Privacy Policy

Norvian is a UK-based website design and digital services business. We build premium websites for local businesses across the UK. For the purposes of UK data protection law, Norvian is responsible for the personal data described in this policy.

If you have any questions about this policy or about how we handle your personal data, you can reach us at hello@norvian.co.uk.

Depending on how you interact with us, we may collect:

• Enquiry details you send through our website forms, such as your name, business name, email address, and message.
• Email and phone contact details when you get in touch with us directly.
• Client and business details needed to provide our services.
• CRM and lead information we keep to manage enquiries and ongoing client relationships.
• Invoice and payment information relating to work we carry out.
• Project information, such as content, images, and access details you share with us to build or maintain your website.
• Public business information used for business-to-business outreach, such as a company name, business email address, website, and publicly listed contact details.

We use personal data to:

• Respond to enquiries and provide quotes.
• Deliver, manage, and support the services you have asked for.
• Manage our client relationships and keep accurate records.
• Send invoices and manage payments.
• Carry out relevant business-to-business outreach to businesses that may benefit from our services.
• Meet our legal and accounting obligations.
• Improve our website and the services we offer.

We only use personal data where the law allows us to. The lawful bases we rely on are:

• Contract — where we need to use your data to provide a service you have asked for or to take steps before entering an agreement.
• Legitimate interests — where we use data to run and grow our business responsibly, including relevant business-to-business outreach, in a way that does not override your rights.
• Legal obligation — where we must keep or process certain data to comply with the law, such as accounting and tax requirements.
• Consent — where you have given clear permission, for example to receive certain communications. You can withdraw consent at any time.

We do not sell your personal data. We may share data with trusted service providers who help us run our business and deliver our services, including:

• Google Workspace — email, documents, and business tools.
• Vercel — website hosting and deployment.
• Cloudflare — website performance and security.
• GitHub — code hosting and version control.
• Payment and accounting tools — where used, to process payments and keep financial records.

These providers only process data on our behalf and in line with their own obligations. We may also share data where we are required to do so by law.

We keep personal data only for as long as we need it. Enquiry data is kept for as long as needed to respond and follow up. Client and project data is kept for the duration of our work together and for a reasonable period afterwards. Invoice and financial records are kept for as long as required by law. When data is no longer needed, we delete or securely dispose of it.

Under UK data protection law, you have the right to:

• Be informed about how your data is used.
• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data in certain circumstances.
• Restrict or object to how we use your data, including for outreach.
• Request a copy of certain data in a portable format.
• Withdraw consent where we rely on it.

If you have a concern about how we handle your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk.

To make any privacy request — such as accessing, correcting, or deleting your data — please email us at hello@norvian.co.uk. We will respond within the timeframes required by law.