Controller and contact
NORYVIA LTD is the controller for personal information described in this notice. Company number 17420335; registered office 28 Kendal Road, Sheffield, England, S6 4QG. Privacy enquiries and rights requests: support@noryviasoftware.tech.
Information collected
We may collect identity and contact details, organisation and role, enquiry content, project context, communication records, quote and contract information, billing records, and limited technical website information. Forms do not request payment card details or file uploads.
Purposes and lawful bases
- To review and respond to enquiries: legitimate interests and steps requested before entering a contract.
- To prepare, enter and perform contracts: contract necessity.
- To keep financial and corporate records: legal obligation.
- To protect systems, prevent misuse and establish legal claims: legitimate interests and legal obligation where applicable.
- To send optional marketing only where a valid basis exists; individuals may object or withdraw consent as applicable.
Legitimate interests
Our legitimate interests include operating a technology business, responding to relevant enquiries, improving service administration, maintaining security and defending legal rights. We consider necessity, reasonable expectations and impact before relying on this basis.
Sharing and processors
Information may be shared with authorised personnel, professional advisers, hosting and form-processing providers, communications suppliers, payment or accounting providers after contract, and authorities where law requires. Providers receive only what is reasonably necessary and are subject to appropriate arrangements.
UK, EEA and international transfers
Service providers may process information in the UK, EEA or other countries. Where restricted transfers occur, we use an applicable lawful mechanism and assess safeguards as required. Project-specific data locations can be addressed during scope.
Retention
Unsuccessful or inactive enquiry records are normally reviewed for deletion within 24 months. Contract, accounting and legal records may be retained for up to 7 years after the relevant relationship or longer where law or a dispute requires. Security records may have shorter schedules. Actual periods depend on purpose, sensitivity and legal need.
Security and data minimisation
We use proportionate organisational and technical measures, access controls and supplier review. No internet transmission is risk-free. Please do not send passwords, identity documents, special category data or confidential production data through an initial website form.
Individual rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, portability, objection and rights concerning automated decisions. Rights are not absolute and the applicable lawful basis matters. We do not currently use website enquiry data for solely automated decisions with legal or similarly significant effects.
Complaints and updates
Contact us first at support@noryviasoftware.tech so we can investigate. You may also complain to the UK Information Commissioner’s Office or, where applicable, an EU supervisory authority. We may update this notice when services, providers or legal requirements change.