Legal

Privacy policy

Last updated: 24 August 2026

This page explains how by Noreliam handles personal data collected through www.noreliam.com. It covers the studio website, not processing carried out for clients as part of a project.

1. Controller

JOIN PARURE LTD, trading as by Noreliam
71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Company number: 17201320
contact@noreliam.com

Processing is subject to the UK GDPR and, where you are in the European Union, the GDPR.

2. Data we collect

Through the contact form, when you submit it:

• first name
• email address
• what you do, if you provide it
• free-text message, if you provide it

When you browse the site, our host may keep technical logs (IP address, browser type, pages visited, date and time) for operation and security.

The site loads the Inter typeface via Google Fonts. That request may send your IP address to Google.

This site does not collect health data. It does not use advertising cookies and does not install third-party analytics (Google Analytics, Meta Pixel, and the like).

3. Purposes and legal bases

• Responding to your enquiry (conversation, quote, question): steps at your request before entering a contract, and our legitimate interest in handling incoming messages.
• Running and securing the site: legitimate interest.
• Displaying fonts: legitimate interest in presenting the site. You can block third-party content in your browser.

The form is not used for unsolicited commercial prospecting.

4. Recipients

Form messages go through Netlify Forms, then are received by by Noreliam at contact@noreliam.com.

The site is hosted by Netlify. Google may receive your IP address via Google Fonts.

We do not sell data. It is shared with third parties only where needed to run the site, where the law requires it, or with your agreement.

5. Cookies

This site does not set advertising cookies or analytics trackers. Strictly technical cookies or logs may exist on the host’s side to serve pages.

Google Fonts is not a cookie: it is a network request to Google’s servers when the page loads.

6. Retention

• Contact enquiries: for as long as needed to handle the request. If nothing follows, deletion within 12 months. If a commercial relationship starts, we keep the data for the duration of that relationship and as long as legal obligations require (invoicing, evidence of the contract).
• Hosting logs: according to Netlify’s policy, typically a few weeks.

7. Transfers outside the UK / EEA

Netlify and Google are US companies. A transfer outside the United Kingdom or the EEA may therefore take place. These providers generally rely on recognised mechanisms (standard contractual clauses or equivalent). Details are in their own policies.

8. Your rights

You may request access, rectification, erasure, restriction, objection, and portability of your data, under the conditions set by law.

To exercise these rights: contact@noreliam.com. We may ask for proof of identity if there is a reasonable doubt.

9. Complaints

You may lodge a complaint with the competent supervisory authority. In the UK: the ICO. In the EU: the authority in your country of residence — for example the CNIL in France, the APD in Belgium, or the AEPD in Spain.

10. Client projects

Processing carried out as part of an engagement (website, member space, automations) is governed by the contract and, where applicable, a data processing agreement (DPA). This page does not describe those treatments.

11. Changes

This policy may be updated. The date at the top of the page is authoritative.