Privacy and data protection

Privacy Policy

Last updated: July 2026 — How we collect, use, and protect your personal information.

1. Introduction

Nora Phillips Consulting ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website noraphills.com or use our services.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand our practices regarding your personal data.

2. Who We Are

Company: Nora Phillips Consulting

Office Address: 47, Great Russell Street, London WC1B 3DA, United Kingdom

Email: admin@noraphills.com

WhatsApp: +44 7452 176391

We are the data controller for the personal data we collect through our website and services.

3. Information We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

  • Contact Information: Full name, email address, phone number, and postal address.
  • Enquiry Details: Messages, questions, and service preferences submitted through our contact forms.
  • Financial Information: Information provided during financial advisory or loan facilitation engagements (only with explicit consent).
  • Communication Records: Correspondence between you and us, including emails, WhatsApp messages, and phone call notes.

3.2 Information Collected Automatically

  • Technical Data: IP address, browser type and version, device type, operating system, time zone setting, and browser plug-in types.
  • Usage Data: Pages visited, time spent on pages, click patterns, referral sources, and other browsing behaviour.
  • Cookies: We use cookies and similar tracking technologies. Please see our Cookies Policy for more details.

4. How We Use Your Information

We use your personal data for the following lawful purposes:

  • Service Delivery: To provide, maintain, and improve our consulting, advisory, and facilitation services.
  • Communication: To respond to your enquiries, requests, and provide customer support.
  • Marketing: To send relevant information about our services, promotions, and industry insights — only with your explicit consent.
  • Legal Compliance: To comply with applicable laws, regulations, and regulatory obligations.
  • Fraud Prevention: To detect, prevent, and investigate fraudulent or illegal activities.
  • Analytics: To analyse website usage and improve our digital presence and user experience.

5. Legal Basis for Processing

Under UK GDPR, we process your personal data based on the following legal grounds:

  • Consent: Where you have given clear consent for us to process your data for specific purposes (e.g., marketing communications).
  • Contract: Where processing is necessary for the performance of a contract or to take steps prior to entering a contract.
  • Legal Obligation: Where we need to comply with a legal or regulatory obligation.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided your rights do not override those interests.

6. Data Sharing and Disclosure

We may share your personal data with the following categories of recipients:

  • Service Providers: Trusted third-party service providers who assist us in delivering our services (e.g., IT hosting, payment processing, email delivery).
  • Professional Advisers: Lawyers, accountants, auditors, and insurers where necessary.
  • Regulatory Authorities: Where required by law, regulation, or legal process.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

We never sell your personal data to third parties for their own marketing purposes.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UK. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

  • Transfer to countries with an adequacy decision from the UK Government.
  • Use of Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO).
  • Binding Corporate Rules or other approved transfer mechanisms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements.

Generally, we retain:

  • Enquiry data: 24 months after your last interaction.
  • Client data: 6 years after the end of our contractual relationship (to comply with legal and regulatory obligations).
  • Marketing data: Until you withdraw consent or unsubscribe.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to Restrict Processing: Request restriction of processing in certain circumstances.
  • Right to Data Portability: Request transfer of your data to another service provider in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Rights Related to Automated Decision-Making: Not to be subject to decisions based solely on automated processing.

To exercise any of these rights, please contact us at admin@noraphills.com. We will respond within one month.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

  • Encryption of data in transit (TLS/SSL) and at rest.
  • Regular security assessments and vulnerability testing.
  • Access controls and authentication procedures.
  • Staff training on data protection and confidentiality.
  • Incident response and breach notification procedures.

11. Complaints

If you have concerns about how we handle your personal data, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
www.ico.org.uk
Tel: 0303 123 1113

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Last updated: July 2026.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Nora Phillips Consulting
47, Great Russell Street, London WC1B 3DA, United Kingdom
Email: admin@noraphills.com
WhatsApp: +44 7452 176391