Privacy & Cookie Policy

Norseman Projects Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share and protect your personal information when you visit our website www.norseman-projects.com (the “Site”).

We are the data controller for the personal information we process through the Site.

Company details

Norseman Projects Ltd
86-90 Paul Street, London, Greater London EC2A 4NE
Company number: 15563156
Email: compliance@norseman-projects.com

1. What personal information do we collect?

We collect only very limited personal information, and only when you interact with the Site.

Information collected automatically

When you visit the Site, we collect certain technical and usage information via cookies and similar technologies. This includes:

• Approximate location (country/region level only — never precise location)
• Device type (desktop, mobile, tablet)
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referral source (where you came from)
• IP address (anonymised — last octet masked)

We use Google Analytics 4 to collect and process this information in an anonymised form for the purpose of understanding how the Site is used and improving user experience.

We do not collect:

• Your name, email address, or any direct contact details (unless you voluntarily send them via a contact form)
• Precise geolocation
• Any financial information
• Any special category (sensitive) data

Information you provide voluntarily

If you contact us (e.g. via email or a contact form), we will collect the information you choose to provide, such as:

• Name
• Email address
• Message content

2. How do we use your personal information?

We use the information we collect only for the following purposes:

We never use your information for:

• Direct marketing
• Behavioural advertising
• Profiling
• Selling or sharing with third parties for their own purposes

3. Google Analytics & Consent Mode

We use Google Analytics 4 (provided by Google Ireland Limited) to collect anonymised usage data.

• We have enabled IP anonymisation
• We use Google Consent Mode v2 — no analytics data is collected unless you give explicit consent via our cookie banner
• On consent: analytics_storage is set to “granted”
• Advertising-related signals (ad_storage, ad_user_data, ad_personalization) remain set to “denied”

Google acts as our processor under UK GDPR.

You can read Google’s privacy information here:

• https://policies.google.com/privacy
• https://policies.google.com/technologies/partner-sites

4. Who do we share your information with?

We share data only in these limited situations:

• Google Ireland Limited — as processor for Google Analytics (subject to strict data processing terms)
• Our hosting provider (Vercel) — processes technical data as part of website hosting
• Legal authorities — if required by law or court order

We do not sell, rent, or share your personal information with any other third parties for marketing or any other purpose.

5. International data transfers

Some of our processors (including Google and Vercel) are located outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK International Data Transfer Agreement (IDTA), or
• UK Addendum to the EU Standard Contractual Clauses, or
• Adequacy decision (where applicable)

6. How long do we keep your personal information?

• Google Analytics data — retained for up to 14 months (configurable)
• Enquiry data (if you contact us) — kept only for as long as necessary to respond and resolve your query (usually up to 12 months), unless required longer for legal reasons

After these periods, data is either deleted or irreversibly anonymised.

7. Your rights

Under UK GDPR you have the following rights:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restrict processing
• Right to data portability
• Right to object
• Rights related to automated decision-making (we do not carry out automated decision-making)

To exercise any of these rights, contact us at compliance@norseman-projects.com. We will respond within one month (free of charge in most cases).

You also have the right to make a complaint to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/

8. Security

We take reasonable technical and organisational measures to protect your personal information, including encryption in transit, secure hosting, and limited access. However, no method of transmission over the internet or electronic storage is 100% secure.

9. Changes to this Privacy Policy

We may update this policy from time to time. The date at the top shows when it was last revised. We will notify you of significant changes by updating the date and (where appropriate) displaying a notice on the Site.

10. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact:

Norseman Projects Ltd
86-90 Paul Street
LONDON
GREATER LONDON
EC2A 4NE
Email: compliance@norseman-projects.com