Privacy Policy

Last updated: 16 September 2026

This Privacy Policy explains how Sebastian Paszkiewicz trading as Noreviaq collects and uses personal information. Noreviaq is a sole trader business based in England.

1. Information we may collect

Depending on how you interact with us and which service you use, we may collect:

• your name and business contact details;
• business name, email address and optional telephone number;
• billing, transaction and subscription-plan information;
• onboarding information, including your website, service areas, services, prices you choose to publish, promotions, qualifications or certifications, marketing preferences and brand tone;
• Google Business Profile and business social/profile links;
• messages, support requests and other communications with Noreviaq;
• technical information such as IP address, browser/device information, server, security and form-submission logs;
• publicly available business contact information used for lawful B2B prospecting; and
• information a customer supplies about its own leads or customers where Noreviaq is acting on that customer's behalf.

2. Where information comes from

We may receive information directly from customers; through the Noreviaq website and onboarding forms; from payment and service providers; through emails and other communications; and from publicly available business sources where lawful. Public sources may include business websites, Companies House, business directories, Google Business Profiles and professional or business social profiles.

3. Why we use personal information and our lawful bases

• Providing and administering subscriptions and services: performance of a contract, or steps requested before entering into a contract.
• Billing, accounting and record keeping: contract and legal obligation, as applicable.
• Customer support and service communications: contract and our legitimate interests in operating and supporting the service.
• Website operation, security, fraud prevention and troubleshooting: our legitimate interests in keeping the service secure and reliable.
• Improving Noreviaq services and workflows: our legitimate interests, where those interests are not overridden by the rights and interests of affected individuals.
• Legal and regulatory compliance: legal obligation or, where appropriate, our legitimate interests in establishing, exercising or defending legal rights.
• B2B marketing and business development: legitimate interests where lawful and appropriate, and consent where consent is legally required.

Where we rely on legitimate interests, those interests may include operating and improving Noreviaq, communicating with business customers, protecting the service, and developing lawful business relationships. We consider necessity and the impact on the people concerned before relying on this basis.

4. Direct marketing

Noreviaq may contact corporate businesses, such as limited companies and LLPs, using business contact details where permitted by UK law. UK rules for electronic marketing differ depending on the type of subscriber. We do not treat a sole trader or other individual subscriber as if they were automatically subject to the same electronic-marketing rules as a corporate subscriber.

5. AI and automation

Noreviaq uses AI-assisted and automated systems to help research businesses, draft marketing content, prepare review responses, create business communications and operate agreed workflows. Information supplied to Noreviaq may be processed using approved third-party AI or infrastructure providers where necessary to provide the service.

Noreviaq does not currently use solely automated processing to make decisions about individuals that produce legal effects or similarly significant effects.

6. When we act for a customer

For some services, a customer may determine why and how personal information about its leads or customers is processed, while Noreviaq processes that information on the customer's instructions. In that situation, the customer may be the controller and Noreviaq may act as a processor. Appropriate data-processing terms will be used where required.

7. Service providers and disclosures

We only share personal information where reasonably necessary for the service, administration, security or legal compliance. Providers and categories may include:

• Stripe for payment and subscription processing;
• Netlify for website hosting, forms and infrastructure;
• Zoho for business email;
• OpenAI or other approved AI technology providers when AI processing is required;
• other technical providers needed for agreed integrations or workflows; and
• professional advisers, regulators, law-enforcement bodies or other authorities where disclosure is required or permitted by law.

Payment-card information is handled by the payment provider. Noreviaq does not need to receive or store full payment-card numbers.

8. International transfers

Some technology providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we use or rely on an appropriate lawful transfer mechanism or protection made available by the relevant provider. You can contact privacy@noreviaq.com for more information about relevant safeguards.

9. How long we keep information

We do not keep personal information for longer than reasonably necessary for the purpose for which it is held. Our normal approach is:

• active customer and service information: while required to provide the service and normally for up to 24 months afterwards, unless a longer period is needed;
• ordinary support and business communications: normally up to 24 months after the last meaningful interaction;
• prospect information where no customer relationship exists: normally reviewed and deleted after around 12 months unless it remains relevant and lawful to retain;
• minimal suppression or opt-out information: retained as needed to respect marketing preferences;
• technical and security logs: only for as long as reasonably required for security, troubleshooting and legal purposes; and
• accounting, tax and payment records: for the period required by UK law.

We may retain information for longer where reasonably necessary for a legal claim, dispute, regulatory requirement or other legal obligation.

10. Your rights

Depending on the circumstances and lawful basis, UK data-protection law may give you rights to access your personal information, correct it, request erasure, restrict processing, object to processing, and receive or transfer certain information in a portable format. Where we rely on consent, you may withdraw consent at any time without affecting processing already carried out lawfully.

These rights are not absolute in every situation. To exercise a right, email privacy@noreviaq.com.

11. Complaints

If you have a privacy concern, please contact us first so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office (ICO). Visit ico.org.uk.

12. Security

We use reasonable technical and organisational measures intended to protect personal information. No internet service or storage system can guarantee absolute security.

13. Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The current version and last-updated date will be shown on this page.