Privacy Policy

1. What we collect

Information you provide

When you submit our contact form, our property website request form, or use our idea evaluator tool, we collect:

• First and last name
• Email address
• Budget range (where applicable)
• Your project, idea, or property description
• Property name and existing listing URL (property website form only)

If you apply for a role through our careers page, see section 7 for what we collect and how we handle it.

Information collected automatically

When you browse our website, we automatically collect certain data through cookies and similar technologies:

• IP address (anonymised where possible)
• Browser type, device type, and operating system
• Pages visited, time on page, and referral source
• Interactions such as button clicks and form submissions
• Advertising click identifiers (such as Google Ads gclid and UTM parameters) when you arrive from one of our ads, stored to attribute leads to specific campaigns

2. How we use your data

We use the information we collect to:

• Respond to your enquiry and assess project fit
• Deliver your idea evaluation report
• Send follow-up resources relevant to your score or enquiry
• Understand how visitors use our website so we can improve it
• Measure the effectiveness of our advertising
• Protect our forms from spam and abuse

We will never sell, rent, or share your personal data with third parties for their own marketing purposes.

3. Cookies and tracking technologies

We use cookies and similar technologies to analyse traffic and measure advertising performance. The services we use include:

You can manage or disable cookies through your browser settings. Note that disabling cookies may affect the functionality of our forms.

4. Third-party services

We share data with the following services solely to operate our website and respond to enquiries:

• Resend — sends transactional emails (form confirmations, evaluation reports)
• Supabase — stores form submissions securely
• Mautic — manages follow-up email sequences
• Make.com — integration platform that forwards form submissions to our advertising and CRM tools for measurement and follow-up
• Calendly — handles booking scheduling after form submission

Each service processes data according to its own privacy policy. We only share the minimum data necessary for each service to function.

5. Legal basis for processing

We process your data on the following bases:

• Consent — when you submit a form or accept cookies
• Legitimate interest — to respond to business enquiries, improve our website, and measure advertising effectiveness

You may withdraw your consent at any time by contacting us or clearing your cookies.

6. Data retention

We retain your contact and evaluation data only for as long as necessary to respond to your enquiry and to fulfil any resulting engagement. If no engagement follows, data is deleted within 90 days of your submission.

Analytics data is retained according to the default retention periods of each analytics provider (typically 14 months for Google Analytics).

7. Job applicants

When you apply for a role through our careers page, we collect your name, email address, a link to your portfolio or profile, and the message you submit. We use this only to assess your application for that role and to contact you about it.

Applications are reviewed by a member of our team. We do not use AI tools, automated scoring, or screening rules to assess applicants. Status emails, such as confirmations and decline notices, are sent automatically by our system, but any decision about your application is made by a person.

We process application data to take steps at your request before entering into a contract, and on the basis of our legitimate interest in recruiting. Applications are stored by our database provider, and emails are sent through our email delivery provider. We do not share applications with recruitment platforms or any other third party.

We keep application data while the role is open and for up to 90 days after it closes, then delete it. If we would like to keep your details for future roles, we will ask you first. You can exercise any of the rights in section 8 for your application data in the same way.

8. Your rights

You have the right to:

• Know what personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications
• Object to processing based on legitimate interest
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at team@nordehq.com. We will respond within 14 days.

9. International data transfers

Our third-party service providers may process data outside your country of residence, including in the United States. Where applicable, these transfers are protected by standard contractual clauses or equivalent safeguards.

10. Third-party links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing their privacy policies before providing any personal data.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our website after any changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, contact us at team@nordehq.com.