How NORĴI Ltd handles personal data - yours as a customer, and that of the clients whose correspondence passes through your mailbox.
NORĴI Ltd is a company registered in England and Wales, company number 17180824, with its registered office in York, England. Where this policy says “we”, it means that company. Questions about it go to samuel@norji.co.uk.
Two different relationships run through this product, and the distinction matters more here than in most privacy policies.
The important part is what we do not hold. Your correspondence stays in your own Microsoft or Google tenant. We do not keep a copy of message bodies.
Content is read in your tenant at the moment a draft is written. The security page explains where that happens.
We do not sell personal data, we do not share it for advertising, and we do not profile people to make automated decisions about them.
Account data for as long as you are a customer, and then for the period our statutory obligations require. The audit trail is the exception worth reading twice: it exists so you can answer a challenge years later, so it is retained for the period you choose in your contract rather than deleted when a tenancy ends.
Under UK GDPR you can ask for a copy of your data, ask us to correct or erase it, ask us to restrict or stop a particular use, object to processing based on legitimate interests, and withdraw consent where consent is the basis. Ask by email and we will respond within one month.
If a request concerns one of your clients rather than you, it goes to you as their controller — we will help you answer it, but we will not act on it directly.
Write to samuel@norji.co.uk. If you are not satisfied with our answer you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you gave us the chance to put it right first.