How we collect, use and protect your personal data, written in plain English.
Norven IT is a managed IT support business based in York, England, providing IT support to private healthcare practices across York and Yorkshire. Norven IT is a sole trader business.
For the purposes of UK data protection law, Norven IT is the data controller for the personal data described in this policy.
If you have any questions about this policy or about how we handle your data, contact us at hello@norvenit.co.uk.
This policy explains what personal data we collect through this website and in the course of providing our services, why we collect it, how long we keep it, and what rights you have over it.
It does not cover personal data we process on behalf of a client under a support contract. Where we support a practice's systems, that practice remains the data controller and Norven IT acts as a data processor under a separate written agreement.
Our contact form and our free checklist download form ask for:
Providing a practice name is optional. The other fields are needed in order to reply to you.
If you email or telephone us, we keep a record of that correspondence, including your contact details and what was discussed, so that we can follow up properly.
We may contact practices using business contact details that are already published, for example on a practice website or a public business listing. Where we do, we record the practice name, a business email address, a business telephone number and publicly available notes about the practice.
You can ask us to stop contacting you and to delete these details at any time, and we will do so promptly. Email hello@norvenit.co.uk and we will action it.
This website does not use analytics, tracking pixels, advertising cookies or any third party tracking. We do not build profiles of visitors and we do not collect special category data such as health information through this site.
| What we do | Lawful basis |
|---|---|
| Reply to an enquiry you send us through the contact form | Legitimate interests, responding to a request you made |
| Send you the free checklist you asked for | Legitimate interests, delivering the thing you requested |
| Follow up once after a checklist download to ask if it was useful | Legitimate interests, and you may opt out at any time |
| Contact a practice using published business contact details | Legitimate interests, business to business marketing |
| Provide and administer our services to clients | Performance of a contract |
| Keep business and tax records | Legal obligation |
Where we rely on legitimate interests, we have considered whether our interest in running and growing the business is outweighed by your rights. You can object to that processing at any time, and if you do we will stop unless we have a compelling reason not to.
We do not sell your data and we do not share it for anyone else's marketing.
We use a small number of service providers who process data on our behalf:
We may also disclose data where we are legally required to do so, for example in response to a valid request from a regulator or a court.
Some of our providers may process data outside the UK. Where that happens, we rely on the safeguards those providers have in place, such as UK adequacy regulations or the International Data Transfer Addendum, so that your data continues to be protected to a UK standard.
We keep your data in access controlled business systems protected by strong passwords and multi factor authentication. Devices used to access it are encrypted. We limit access to what is needed to do the work.
No system is completely secure, but if a breach happens that is likely to put your rights at risk, we will notify the Information Commissioner's Office within 72 hours and tell you where we are required to.
Under UK data protection law you have the right to:
To exercise any of these, email hello@norvenit.co.uk. We will respond within one month. There is no charge.
This website does not set any cookies for tracking, analytics or advertising. Your browser may store standard technical information needed to load the pages, and fonts are loaded from Google Fonts, which means Google receives your IP address in order to serve them.
If you are unhappy with how we have handled your data, please tell us first at hello@norvenit.co.uk so we can put it right.
You also have the right to complain to the UK regulator, the Information Commissioner's Office, at ico.org.uk/make-a-complaint or on 0303 123 1113.
If we change this policy we will update the date at the top of the page. If the change is significant we will make that clear on the site.