1. Who we are
This website, norva.pro, is operated by Norva Pro ("Norva Pro", "we", "us", "our"), a UK-based software studio. For the purposes of UK data protection law, Norva Pro is the data controller for the personal data described in this policy. You can contact us about anything in this policy, or to exercise any of the rights below, at info@norva.pro.
2. What personal data we collect
We only collect personal data that you choose to give us, through:
- Get a Quote form — name, email, and optionally company name and website, plus the project details you describe.
- Contact form — name, email, subject, and message.
- Studio updates (newsletter) — email address only.
- Live chat — the messages you send us, and a random identifier your browser stores locally so we can keep replying to the same conversation. We don't ask for your name or email to use chat, but don't share anything in it you wouldn't want kept on file.
- Client project portal — if you commission work from us, we keep the name, email, project scope, price, and progress updates needed to deliver it and keep you informed, along with your payment status.
- Store account — if you buy something from our store, we keep your email and order history so you can sign back in (via an emailed link, no password) to re-download it later.
We do not use cookies, analytics, or advertising trackers on this site, and we do not passively collect data about your visit beyond what your browser or our hosting provider needs to serve the page (see section 6).
3. Why we process it, and our legal basis
| Purpose | Legal basis (UK GDPR Art. 6) |
|---|---|
| Replying to a quote request or enquiry | Legitimate interests — responding to enquiries you initiate |
| Preparing a proposal or contract if you go ahead | Steps taken at your request prior to entering a contract |
| Sending studio updates | Consent — given when you subscribe; withdraw any time |
| Replying to a live chat message | Legitimate interests — responding to a conversation you started |
| Running a commissioned project and taking payment | Performance of a contract with you |
| Letting you sign back in to re-download a purchase | Performance of a contract with you |
4. Who we share it with
We do not sell, rent, or trade your personal data. It is shared only with the processors that operate the infrastructure this site runs on:
- Hosting & email delivery — our hosting provider, to run this website and deliver form submissions to our mailbox.
We do not otherwise disclose your data to third parties unless required by law.
5. International transfers
Our hosting infrastructure may process data outside the UK/EEA. Where that happens, our provider is contractually required to apply safeguards recognised under UK GDPR (such as Standard Contractual Clauses) equivalent to the protection you'd have in the UK.
6. How long we keep it
- Enquiries that don't become a project: up to 24 months, then deleted.
- Client project records: for the duration of the engagement plus a reasonable period after, for accounting and legal purposes.
- Newsletter subscribers: until you unsubscribe.
- Live chat conversations: until resolved and deleted by us, or up to 12 months.
- Store account and order history: for as long as you might reasonably want to re-download a past purchase, or until you ask us to delete it.
6a. How we keep it secure
- Chat, project, and account data is held in a private database that isn't reachable from the public internet except through this website's own code — there is no public API that exposes it directly.
- The connection between this website and that database is encrypted.
- Store accounts and client project pages use one-time, single-use sign-in links instead of passwords — we never store a password for you, so there's no password of yours to leak.
- Our own staff access is behind a separate password gate, not part of any public page.
7. Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you and get a copy of it (access)
- Ask us to correct inaccurate or incomplete data (rectification)
- Ask us to delete your data (erasure), where it applies
- Ask us to restrict or object to our processing of your data
- Receive your data in a portable format, where technically feasible
- Withdraw consent at any time — for the newsletter, click unsubscribe or email us
- Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data
To exercise any of these, email info@norva.pro. We'll respond within one month.
8. Providing your data is voluntary
You're never required to submit personal data to browse this site. If you don't provide it through our forms, we simply won't be able to respond to your enquiry or send updates.
9. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Quotes and proposals are prepared by a person.
10. Children
This site and our services are directed at businesses and adults. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this policy as our services or legal obligations change. The "last updated" date at the top shows when it was last revised. Material changes will be reflected here.