Dated: August 2026
Who we are
Norfolk Capital Group Limited (company number 09438815) is the controller of personal information collected through this website. Our registered office is 25-27 Surrey Street, Norwich, Norfolk, NR1 3NX.
If you have any questions about this Privacy Notice, want to exercise your data protection rights or want to make a data protection complaint, please contact us using the Contact page on our website and select “Data protection / privacy” as the nature of your enquiry, or write to us at our registered office.
What information we collect
When you contact us through the website, we may collect:
your first and last name;
the organisation you represent;
your email address;
the nature of your enquiry;
any personal information you choose to include in your message or subsequent correspondence; and
limited technical information collected automatically when you use the website, such as your IP address, browser type and device information, where this is used for website security, administration and spam prevention.
Please avoid including special category or other sensitive personal information in your message unless it is genuinely necessary for your enquiry. If you do provide this type of information, we will only use it where and to the extent permitted by applicable data protection law.
How we get your information
We collect personal information in a limited number of ways, including:
information you give to us directly when you use our contact form, email us or otherwise contact us;
information provided to us by another company within the Norfolk Capital group where this is relevant to an enquiry or business relationship;
limited business or professional information from publicly available sources, such as company websites, professional directories or public registers, where appropriate and permitted by law; and
technical information collected automatically through your use of the website, as described above.
What we use your information for
We use your personal information to:
receive, review and respond to your enquiry;
communicate with you about your enquiry or our relationship with you;
direct your enquiry to the appropriate person, team or company within the Norfolk Capital group;
maintain appropriate records of enquiries and correspondence;
operate, administer and protect our business and legal interests, including maintaining the security of our website and preventing misuse; and
comply with applicable legal and regulatory obligations.
We do not use personal information submitted through the contact form for direct marketing unless we separately tell you that we intend to do so and have an appropriate lawful basis.
Our lawful bases for using your information
We will only use your personal information where we have a lawful basis to do so. Depending on the circumstances, we may process your information because:
it is necessary for our legitimate interests, including responding to enquiries, communicating with business contacts, managing our business relationships, operating and securing our website, maintaining appropriate business records and protecting our legal and commercial interests;
it is necessary to take steps at your request before entering into a contract;
it is necessary for us to comply with a legal or regulatory obligation; or
you have given us consent, where we specifically ask for and rely on consent.
Where we rely on legitimate interests, we consider whether our interests are overridden by your interests, rights or freedoms. Responding to your enquiry itself is normally based on our legitimate interests or, where relevant, steps taken at your request before entering into a contract.
Sharing your information
We only share your personal information where it is appropriate and lawful to do so. We may share it with:
other companies within the Norfolk Capital group where this is reasonably necessary to deal with your enquiry or otherwise administer our relationship with you;
service providers that support our website, email, IT systems or business administration;
our professional advisers, including lawyers, accountants and auditors; and
regulators, law enforcement agencies, courts and other public authorities where disclosure is required or permitted by law.
Where your enquiry relates to the activities of another Norfolk Capital group company, we may forward your enquiry and relevant personal information to that company so that it can respond to you or assist us in responding.
Where another group company processes your personal information as a separate controller, its own privacy notice will apply to that processing.
We do not sell or rent your personal information
Links to other websites
Our website may contain links to websites operated by other Norfolk Capital group companies or by third parties.
When you follow a link to another website, that organisation may collect and use personal information about you independently. This Privacy Notice does not cover information collected through another organisation’s website unless we expressly say otherwise.
We encourage you to read the privacy notice on any external website you visit before providing personal information.
Do we transfer your information outside the UK?
Some of our service providers or other recipients may process personal information outside the UK.
Where we transfer personal information outside the UK, we ensure that the transfer is permitted by applicable UK data protection law. Depending on the circumstances, this may include transferring information to a country covered by UK adequacy regulations or using appropriate contractual safeguards.
You can contact us using the details above if you would like further information about a particular transfer or the safeguards that apply.
How long do we keep your information?
We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.
Information relating to general website enquiries is normally retained for six years after the enquiry is closed.
If an enquiry develops into a business relationship, transaction, investment, recruitment process, dispute or other matter, relevant information may be retained for a longer period in accordance with the retention requirements applying to that matter. We may also retain information where necessary to comply with legal or regulatory obligations or to establish, exercise or defend legal rights.
When information is no longer required, we delete or anonymise it as appropriate.
Your rights
Depending on the circumstances and the lawful basis on which we use your information, you may have the right to:
request access to the personal information we hold about you;
ask us to correct inaccurate or incomplete information;
ask us to delete your personal information in certain circumstances;
ask us to restrict the way we use your personal information in certain circumstances;
object to certain uses of your personal information;
request a copy of certain personal information in a portable format where the right to data portability applies; and
withdraw your consent at any time where we rely on consent.
Where we rely on legitimate interests to process your personal information, you have the right to object to that processing in certain circumstances.
These rights are not absolute and exemptions may apply. We may need to ask you for information to confirm your identity before acting on a request.
Do you have to provide your information?
You are not required to contact us through the website. However, if you do not provide enough information for us to understand your enquiry and contact you, we may be unable to respond to or deal with your request.
Automated decision-making
We do not use personal information submitted through our website to make decisions based solely on automated processing that produce legal or similarly significant effects on you.
Keeping your information safe
We take the security of your personal information seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, alteration or disclosure.
How to contact us or make a complaint
If you have a question about this Privacy Notice, want to exercise any of your rights or have concerns about how we use your personal information, please contact us using the Contact page on our website and select “Data protection / privacy” as the nature of your enquiry, or write to us at our registered office.
You also have the right to make a data protection complaint to us. We will acknowledge your complaint within 30 days of receiving it and, without undue delay, take appropriate steps to investigate it, keep you informed where appropriate and tell you the outcome.
If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator. Information about how to make a complaint is available at www.ico.org.uk .
Changes to this Privacy Notice
We may update this Privacy Notice from time to time, for example to reflect changes in our processing activities, the Norfolk Capital group or applicable law. Any updated version will be published on this page and the “Last updated” date will be revised.