and usage information;
cookie and consent information; and
information you choose to provide through forms, email, telephone, social media or other communications.
We may also obtain business contact information from publicly available professional or business sources, such as company websites, business directories or professional profiles, where we undertake legitimate business development activity.

3. How we use your information and our lawful bases
Responding to enquiries and discussing projects
We use information you provide to respond to enquiries, understand your requirements, prepare proposals and discuss potential work.
Our lawful basis will normally be taking steps at your request before entering into a contract and/or our legitimate interests in responding to enquiries and developing our business.

Providing our services
Where you become a client, we use personal information to manage the project, communicate with you, deliver our services and manage our relationship with you.
Our lawful basis is normally performance of a contract.

Administration, invoicing and legal obligations
We may process information for invoicing, accounting, taxation, record keeping and other business administration.
Our lawful basis may be performance of a contract, compliance with a legal obligation and our legitimate interests in operating and protecting our business.

Operating and improving our website
We may use technical and usage information to operate, secure, maintain and understand the performance of our website.
Where non-essential cookies or similar technologies require consent, we will seek that consent. More information is available in our Cookie Policy.

Business development and marketing
We may use business contact information to communicate about Norminary's services where permitted by law.
Where consent is required for a particular type of marketing, we will obtain it before sending that marketing.
You may ask us to stop sending direct marketing communications at any time.

4. AI and automated tools
Norminary uses artificial intelligence and automation tools to assist with some business operations.
This may include helping us organise information, manage workflows, prepare draft communications, assist with enquiries, carry out research, plan marketing or social media activity, and perform administrative tasks.
We currently use Marblism for some of these activities. Where necessary for a particular task, personal information contained in an enquiry, email or other business communication may be processed through Marblism and its authorised service providers on our behalf.
Marblism states that customer prompts, attachments, emails, calls and outputs processed through its service are not used to train Marblism's models or third-party AI models. Marblism may use authorised AI providers to provide AI inference services.
Norminary remains responsible for deciding why and how personal information is used in connection with our business and services.
We do not currently use artificial intelligence to make decisions about individuals based solely on automated processing where those decisions produce legal or similarly significant effects.

5. Who we share information with
We do not sell personal information.
Where necessary, we may share or allow access to personal information with trusted service providers that help us operate Norminary, including:
website hosting, website management and form providers, including Wix;
email and communications providers;
accounting and invoicing providers;
cloud storage and technology providers;
AI and automation providers, including Marblism and its authorised subprocessors;
social media, marketing and analytics platforms where we use their services;
professional advisers such as accountants, insurers or legal advisers; and
regulators, courts, law enforcement bodies or other authorities where disclosure is required by law.
These providers may process personal information only to the extent necessary for the relevant service and subject to applicable contractual and legal requirements.

6. International transfers
Some of the technology and service providers we use may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure that the transfer is handled in accordance with applicable UK data protection law and that an appropriate safeguard or lawful transfer mechanism is used where required.
You can contact us at hello@norminary.com if you would like further information about safeguards relating to international transfers.

7. How long we keep information
We do not keep personal information for longer than reasonably necessary for the purpose for which it was collected.
Our typical retention approach is:
General enquiries that do not become projects: normally up to 24 months after our last meaningful contact;
Client and project administration records: for the duration of the relationship and afterwards where reasonably required for contractual, legal or business purposes;
Accounting and financial records: for the period required by applicable UK law;
Website and analytics information: according to the retention settings of the relevant service and only for as long as reasonably necessary for its purpose; and
Cookie consent records: for as long as reasonably required to demonstrate and manage consent.
Some information may be kept for longer where required by law, necessary to establish or defend legal claims, or where another legitimate reason applies.

8. Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet-based system or method of electronic storage can be guaranteed to be completely secure.

9. Your rights
Depending on the circumstances and the lawful basis on which we use your information, you may have rights including:
the right to be informed about how your personal information is used;
the right to request access to your personal information;
the right to request correction of inaccurate or incomplete information;
the right to request deletion of your personal information in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to certain processing;
the right to data portability in certain circumstances; and
the right to withdraw consent where we rely on consent.
You have the right to object to the use of your personal information for direct marketing.
To exercise your rights, contact us at hello@norminary.com.
We may need to confirm your identity before completing certain requests.

10. Complaints
If you have a concern about how we use your personal information, please contact us first so that we have an opportunity to address it.
Email: hello@norminary.com
You also have the right to complain to the UK Information Commissioner's Office (ICO).

11. Third-party websites and services
Our website may link to websites, social media platforms or services operated by third parties.
Those organisations operate under their own privacy policies, and we are not responsible for how they independently process your personal information.

12. Cookies
Our website uses cookies and similar technologies.
For more information about the technologies we use and how you can manage your preferences, please see our Cookie Policy and the cookie preference controls available on our website.

13. Changes to this policy
We may update this Privacy Policy when our services, technology, legal obligations or use of personal information changes.
The latest version will be published on this page and the date at the top will show when it was last updated.

14. Contact us
For privacy questions, requests or concerns:
Norminary Ltd
3rd Floor, 86–90 Paul Street
London
England
EC2A 4NE
United Kingdom
Email: hello@norminary.com