Privacy policy

Nordlys Consultancy Ltd is the data controller for the information described in this notice. We are registered in England and Wales under company number 16433338, at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We are registered with the Information Commissioner’s Office as a data controller under reference ZB946623.

We also trade as Supplierly. This notice covers the Nordlys Consultancy website. The Supplierly platform has its own privacy notice.

Email: contact@nordlysconsultancy.com

We collect or use the following information for the purposes listed below:

• To respond to enquiries and arrange discovery calls: Names, business contact details, and company name, taken from our contact form
• To provide and improve products and services for clients: Names and contact details
• For the operation of client or customer accounts: Names and contact details
• For dealing with queries, complaints or claims: Names and contact details
• To keep our website secure and available: Your IP address and basic technical information about your request, used to guard against spam and abuse of our forms
• To understand how our website is used: Aggregate, anonymised information about pages visited, referring site, approximate location at country level, and general device and browser type

Most of the information we hold comes directly from you, when you complete a form on our website or contact us by email.

Some information is collected automatically when you browse the site. This includes your IP address and basic technical details about your device and browser, which are needed to deliver the site, to keep it secure, and to compile anonymised visitor statistics.

Our lawful bases for collecting or using personal information are:

• Consent: we have permission from you after we gave you all the relevant information. We rely on this for marketing communications.
• Contract: we have to collect or use the information so we can enter into or carry out a contract with you.
• Legal obligation: we have to collect or use your information so we can comply with the law.
• Legitimate interests: we use your information in a way you would reasonably expect, where this does not override your rights. We rely on this to respond to enquiries you send us, to protect our website and forms from spam and abuse, and to measure website traffic in an aggregated, anonymised form.

Where we rely on legitimate interests, you have the right to object. Details are set out under your data protection rights below.

We do not sell your personal information, and we do not share it for anyone else’s marketing purposes. We do use a small number of third-party service providers who process personal data on our behalf, under contract and only on our instructions:

Our website analytics software is hosted on our own infrastructure rather than by a third-party analytics provider, so your browsing data is not shared with one. See our cookie policy for details of what it records.

We may also disclose personal information where we are required to do so by law, or to establish, exercise or defend legal claims.

Some of our service providers operate outside the United Kingdom. Where personal information is transferred abroad, we make sure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s Standard Contractual Clauses, so that your information continues to receive a level of protection equivalent to that under UK data protection law.

We do not use tracking, analytics or advertising cookies on this website, and you will not see a cookie banner. We measure website traffic using privacy-focused, cookieless software that we host ourselves and that does not identify individual visitors. Our cookie policy explains this in full.

When you submit our contact form, we use your details to respond to your enquiry and to arrange a discovery call. We will not add you to a marketing list or send you marketing messages without your consent.

If you do consent to marketing, you can withdraw that consent at any time, either by using the unsubscribe link in any message we send or by emailing us using the contact details above. Withdrawing consent will not affect the other ways we process your information.

We use appropriate technical and organisational measures to protect personal information, including encryption of data in transit, access controls, and limiting access to those who need it in order to do their work. Our website forms are protected against automated abuse.

No method of transmission over the internet or method of electronic storage is completely secure, so while we take care to protect your information we cannot guarantee its absolute security.

We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Where an enquiry does not lead to a working relationship, we will delete the contact details you gave us once they are no longer needed. We may keep information for longer where a complaint has been raised or where we reasonably believe there is a prospect of litigation.

Our services are provided to businesses and our website is not directed at children. We do not knowingly collect personal information relating to anyone under 18. If we become aware that we have done so, we will delete it promptly.

We do not make any decisions about you that produce legal effects, or similarly significant effects, based solely on automated processing.

Our website and blog contain links to other organisations’ websites, including scheduling and partner sites. This privacy notice does not cover those sites, and we are not responsible for how they handle your information. We would encourage you to read the privacy notice of any site you visit from ours.

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. Which lawful basis we rely on may affect your data protection rights. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website. Your rights include:

• Your right of access: You have the right to ask us for copies of your personal information.
• Your right to rectification: You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
• Your right to erasure: You have the right to ask us to delete your personal information.
• Your right to restriction of processing: You have the right to ask us to limit how we can use your personal information.
• Your right to object to processing: You have the right to object to the processing of your personal data.
• Your right to data portability: You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
• Your right to withdraw consent: When we use consent as our lawful basis you have the right to withdraw your consent at any time.

You will not usually have to pay a fee to exercise these rights. If you make a request, we must respond to you without undue delay and in any event within one month. To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

We may update this privacy notice from time to time. When we make significant changes we will revise the date shown at the top of this page, and where appropriate we will tell you directly.

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice. If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.