Privacy Policy

Who we are

This website is run by NORVYX SOLUTIONS LTD ("NORVYX Solutions", "we", "us"), a company registered in England and Wales with its registered office at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. We are the controller of the personal data described in this policy.

You can contact us about privacy by email at info@norvyxsolutions.xyz, by phone on 07868 241181, or by post to NORVYX SOLUTIONS LTD, 61 Bridge Street, Kington, HR5 3DJ, United Kingdom.

What we collect

• Enquiries. When you use the contact form or email us: your name, email address, and anything else you choose to give us, such as your phone number, company and the content of your message.
• Orders. When you buy a service: your name, email address, billing address, phone number if you give it, and what you bought. Card and payment details are collected and processed by Stripe; we never see or store your full card number.
• Project information. While we work for you, we may access systems, documents or accounts that contain personal data. How we handle that data is set out in our engagement terms and, where needed, a separate data processing agreement.
• Technical data. Our hosting provider, Netlify, records basic request logs (such as IP address, browser type and the pages requested) to keep the site running and secure.
• Cart storage. Your cart is saved in your browser's local storage so it isn't lost between pages. It never leaves your device unless you go to checkout. We don't use analytics, advertising or tracking cookies.

How we use your data

• To reply to enquiries and give quotes (our legitimate interest in responding to people who contact us, or steps you ask us to take before entering a contract).
• To process orders, deliver services and provide support (performance of our contract with you).
• To keep accounting and tax records (legal obligation).
• To protect our website and customers against fraud and misuse (legitimate interests).

We don't sell your personal data and we don't use it for automated decision-making. We'll only send you marketing if you've asked to receive it, and you can opt out at any time.

Who we share it with

• Stripe, to take payments and prevent fraud.
• Netlify, which hosts this website and receives contact form submissions.
• Microsoft, which provides our email service.
• Professional advisers such as accountants and lawyers, under a duty of confidentiality.
• Law enforcement or regulators, where the law requires it.

International transfers

Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by an approved safeguard, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to standard contractual clauses.

How long we keep it

• Enquiries that don't lead to an order: up to 24 months.
• Order, invoice and accounting records: 6 years after the end of the financial year they relate to, as required by HMRC.
• Client project data: only for the length of the engagement, after which it's returned or securely deleted unless we've agreed otherwise in writing.

Keeping it secure

We use encrypted connections, multi-factor authentication on our accounts, least-privilege access, and encrypted storage for client information. No system is completely secure, but we work to the same standards we recommend to our clients.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that's wrong or incomplete;
• delete your data, where we no longer have a lawful reason to keep it;
• restrict or object to how we use it;
• transfer data you gave us to another organisation, where technically possible;
• withdraw consent, where we rely on consent.

To make a request, email us. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.

Changes to this policy

We'll update this page if the way we handle personal data changes. The date at the top shows when it was last revised.