Privacy policy

Introduction

This Privacy Policy explains how we use and protect your personal information (such as your name, address, telephone number or email address).  It explains how, why and when we collect and process this information, along with your rights and obligations in respect of the information.  By using our website, www.norcros.com (the Website), you acknowledge your acceptance of the provisions in this policy.  The policy may change from time to time in line with legislation or industry developments.  Any such changes will be made on this page, therefore, we recommend you check this page periodically.  By continuing to use the Website after the posting of such changes, you will be deemed to have accepted the changes.

Who We Are

Norcros plc is a ‘Controller’ for the purposes of the Data Protection Laws, our registered office is at Ladyfield House, Station Road, Wilmslow, Cheshire SK9 1BU, and we are a company registered in England and Wales, under company number 3691883. As a Data Controller, we are registered on the Information Commissioner's Office Register of Data Controllers under registration number ZA080269.  If you have any questions concerning Data Protection at Norcros, please email us at info@norcros.com.

Information That We Collect

Norcros plc processes your personal information to meet your requests, but we will not collect any personal information unless you provide this voluntarily, and we will never collect any unnecessary personal data from you, nor will we process your information in any way, other than already specified in this notice.

The personal data that we collect is:

  • First Name, Surname
  • Email Address
  • Country

We collect information in the below ways:

Contact Us
Should you choose to contact us using the email link info@norcros.com, none of the data that you supply will be stored by this website or passed to or be processed by any of the third party data processors defined in Our Third Party Data ProcessorsInstead the data will be collated into an email and sent to us over the Simple Mail Transfer Protocol. Our servers are protected, and the email content will then be decrypted by our local computers and devices. Based on the nature of the contact, emails may then be sent internally (i.e. within the Norcros Group), in order to provide the best response.

Email Alert
If you choose to sign up to receive email alerts for our automated RNS announcements, you will be asked to provide certain information which will be submitted to and stored by Q4. Q4 provides our data feeds and also distributes our RNS announcements via an automated email alert system. We consider Q4 to be a third-party data processor. The details that you submit will not be stored within this website’s own database or in any of our internal computer systems.

The information collected via the email alert subscription process is stored on Amazon Web Servers (AWS) in Ireland https://aws.amazon.com/about-aws/global-infrastructure/. Q4 has an executed data processing agreement in place with AWS, who is SOC1, Privacy Shield, and ISO 27001 certified in accordance with Q4’s privacy policy, which can be found on https://www.q4inc.com/privacy-policy/default.aspx

Your email address will remain within AWS’s database for as long as we continue to use Q4’s services for email marketing or until you specifically request removal from the list.  You can do this by requesting removal via email at info@norcros.com.  When requesting removal via email, please send your email to us using the email account that is subscribed to the mailing list.


If you are under 16 years of age, you MUST obtain parental consent before signing up for our email announcements.  

Financial Media Enquiries
If you wish to send media enquiries using the email link ajihr@hudsonsandler.com, none of the data you supply will be stored by this website or passed to be processed by any of the third party data processors defined in Our Third Party Data Processors. Instead your email will be routed directly to Hudson Sandler, a Financial Media consultancy firm who, in this instance, will be the ‘Controller’ in respect of your data.  Their Privacy Notice can be found at http://hudsonsandler.com/privacy-policy.

Site Visitation Tracking
Like most websites, this site uses Google Analytics (GA) to track user interaction.  GA is a web analytics service provided by Google, Inc. ("Google") which uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purposes of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. The table below details cookie files that may be used within this website.

Cookie Name Purpose More information
Google Analytics _utma
_utmb
_utmc
_utmz
These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Google privacy statement

Most web browsers allow some control of most cookies through the browser settings.  To find out more about cookies, including how to see that cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.

Our Third-Party Data Processors
We use four third parties to process personal data on our behalf.  These third parties have been carefully chosen and all of them comply with the legislation set out in the:

  • UK Data Protection Act 1988 (DPA)
  • EU Data Protection Directive 1995 (DPD)
  • EU General Data Protection Regulation 2018 (GDPR)

All processors acting on our behalf only process your data in accordance with instructions from us and comply fully with this privacy notice, the data protection laws given above, and any other appropriate confidentiality and security measures:

Our Third-Party Processors are listed below:


About This Website’s Server
This website is hosted by Digital Ocean who are an approved third-party provider using cloud servers utilising NAS/SAN storage. Data centres are co-located in some of the most respected data centre facility providers in the world and feature both physical and infrastructure security and security monitoring, as well as access logging and security control.

All data centres are audited and certified by various internationally recognised compliance standards. They are also compliant with the EU General Data Protection Regulation and the EU-U.S. Privacy Shield Framework.

As a general rule, the hosting of this site is being conducted in the territory of the Federal Republic of Germany, in another Member State of the European Union (EU) or in another state party to the Agreement on the European Economic Area (EEA).

All server data will be stored at the selected data centre. Daily local backups are made to the server itself. In addition to this, Design Portfolio maintains daily, encrypted, incremental backups.

Your Rights
You have the right to access any personal information that Norcros plc processes about you and to request information about:

  • What personal data we hold about you
  • The purposes of the processing
  • The categories of personal data concerned
  • The recipients to whom the personal data has/will be disclosed
  • How long we intend to store your personal data for
  • If we did not collect the data directly from you, information about the source

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to update/correct it as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

You also have the right to request erasure of your personal data or to restrict processing in accordance with data protection laws, as well as to object to any direct marketing from us and to be informed about any automated decision-making that we use. You may do so by writing to us using the contact details given in this notice.  

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the relevant request; this is to ensure that your data is protected and kept secure.

Sharing and Disclosing Your Personal Information
We do not share or disclose any of your personal information without your consent, outside of the Norcros Group, other than for the purposes specified in this notice or where there is a legal requirement.  

Safeguarding Measures
Norcros plc takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. Once received, we work hard to protect your information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures in place to do this, including:


SSL, encryptions, pseudonymisation, practices, restriction, IT, authentication etc.

However, if you choose to provide us with personal data over the Internet, you should be aware that data transmission via this medium cannot be guaranteed to be 100% secure.  Whilst we will take all reasonable efforts to protect such personal data, you acknowledge that we cannot ensure or warrant If, despite our security precautions, personal data is inadvertently disclosed, we shall use all reasonable endeavours to limit and remedy the disclosure.

How Long We Keep Your Data
Norcros plc only ever retains personal information for as long as is necessary and we have strict review and retention policies in place to meet these obligations.  Within these periods we will hold your data until you request it to be destroyed.

Where we store your personal data
The data that we collect from you will usually be stored inside the UK or the European Economic Area (EEA). However, if you live or work outside of the UK or the EEA, we may need to transfer your personal data outside of the UK or the EEA to respond to any queries that you may have.  Where this applies, we will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.

Links to other websites    
This privacy statement applies only to personal data collected on the Website.  Other websites to which the Website may be linked may or may not contain privacy policies.  We have no influence or control over those sites.  The use of other sites, or the submission of personal data to them, is at your own risk and is subject to their privacy statements and policies.

Lodging A Complaint
Norcros plc only processes your personal information in compliance with this privacy notice and in accordance with the relevant data protection laws. If, however you wish to raise a complaint regarding the processing of your personal data or are unsatisfied with how we have handled your information, you have the right to lodge a complaint with us or the supervisory authority.

Mr Richard Collins
Norcros plc
Ladyfield House
Station Road
Wilmslow  SK9 1BU
Telephone: 01625 547 706
Email richardcollins@norcros.com

Information Commissioner’s Office (ICO)
Wycliffe House
Water Lane
Wilmslow
SK9 5AF
Telephone:  0303 1231113 or 01625 545 745
Fax:  01625 524510
Email: enquiries@ico.org.uk