Privacy
Policy

This Privacy Policy explains how Norvex Digital ("we", "us", or "our") collects, uses, stores, and protects personal information when you use our website, contact us, become a client, or use the Norvex Client Portal.

We are committed to handling your data responsibly and in line with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Last updated: 18 June 2025

Norvex Digital is a solo web development business operated by Joshua, based in Uttoxeter, Staffordshire, United Kingdom.

Data controller: Norvex Digital
Email: hello@norvexdigital.co.uk
Phone: +447985561397
Location: Uttoxeter, Staffordshire, UK

We only collect personal information when it is needed to respond to enquiries, deliver web development services, or support active clients. Depending on how you interact with us, this may include:

We do not intentionally collect special category data (such as health information) unless you voluntarily provide it and it is relevant to your project.

We use personal information to:

• Respond to contact form submissions and project enquiries
• Review intake forms and prepare proposals
• Create and manage client portal accounts
• Deliver web design, development, hosting, and support services
• Communicate about project progress, tasks, files, and approvals
• Send project-related emails and portal notifications
• Process invoices and maintain financial records
• Provide ongoing maintenance and technical support
• Improve our website (with analytics consent only)
• Meet legal, tax, and regulatory obligations

We do not use your data for automated decision-making or profiling, and we do not sell your personal information.

Under UK GDPR, we rely on the following lawful bases:

• Contract — to deliver services you have requested or are negotiating
• Legitimate interests — to operate our business, secure our systems, and respond to enquiries (balanced against your rights)
• Consent — for analytics cookies and any optional marketing communications
• Legal obligation — where we must retain records for tax or compliance purposes

Cookies are small files stored on your device. We use them to keep the website and client portal working, remember your preferences, and — only with your consent — understand how visitors use the site.

You can accept or reject analytics cookies using the banner on your first visit.

Portal authentication cookies are essential for keeping you signed in securely. These are not used for marketing.

We use trusted providers to operate our website and deliver services. They only process data on our instructions and for the purposes listed below:

• Supabase

  Client portal authentication, database, and file storage

• Resend

  Transactional email delivery (contact forms, portal invites, notifications)

• Vercel

  Website hosting and performance

• Sanity

  Content management for portfolio and website content

• Google Analytics

  Anonymous usage statistics (only when you accept analytics cookies)

Each provider maintains its own privacy policy. We choose services with strong security practices and, where possible, UK or EU data hosting.

We keep personal information only as long as necessary:

• Enquiry and contact form data — typically up to 24 months if no project proceeds
• Client portal and project data — for the duration of the project and support period
• Contract and invoice records — up to 7 years for legal and tax purposes
• Analytics data — according to Google Analytics retention settings (if consented)

When data is no longer needed, it is securely deleted or anonymised. You may request earlier deletion subject to legal obligations.

We take appropriate technical and organisational measures to protect your information, including encrypted connections (HTTPS), authenticated portal access, role-based permissions, and secure cloud infrastructure.

No method of transmission over the internet is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. Please use a strong, unique password for your client portal account.

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Restrict or object to certain processing
• Request a portable copy of your data
• Withdraw consent for analytics cookies at any time
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email hello@norvexdigital.co.uk. We will respond within one month.

We primarily work with UK and EU-based clients. Some service providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses.

Our services are aimed at businesses and adults. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes may also be communicated to active clients by email or through the portal.

See also our Terms & Conditions.

For any privacy-related questions, data requests, or concerns, contact:

Norvex Digital (Joshua)
Uttoxeter, Staffordshire, UK
Email: hello@norvexdigital.co.uk
Phone: +447985561397