Privacy Policy
Last Updated: June 2026
At NORU (“we,” “our,” or “us”), we respect your privacy and are committed to safeguarding your personal information in accordance with the EU General Data Protection Regulation (GDPR). This Privacy Policy explains what data we collect, how we use it, your rights under GDPR, and how to contact us.
1. Information We Collect
We may collect the following categories of personal data:
Identity & contact data: your name, email address, phone number, and company name provided through enquiry forms, emails, or other communications.
Usage data: IP address, browser type, pages visited, time spent on our website, and referral sources, collected automatically via cookies and analytics tools.
Communications data: records of correspondence when you contact us for support, project enquiries, or any other matter.
2. Legal Basis for Processing
Under GDPR, we process your personal data on the following legal grounds:
Legitimate interests – to respond to enquiries, manage client relationships, and improve our services.
Consent – to send you marketing or promotional communications. You may withdraw consent at any time.
Legal obligation – where we are required to process or retain data to comply with applicable laws.
3. How We Use Your Information
We use your personal data to:
Respond to your enquiries and deliver our agency services
Manage and develop our client relationships
Improve and optimise our website experience
Send relevant updates or promotional content (only with your consent)
Comply with our legal and regulatory obligations
4. Data Sharing
We do not sell or rent your personal data to third parties.
We may share your data with trusted third-party service providers — such as hosting partners, email platforms, and project management tools — who assist us in operating our business. These providers act as data processors and are bound by contractual obligations to handle your data securely and in accordance with GDPR.
We may also disclose information where required by law or to protect our legal rights.
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. When data is no longer needed, it is securely deleted or anonymised.
6. Your Rights Under GDPR
As a data subject under GDPR, you have the right to:
Access – request a copy of the personal data we hold about you
Rectification – request corrections or updates to inaccurate data
Erasure – request deletion of your data, where legally permissible (“right to be forgotten”)
Restriction – request that we limit processing of your data in certain circumstances
Portability – receive your data in a structured, machine-readable format
Objection – object to processing based on legitimate interests or for direct marketing purposes
Withdraw consent – at any time, where processing is based on consent
