PRIVACY NOTICE

NORVSTONE respects your privacy and is committed to processing personal data lawfully, fairly, and transparently in accordance with applicable data protection law.
This Privacy Notice explains how NORVSTONE may collect, use, store, disclose, transfer, and otherwise process personal data in connection with this website, including where you visit this website, contact NORVSTONE, submit an enquiry, or otherwise interact with NORVSTONE through this website.

1. Controller
NORVSTONE is the controller responsible for the processing of personal data described in this Privacy Notice, except where expressly stated otherwise.
For privacy-related enquiries or to exercise your data protection rights, you may contact NORVSTONE using the contact details provided on this website.

2. Scope
This Privacy Notice applies to personal data processed in connection with this website, including information submitted through contact forms, email communications initiated through this website, and certain technical or usage data collected through the operation of the website.
This Privacy Notice does not apply to third-party websites, platforms, or services that may be linked from this website and that are subject to their own terms, notices, and policies.

3. Personal data NORVSTONE may collect
Depending on the circumstances, NORVSTONE may collect and process the following categories of personal data:
• identification and contact information, such as your name, email address, telephone number, company name, job title, or other contact details you choose to provide;
• the contents of messages, enquiries, correspondence, or other communications you send to NORVSTONE;
• technical and usage information collected by automated means, such as IP address, browser type, device type, operating system, referring URLs, pages visited, dates and times of access, and basic website interaction data;
• cookie-related or similar technology-related data, where such technologies are used;
• any other personal data you voluntarily provide that is relevant to your enquiry or interaction with NORVSTONE.
NORVSTONE does not seek to collect special category data or other sensitive personal data through this website. Please do not provide such data unless its disclosure is strictly necessary, lawful, and specifically requested by NORVSTONE.
Where NORVSTONE receives unsolicited personal data that is not reasonably necessary for the relevant purpose, NORVSTONE reserves the right, subject to applicable law, to delete, redact, or otherwise limit the processing of that data.

4. How personal data is collected
NORVSTONE may collect personal data directly from you, automatically through your use of this website, and from service providers acting on NORVSTONE’s behalf in connection with the operation, hosting, maintenance, analytics, communications, or security of this website.
This may occur, for example:
• when you contact NORVSTONE by email or through a contact form;
• when you browse, access, or otherwise interact with this website;
• through cookies, server logs, analytics tools, or similar technologies, where applicable;
• in limited cases, from publicly available sources or third parties where reasonably necessary for a legitimate business, compliance, or legal purpose.

5. How NORVSTONE may use personal data
NORVSTONE may use personal data for the following purposes:
• to review, manage, and respond to enquiries, requests, or other communications;
• to operate, administer, maintain, troubleshoot, support, and improve this website;
• to monitor the availability, integrity, performance, and security of this website and related systems;
• to detect, prevent, investigate, or address misuse, fraud, unlawful activity, or security incidents;
• to maintain appropriate business, administrative, and compliance records;
• to comply with legal, regulatory, tax, accounting, or reporting obligations;• to establish, exercise, protect, or defend legal claims, rights, or interests;
• to enforce applicable terms, notices, or other policies relating to this website;
• to use information in another way where NORVSTONE provides a specific notice at or before the relevant collection point, where required by applicable law.

6. Legal bases for processing
Where required by applicable law, NORVSTONE processes personal data on one or more of the following legal bases:
• your consent, where the relevant processing is based on consent;
• the need to take steps at your request prior to entering into a contract, where applicable;
• compliance with a legal obligation to which NORVSTONE is subject;
• the legitimate interests pursued by NORVSTONE or, where relevant, a third party, including legitimate interests in operating and administering this website, handling and responding to communications and enquiries, maintaining the security and reliability of the website and related systems, maintaining appropriate records, preventing misuse or unlawful activity, and establishing, exercising, or defending legal claims, rights, or interests.
Where NORVSTONE relies on legitimate interests, it does so only where it considers that such interests are not overridden by your interests, fundamental rights, or freedoms.

7. Cookies and similar technologies
This website may use cookies and similar technologies, including for technical, functional, analytical, security, and preference-related purposes.
Strictly necessary cookies or similar technologies may be used without consent where permitted by applicable law.
Any cookies or similar technologies that are not strictly necessary will be used only in accordance with applicable law and, where required, only after your consent has been obtained.
Further information about the cookies or similar technologies used on this website, including how to manage your preferences, may be provided through the cookie banner, cookie settings tool, or a separate cookie notice.

8. Disclosure of personal data
NORVSTONE does not disclose personal data except as described in this Privacy Notice or as otherwise permitted or required by applicable law.
NORVSTONE may disclose personal data where reasonably necessary, proportionate, and lawful for the purposes described in this Privacy Notice, including to:
• website hosting, IT, communications, analytics, maintenance, security, and technical service providers;
• professional advisers, including legal, regulatory, tax, compliance, audit, or accounting advisers;
• competent authorities, regulators, courts, tribunals, law enforcement bodies, or other third parties where required by law, legal process, or lawful request;
• third parties where disclosure is reasonably necessary to establish, exercise, protect, or defend legal claims, rights, or interests;
• a prospective purchaser, transferee, investor, successor, or other relevant third party in connection with an actual or proposed reorganisation, restructuring, sale, transfer, merger, dissolution, liquidation, or similar transaction involving all or part of NORVSTONE’s activities or assets.
Service providers acting on NORVSTONE’s behalf may process personal data only for authorised purposes and subject to appropriate contractual, confidentiality, and security obligations, where required by applicable law.
NORVSTONE does not sell personal data.

9. International transfers
Personal data may be transferred to, stored in, or accessed from countries outside the jurisdiction in which it was originally collected, including outside the United Kingdom or European Economic Area where applicable.
Where personal data is transferred internationally, NORVSTONE will take steps designed to ensure that the transfer is subject to an adequate level of protection in accordance with applicable data protection law, including, where appropriate, by relying on an adequacy decision, contractual safeguards, or another lawful transfer mechanism.
You may contact NORVSTONE using the contact details provided on this website to request further information about applicable transfer safeguards, where relevant.

10. Retention of personal data
NORVSTONE retains personal data only for as long as reasonably necessary for the relevant purpose and, in any event, only for as long as required or permitted by applicable law.
Retention may be required, among other things, to respond to enquiries, maintain appropriate business and compliance records, comply with legal or regulatory obligations, investigate incidents or complaints, and establish, exercise, protect, or defend legal claims, rights, or interests.
Retention periods may vary depending on the nature of the personal data, the purpose of processing, the sensitivity of the data, operational requirements, and applicable legal, regulatory, accounting, or limitation periods.
Where personal data is no longer required, NORVSTONE may delete it, anonymise it, or securely store it in a form that permits processing only where and to the extent necessary for compliance, record-keeping, or legal protection purposes.

11. Security
NORVSTONE maintains and seeks to maintain reasonable and appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
Such measures may include, where appropriate, access controls, system security measures, service provider controls, and internal administrative safeguards.
However, no website, transmission method, or electronic storage system can be guaranteed to be completely secure. Accordingly, NORVSTONE does not guarantee absolute security.

12. Your rights
Subject to applicable law, you may have the right to:
• request access to personal data concerning you;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• request portability of personal data, where applicable;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
• lodge a complaint with a competent supervisory authority.
Where NORVSTONE processes personal data on the basis of legitimate interests, you may have the right to object to that processing on grounds relating to your particular situation, subject to applicable law.
These rights are subject to applicable legal conditions, exceptions, and limitations.
To exercise any of these rights, please contact NORVSTONE using the contact details provided on this website. NORVSTONE may request information reasonably necessary to verify your identity before responding to a request, where appropriate.

13. Information you provide
Where you choose to contact NORVSTONE or provide information through this website, you are responsible for ensuring that the information you provide is accurate, lawful to disclose, and limited to what is reasonably necessary for the relevant purpose.
Where you provide personal data relating to another person, you should ensure that you are authorised to do so and, where required by applicable law, that the relevant person has been informed.
If certain information is required for NORVSTONE to respond to your enquiry or process your request, failure to provide that information may limit NORVSTONE’s ability to respond or act.

14. Automated decision-making
NORVSTONE does not make decisions based solely on automated processing through this website that produce legal effects or similarly significant effects on individuals.

15. Children
This website is not directed to children, and NORVSTONE does not knowingly collect personal data from children through this website.

16. Third-party websites and services
This website may contain links to third-party websites, platforms, or services for convenience only.
NORVSTONE does not control and is not responsible for the content, availability, security, or privacy practices of any third-party website, platform, or service. Access to and use of third-party services is at your own risk and subject to the relevant third party’s own terms, notices, and policies.

17. Changes to this Privacy Notice
NORVSTONE may amend or update this Privacy Notice from time to time to reflect legal, technical, operational, or business changes.
The updated version will be published on this website and will take effect from the effective date stated in the updated version.

18. Contact
For any question regarding this Privacy Notice or the way NORVSTONE processes personal data, please contact NORVSTONE using the contact details or contact form available on this website.



 

Last update: 05 January 2026