Introduction

This privacy policy applies between you, the User of this Website, and Norposh Limited, the owner and provider of this Website. Norposh Limited takes the privacy of your information very seriously. This policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website.

Please read this privacy policy carefully, in conjunction with our Terms and Conditions, which can be found here.

Definitions and Interpretation

1. In this privacy policy, the following definitions are used:

   • Data: Collectively all information that you submit to Norposh Limited via the Website. This includes, where applicable, definitions provided in the Data Protection Laws.
   • Data Protection Laws: Any applicable law relating to the processing of personal Data, including but not limited to the GDPR and any national implementing laws.
   • GDPR: The General Data Protection Regulation (EU) 2016/679.
   • Norposh Limited, we or us: Norposh Limited, a company incorporated in England and Wales with registered number 10668373, whose registered office is at 90 Cobden Street, Peterborough, United Kingdom, PE1 2HA.
   • User or you: Any third party that accesses the Website and is not employed by Norposh Limited or engaged as a consultant providing services to Norposh Limited.
   • Website: The website you are currently using, https://www.norposh.co.uk/, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

2. In this privacy policy:

   • The singular includes the plural and vice versa.
   • References to sub-clauses, clauses, schedules, or appendices are to sub-clauses, clauses, schedules, or appendices of this privacy policy.
   • A reference to a person includes firms, companies, government entities, trusts, and partnerships.
   • “Including” means “including without limitation”.
   • Reference to any statutory provision includes any modification or amendment of it.
   • The headings and sub-headings do not form part of this privacy policy.

Scope of this Privacy Policy

3. This privacy policy applies only to the actions of Norposh Limited and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website, including but not limited to any links to social media websites.

4. For purposes of the applicable Data Protection Laws, Norposh Limited is the “data controller”. This means that Norposh Limited determines the purposes for which, and the manner in which, your Data is processed.

Data Collected

5. We may collect the following Data from you, including personal Data:
   • Name
   • Job title
   • Contact information such as email addresses and telephone numbers
   • Any other Data in accordance with this privacy policy.

How We Collect Data

6. Data is collected in the following ways:

   • Data is given to us by you.
   • Data is collected automatically.

7. Norposh Limited will collect your Data in several ways, for example:

   • When you contact us through the Website, by telephone, post, e-mail, or through any other means.
   • When you make payments to us through the Website or otherwise.

8. We will collect your Data automatically when you access the Website, for example:

   • We automatically collect some information about your visit to the Website. This includes your IP address, the date, times, and frequency with which you access the Website, and the way you use and interact with its content.

Our Use of Data

9. Any or all of the above Data may be required by us to provide you with the best possible service and experience when using our Website. Specifically, Data may be used for:

   • Internal record keeping.
   • Transmission by email of marketing materials that may be of interest to you.
   • Order confirmation via email.

10. We may use your Data for these purposes if necessary for our legitimate interests. You have the right to object in certain circumstances (see “Your Rights” below).

11. For direct marketing via email, we require your consent via an opt-in or soft-opt-in:

• Soft opt-in applies when you have previously engaged with us. We assume your consent unless you opt-out.
• For other e-marketing, we need your explicit consent, such as checking a tick box.
• You can withdraw consent at any time (see “Your Rights” below).

Who We Share Data With

12. We may share your Data with the following groups for these reasons:

• Third-party payment providers (e.g., Worldpay UK Limited) to process payments and refunds.
• Relevant authorities to facilitate order processing and dispatch.

Keeping Data Secure

13. We use technical and organizational measures to safeguard your Data, such as:

• Controlling access to your account with a unique username and password.
• Storing your Data on secure servers.

14. We are certified to SOC 2 standards to manage and secure your Data.

15. If you suspect misuse or loss of your Data, contact us immediately at sales@norposh.co.uk.

16. For online safety tips, visit Get Safe Online.

Data Retention

17. We will retain your Data only as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law.

18. Even after deletion, Data may persist on backup or archival media for legal, tax, or regulatory purposes.

Your Rights

19. You have the following rights regarding your Data:

• Right to access: Request copies of the information we hold about you.
• Right to correct: Have your Data rectified if inaccurate or incomplete.
• Right to erase: Request deletion of your Data.
• Right to restrict use: Block or limit our use of your Data.
• Right to data portability: Request to move, copy, or transfer your Data.
• Right to object: Object to our use of your Data, including for legitimate interests.

20. To exercise any of your rights, contact us at sales@norposh.co.uk.

21. If dissatisfied with how we handle your Data, you can contact the UK Information Commissioner’s Office (ICO) at ico.org.uk.

22. Ensure your Data is accurate and current by informing us of any changes.

Transfers Outside the European Economic Area (EEA)

23. Data may be stored and processed in, and transferred to, countries outside the EEA. We will only transfer Data where it is compliant with data protection legislation.

24. We ensure adequate safeguards for Data transferred outside the EEA, such as standard contractual clauses or the EU-US Privacy Shield.

25. We have procedures to ensure third parties treat your Data consistently with Data Protection Laws.

Links to Other Websites

26. This Website may provide links to other websites. We are not responsible for the content or privacy practices of these websites. Read the privacy policy of any other website you visit.

Changes of Business Ownership and Control

27. Norposh Limited may expand or reduce its business, involving the transfer of control of all or part of the company. Data provided by Users will be transferred and used under the terms of this privacy policy.

28. We may disclose Data to prospective purchasers of our business or any part of it.

29. We will ensure your privacy is protected during such transfers.

General

30. You may not transfer your rights under this privacy policy to another person. We may transfer our rights where your rights are not affected.

31. If any provision of this privacy policy is found invalid, illegal, or unenforceable, it will be deemed deleted, and the remaining provisions will remain effective.

32. No delay, act, or omission in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

33. This Agreement is governed by the laws of England and Wales, with disputes subject to the exclusive jurisdiction of the English and Welsh courts.

Changes to this Privacy Policy

34. Norposh Limited reserves the right to change this privacy policy as necessary. Changes will be posted on the Website, and you are deemed to have accepted the terms on your first use following the changes.

Contact Us

You can contact Norposh Limited by email at sales@norposh.co.uk.

Attribution This privacy policy was created by Norposh Limited (https://www.norposh.co.uk).

Effective Date: 31 July 2018