Privacy notice
Last updated 12 October 2026
Norma Analytics Limited is the controller of personal data collected through this website and our sales process. This notice explains what we collect, why, on what legal basis, who we share it with, how long we keep it and what your rights are. It applies to visitors, people who contact us and job applicants.
Norma Analytics Limited, company number 13940020, registered office 128 City Road, London EC1V 2NX, United Kingdom, with an office at 27 Upper Pembroke Street, Dublin 2, Ireland. For anything in this notice, write to privacy (at) norma-analytics.io or to the registered office.
When you contact us or request a demo or the Capital Study: your name, company email, institution, role if you give it, and your message. When you apply for a role: your name, contact details, CV and whatever you choose to send. When you visit the site: server logs with your IP address, browser type, pages viewed and timestamps, kept for security and to keep the site running. If we contact you without a prior enquiry from you, we obtained your business contact details (name, role, institution, business email) from your institution's website, from LinkedIn or from a professional contact data provider; we tell you this at first contact and you can object at any time.
We do not run advertising trackers, we do not sell or rent personal data, and we do not profile visitors. We keep a record of how the site is used, which pages are read and from which organisations, to understand interest in Norma and to keep the site running. Technical data such as IP addresses is kept for a short period; after that only organisation-level information remains. The site sets no cookies beyond those strictly necessary for it to work.
To respond to your request and to arrange demos and studies: performance of a contract or steps you ask us to take before one. To run, secure and understand the use of the website: our legitimate interest in operating and improving our services. To send you information about Norma after you have contacted us, or to contact you at your institution about Norma for the first time: our legitimate interest in marketing a business product to professionals at institutions, limited to business addresses, and you can object or tell us to stop at any time, including through the unsubscribe link in any email we send. We do not make decisions about you by automated means. To consider your application for a role: steps you ask us to take before a contract, and our legitimate interest in recruiting. To comply with law: legal obligation.
Service providers who help us run the site, our email and our hosting, under contracts that limit what they may do with the data. Professional advisers where needed. Authorities where the law requires. Nobody else, and never for their own marketing. If we use a customer-relationship system, your request is recorded there so we can follow up.
Data is held in the United Kingdom and the European Economic Area. The website and its forms run with a hosting provider in the European Union. Some of our providers are headquartered in the United States and may process data there. Where that happens we rely on the UK-US data bridge or on the UK International Data Transfer Agreement or Addendum, and on an adequacy decision or standard contractual clauses for data covered by EU law; we can tell you which applies on request.
Enquiries and sales correspondence: for as long as the conversation is live and for up to three years after the last contact, so that we can pick it up again if you return. Job applications: six months after the decision unless you ask us to keep your details longer. Our contact-form log: one year. Server logs: thirty days. Site usage records: technical data for a short period, organisation-level history for up to three years.
You can ask what we hold about you, ask for it to be corrected or deleted, ask us to restrict or stop using it, object to our use of it, including to any direct marketing, ask for a copy in a portable form, and withdraw consent where we rely on it. Write to privacy (at) norma-analytics.io and we will respond within a month. You can also complain to the Information Commissioner's Office in the United Kingdom or, if you are in the European Economic Area, to your local supervisory authority, including the Data Protection Commission in Ireland.
Data is encrypted in transit and at rest, and access is limited to named people who need it. Our security and deployment practices are described on the Security page.
The site is for professionals at institutions. We do not knowingly collect data from anyone under eighteen.
We will update this notice when our practices change and show the date at the top. If a change matters to you, we will tell you by email where we have your address.