PRIVACY
Privacy Policy
How personal information may be processed in connection with website enquiries and professional communications.
1. Scope of this Privacy Policy
This Privacy Policy explains how personal information is handled in connection with the NORD CONSULTING website at nord-consulting.co.uk and enquiries relating to pharmaceutical regulatory affairs consulting services. The website does not provide user accounts or a contact form.2. Data controller and contact
Nord Consulting S/E
Luton, Bedfordshire
Tx No. 14393 60924
Email: office@nord-consulting.co.uk
For privacy enquiries or requests concerning your personal information, please use the email address above.
3. Personal information we may process
When you contact us by email or through other professional business communications, we may process your name, organisation, job title, business email address, telephone number, the information you provide and our correspondence. Website hosting systems may also process technical connection information, such as IP addresses, access timestamps, requested URLs, browser information and security logs. Please do not send sensitive personal information or confidential regulatory dossiers in an initial enquiry.4. Purposes and lawful bases
We process personal information for the following purposes, where an appropriate legal basis applies:
- Responding to enquiries and maintaining B2B correspondence: legitimate interests in communicating with prospective and existing business contacts (UK GDPR Article 6(1)(f)).
- Considering or delivering agreed services: legitimate interests in managing client relationships, or Article 6(1)(b) where processing is necessary for a contract with the individual concerned.
- Maintaining website and email security: legitimate interests in protecting information systems and detecting misuse (Article 6(1)(f)).
- Meeting applicable legal requirements: compliance with legal obligations (Article 6(1)(c)), when relevant.
These bases apply according to the circumstances; information will not be processed for a new incompatible purpose without appropriate notice and a lawful basis.
5. Legitimate interests
Where legitimate interests are relied upon, these are the interests in replying to business enquiries, managing business relationships and protecting our website and correspondence systems. Such processing is subject to a balancing assessment against the rights and interests of individuals.6. How information is received
Information is normally received directly from you when you correspond with us. We may also receive business contact details through professional introductions or communications from your organisation, where relevant to an enquiry or assignment.7. Recipients and service providers
Our website and professional email mailbox are hosted through the same hosting service provider. The provider may process website-access information and email communications as needed to supply, maintain and secure those services. Personal information may also be disclosed to professional advisers, authorised service providers or public authorities when necessary and lawful. We do not sell personal information.8. International transfers
Hosting infrastructure or service providers may involve processing outside the United Kingdom, and business correspondence may involve recipients in other countries. Where a restricted international transfer occurs, we will assess and apply an appropriate UK data protection transfer mechanism or applicable adequacy arrangement. Further information about applicable safeguards may be requested using the contact details above.9. How long information is kept
Professional enquiries are kept for the period reasonably necessary to respond and manage any follow-up, taking into account whether an engagement results. Project records and correspondence are retained according to operational requirements, contractual responsibilities and applicable legal limitation or record-keeping duties. Technical logs are retained according to the hosting configuration and legitimate security requirements. Records are reviewed and deleted or anonymised when no longer required.10. Security
We use proportionate organisational and technical safeguards intended to protect personal information from unauthorised access, loss or misuse. Email and internet communications cannot be guaranteed entirely secure.11. Your rights
Subject to applicable conditions and exemptions, you may have rights to access, rectify or erase your personal information, restrict its processing, object to processing and, in certain circumstances, receive data in a portable format. Requests can be made by email to office@nord-consulting.co.uk.12. Right to object
Where personal information is processed on the basis of legitimate interests, you have the right to object to that processing on grounds relating to your particular situation. We will assess and respond to objections as required by UK data protection law.13. Complaints
If you have concerns, please contact us first using the email above. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint/.14. Cookies and similar technologies
This website does not deliberately set cookies or use local storage, session storage, advertising pixels or analytics in its own code. It does not load third-party trackers. As the website does not use non-essential storage or access technologies, no cookie consent banner is currently displayed.
Hosting and security infrastructure can operate independently of website code. If any such services introduce cookies or similar technologies, their use and any applicable consent requirements will be reviewed and this notice updated. Technical access and security logs may be processed without placing cookies on visitors’ devices.
For a detailed breakdown, please see our Cookie Policy.