Privacy Notice
1. Who we are
Noorgate Ltd ("Noorgate", "we", "our", or "us") is a company registered in England and Wales (Company #17034623). Our registered address and all correspondence should be directed to privacy@noorgate.co.uk. We are the data controller for any personal data you submit through this intake portal.
2. What we collect
When you submit a brief through brief.noorgate.co.uk we collect:
- Your name, organisation, corporate email address, and (optionally) phone number.
- The details you choose to provide about your project.
- Technical data: your IP address (used only for rate-limiting, never logged with the brief content), and standard Cloudflare request metadata.
We do not use third-party analytics or marketing trackers on this page.
3. How we use it (lawful basis)
We process your data on the basis of our legitimate interest in responding to business enquiries directed to us. We use it only to:
- Reply to your enquiry.
- Assess fit and scope any follow-on work.
- Keep an audit trail of briefs we have received.
We do not sell, rent, or share your data with third parties for marketing.
4. How long we keep it
We retain enquiry data for 12 months from the last contact, then delete it. If we begin work for you, project data is kept for the statutory period required for contract, tax, and legal purposes (typically 6 years).
5. Where it is stored
Submitted briefs are archived in Cloudflare KV (EU region where available), and dispatched over an encrypted tunnel to our UK-based production environment. We do not transfer personal data outside the UK/EEA without appropriate safeguards.
6. Your rights (UK GDPR)
- Access a copy of the data we hold about you.
- Correct inaccurate data.
- Request deletion ("right to be forgotten").
- Restrict or object to our processing on legitimate-interest grounds.
- Ask for your data in a portable format.
- Lodge a complaint with the Information Commissioner's Office — ico.org.uk.
Exercise any of the above by emailing privacy@noorgate.co.uk. We respond within 30 days.
7. Security
Submissions are protected by Cloudflare Turnstile (bot mitigation), rate limiting, and HMAC- signed transport to our gateway. We do not store passwords — there is nothing to log into. Automated abuse-detection data is retained for 72 hours.
8. Updates
We will update this notice if our processing changes materially. The "Last updated" date at the top of this page will change accordingly; we do not email past enquirers about updates.