Privacy Policy

Last updated: 9 February 2026

This Privacy Policy describes how Norvia ("we", "us", or "our") collects, uses, stores, and discloses information about you when you access or use our website, platform, and related services (collectively, the "Services"). By using the Services, you acknowledge that you have read and understood this policy.

1. Information We Collect

We collect information in several ways depending on how you interact with our Services.

1.1 Information You Provide Directly

Account registration data — name, email address, password, and any profile information you choose to provide.
Payment information — billing name, address, and payment card details processed through our third-party payment providers. We do not store full card numbers on our systems.
Communications — messages you send us via contact forms, email, or support channels.
User-generated content — responses, submissions, or any content you create while using the Services.

1.2 Information Collected Automatically

Usage data — pages visited, features used, time spent, click paths, and interaction patterns.
Device and technical data — IP address, browser type and version, operating system, screen resolution, and referring URLs.
Cookies and similar technologies — session identifiers, preference tokens, and analytics identifiers. See Section 6 for details.
Log data — server logs that record requests made to our infrastructure, including timestamps and error reports.

1.3 Information from Third Parties

Authentication providers — if you choose to sign in using a third-party identity provider, we receive basic profile information such as name and email address as permitted by your settings with that provider.
Analytics partners — aggregated and anonymised behavioural data to help us understand usage trends.

2. How We Use Your Information

We use the information we collect for the following purposes:

To create and manage your account and authenticate your identity.
To deliver, operate, and improve the Services.
To process transactions and send related confirmations and receipts.
To respond to your enquiries and provide customer support.
To send service-related notices, updates, and security alerts.
To send promotional communications where you have given consent or where we have a legitimate interest, with an option to opt out at any time.
To monitor and analyse usage patterns for performance optimisation and feature development.
To detect, investigate, and prevent fraudulent transactions, abuse, and other harmful or unlawful activity.
To comply with applicable legal obligations and enforce our terms.

3. Legal Bases for Processing

We process your personal information only when we have a valid legal basis to do so, which may include:

Performance of a contract — processing necessary to provide the Services you have requested or to fulfil our contractual obligations to you.
Legitimate interests — processing necessary for our legitimate business interests, such as improving the Services, ensuring security, and preventing fraud, provided those interests are not overridden by your rights.
Consent — where you have given us clear, informed consent for a specific purpose, such as receiving marketing communications.
Legal obligation — processing required to comply with a legal or regulatory requirement.

4. Sharing and Disclosure of Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We engage trusted third-party companies and individuals to perform functions on our behalf, including hosting infrastructure, payment processing, email delivery, analytics, and customer support tools. These providers have access to information only as necessary to perform their functions and are contractually obligated to protect it.

4.2 Business Transfers

If we are involved in a merger, acquisition, asset sale, or similar transaction, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a materially different privacy policy.

4.3 Legal Requirements

We may disclose your information if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect the rights or safety of Norvia, our users, or the public, or respond to lawful requests from authorities.

4.4 With Your Consent

We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or anonymise it in a secure manner. You may request deletion of your account and associated data at any time as described in Section 7.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Services. These may include:

Essential cookies — required for the Services to function, such as session management and security tokens.
Preference cookies — remember your settings and personalisation choices.
Analytics cookies — help us understand how users interact with the Services so we can improve them.
Marketing cookies — used to deliver relevant promotional content, where applicable.

You can control cookie behaviour through your browser settings. Disabling certain cookies may affect the functionality of the Services. Where required, we obtain your consent before placing non-essential cookies.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

Access — request a copy of the personal information we hold about you.
Correction — request that we correct inaccurate or incomplete information.
Deletion — request that we delete your personal information, subject to certain exceptions.
Restriction — request that we restrict the processing of your information in certain circumstances.
Portability — receive your information in a structured, machine-readable format where technically feasible.
Objection — object to processing based on legitimate interests or for direct marketing purposes.
Withdrawal of consent — where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 10. We will respond within a reasonable timeframe and may need to verify your identity before fulfilling your request.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

If you suspect any unauthorised access to your account, please contact us immediately and change your password.

9. International Data Transfers

Our Services are operated on a transnational basis. Your information may be transferred to and processed in countries other than the one in which you reside. Where such transfers occur, we take steps to ensure that your information receives an adequate level of protection consistent with this Privacy Policy, including through the use of appropriate contractual safeguards.

10. Children's Privacy

The Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child without appropriate consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

11. Third-Party Links and Services

The Services may contain links to third-party websites, tools, or services that are not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access. We are not responsible for the privacy practices or content of third-party sites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice within the Services. Your continued use of the Services after any changes constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:

Norvia

15 Glasson Dr, Orange NSW 2800, Australia

Email: info@norvia.com

Phone: +61 2 4919 1117

We are committed to working with you to resolve any concerns about your privacy in a fair and timely manner.