Privacy Policy
How Norazena collects, uses, and protects personal information. This is a general, editable draft for information only and is not legal advice.
Last updated: [Insert date] · We recommend having this policy reviewed before publication.
Controller: Norazena
Contact details: [Insert contact email / address]
We use personal data only to operate our website and provide analytical tools. We do not take custody of funds and we do not sell personal data.
Who this policy applies to
This Privacy Policy describes how Norazena (“we”, “us”, “our”) handles personal information when you visit our website, contact us, request information, or use our analytical tools and related services.
This document is provided as a general template draft. It does not constitute legal advice and does not confirm compliance with any specific law. Please adapt the bracketed sections to your actual practices and seek independent advice where needed.
Where we refer to “personal data” or “personal information”, we mean information that identifies or can reasonably be linked to an individual. Where we refer to the website, we mean the pages operated under this brand.
If you do not agree with this policy, please do not provide personal information through the website. You may contact us with questions using the details in Section 12.
Our approach to privacy
We aim to collect only what is needed, explain why we need it in plain language, limit access to authorised persons, and retain information only for as long as necessary for the purposes described here.
- Data minimisationWe avoid collecting sensitive or unnecessary fields through forms and integrations.
- Purpose limitationInformation is used for the purpose it was provided for, as described in Section 3.
- TransparencyThis page is intended to be updated if our practices change. See Section 11.
Categories of personal data
What we collect depends on how you interact with us. Please delete or amend any categories that do not apply to your implementation.
Information you provide
Contact details such as name, email address, and any message content when you submit a form, email us, or request analysis. [Insert / remove: phone number, company name, role, preferences].
Usage and technical data
Basic technical information such as pages viewed, approximate device and browser type, and interaction timestamps, collected via standard logs and cookies where enabled.
Service data
Where you choose to connect or upload data for analysis, the files or read-only connections you authorise. Do not upload information you do not have the right to share.
What we ask you not to send
Please do not send passwords, full payment card numbers, government identifiers, or other highly sensitive data via general contact forms. If additional information is needed for a specific request, we will explain why and how to provide it securely. [Adapt to your process.]
Purposes of processing
Operating and improving the service
We use information to:
- Respond to enquiries and provide requested information or analysis;
- Operate, maintain, and secure the website and tools;
- Understand aggregate usage to improve content and functionality;
- Communicate important service or policy updates;
- Keep records for administration, accounting, and dispute handling.
Marketing communications
We will only send newsletters or marketing messages where permitted and where you can opt out. Each marketing email will include unsubscribe instructions. [Insert / remove depending on whether you conduct direct marketing.]
We do not sell personal data to third parties for their own marketing. Automated decision-making that produces legal or similarly significant effects is not carried out via this website. [Confirm and retain or delete.]
Legal bases [adapt to your jurisdiction]
Depending on applicable law and context, we may process personal data on one or more of the following bases. Remove any that do not apply and add specifics where needed:
| Purpose | Example basis |
|---|---|
| Responding to your request | Consent, or steps prior to entering a contract / legitimate interests |
| Providing and securing the service | Performance of contract and / or legitimate interests in safe operation |
| Improvement and analytics | Legitimate interests, or consent where required for cookies |
| Legal compliance | Compliance with legal obligations |
This table is illustrative only. Describe the actual basis you rely on for each activity after review.
Careful handling by design
When we share information
We share personal data only as needed and as described here:
- Service providers: hosting, email delivery, analytics, or support tools acting on our instructions. [List key categories or providers.]
- Legal and safety: where required by law, to protect rights and security, or to investigate misuse.
- Business changes: in connection with a reorganisation or transfer, subject to appropriate safeguards.
- With your direction: when you ask us to share information or authorise an integration.
We do not disclose personal data to unrelated third parties for their independent use except as described above.
- International transfers [if applicable]If data is transferred outside your country, describe the mechanism used, e.g., adequacy decisions or standard contractual clauses. [Insert or delete.]
- RetentionWe keep personal data only as long as necessary for the purposes in Section 3, then delete or anonymise it. Enquiry records: [insert period]. Logs: [insert period]. Legal records: as required by law.
- SecurityWe use reasonable administrative, technical, and organisational measures such as access controls, encryption in transit, and least-privilege access. No method is fully secure; please use caution when transmitting information online.
Control over your information
Your requests
Depending on where you live, you may have rights to:
- Request access to personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion or restriction in certain circumstances;
- Object to or withdraw consent for certain processing;
- Request portability where applicable;
- Lodge a complaint with a supervisory authority.
How to exercise them
To make a request, contact us using the details in Section 12. We may need to verify your identity before responding.
We will respond within the timeframes required by applicable law. [Insert: e.g., one month.] If we cannot fulfil a request, we will explain why.
Cookies notice
We use cookies and similar technologies for essential operation and, where enabled, for preferences and aggregate analytics. [Adapt to your actual use and consent mechanism.]
Strictly necessary
Preferences and functional [if used]
Analytics and performance [if used]
Managing cookies
Children, third-party links, and changes
This website is not directed to children under [insert age, e.g., 16 / 18]. We do not knowingly collect personal data from children. If you believe a child has provided data, please contact us so we can address it.
Our pages may link to external sites we do not operate. We are not responsible for their privacy practices. Please review the privacy notices of any site you visit.
We may update this policy to reflect changes in practices or legal requirements. We will post the revised version here and update the date above. Material changes will be highlighted where appropriate.
Contact us about privacy
If you have questions about this policy, want to exercise your rights, or wish to report a concern, contact:
Norazena
[Insert contact email]
[Insert postal address, if applicable]
[Insert Data Protection Officer / representative details, if applicable]
Please do not include highly sensitive information in an initial email. We will advise on secure next steps if needed. This page is a general draft — please complete bracketed fields and obtain review before use.