Privacy policy

1. Who is responsible

Norify GmbH, Reutlingerstrasse 48c, 8472 Seuzach, Switzerland, is responsible for the processing described in this notice. Contact us at the business email shown below for questions or privacy requests.

This notice covers the corporate website and enquiries received through it or the business email address. Separate contractual information may apply to a client engagement. Swiss data-protection law applies; other data-protection laws apply where their legal requirements are met.

2. Visiting the website

Your browser transmits technical information needed to deliver the website, including your IP address, the requested page, the time of access and browser information. Hosting and security services can process this information to operate the website, diagnose errors and prevent misuse.

The website runs on WordPress using Namecheap EasyWP. Namecheap, Inc. is based in the United States. The hosting service processes website content and the data required to provide the website. The website font is served from the website infrastructure rather than requested from Google Fonts.

3. Contact and enquiries

The enquiry form asks for your name, email address and message. An organisation name is optional. Norify uses this information to respond, clarify your requirements and, where appropriate, prepare or manage an engagement.

Fluent Forms processes submissions within the WordPress installation. Form records and technical metadata may be retained there, and enquiry notifications are sent to the business mailbox. Email correspondence also involves the sender and recipient addresses, message content and delivery metadata.

Please use the general enquiry form for an initial description of your challenge. Arrange a suitable channel with Norify before sending confidential client information or sensitive documents.

Proton Mail (Proton AG, Switzerland) provides the business mailbox. Norify manually enters relevant enquiries into Bexio (bexio AG, Switzerland) when needed to manage business contacts and possible engagements. Form submissions are not all automatically transferred to Bexio.

4. Spam protection

The contact form uses Cloudflare Turnstile to help distinguish people from automated traffic and protect the website against misuse. The check can run when you open a contact page, before you send a message.

Cloudflare, Inc. processes technical signals such as IP address, browser information, TLS characteristics and the website origin. According to its Turnstile privacy notice, Cloudflare processes signals on behalf of the website operator to provide protection and also as a controller to improve bot detection. The check involves communication with Cloudflare infrastructure, including processing outside Switzerland. You can contact Norify by email if you prefer not to use the form.

5. Cookies and browser storage

Technical services can use cookies or other browser mechanisms to provide a requested function or protect it against abuse. Their behaviour can vary by browser, login state and security check. You can control cookies and site storage in your browser; blocking security services can prevent the contact form from working.

Plausible does not use analytics cookies or persistent visitor identifiers. Privacy settings in the footer let you exclude this browser from Plausible measurement. This stores only the exclusion preference in local browser storage, not a tracking identifier. The preference applies to this website in this browser until you change it or clear site storage. Language selection uses the page address.

6. Website analytics with Plausible

Norify uses Plausible Analytics to understand website traffic and improve its content. The provider is Plausible Insights OÜ, Estonia. Plausible supplies statistics about page visits, referral sources, browser and device types, approximate location and engagement. The current setup also measures outbound links, file downloads and form-submission events. These events describe interactions; the integration does not send the contents of enquiry fields to Plausible.

According to Plausible’s data policy, no analytics cookies or persistent visitor identifiers are used, and visitors are not tracked across websites or devices. The IP address and browser information are used to derive approximate location and a daily identifier specific to this website. Raw IP addresses and raw User-Agent strings are not stored. Plausible stores event and session records to calculate statistics; the dashboard presents aggregated results. Page addresses and referral or campaign information can be included, so please do not put personal or confidential information in URLs.

Plausible states that website visitor data is processed and stored in the European Union on European-owned infrastructure, without use for advertising or cross-site profiling. Norify uses this cookieless measurement without an analytics consent banner. You can exclude this browser at any time through Privacy settings. Exclusion prevents future events from this browser; it does not delete events already sent. Google Analytics is no longer loaded by the theme.

7. Service providers and processing abroad

Website hosting is provided through Namecheap EasyWP, and form protection through Cloudflare Turnstile. Website measurement is provided by Plausible. Enquiries can involve hosting and security providers as well as the provider of Norify’s business mailbox. Access within Norify is limited to people who need the information for the relevant task.

Proton identifies mail servers in Switzerland, Germany and Norway. Bexio identifies Switzerland as the storage and processing location for data in its software; its privacy information also describes backups and certain services abroad. Namecheap and Cloudflare are based in the United States. Using these services may involve processing outside Switzerland. Plausible states that website visitor analytics data remains in the European Union; this does not describe where other website services process data.

The EasyWP terms identify possible processing in the United States and other countries and refer to Namecheap’s data-processing addendum, which provides for mechanisms including standard contractual clauses for applicable international transfers. Cloudflare’s standard agreement incorporates its data-processing addendum, including standard contractual clauses with adaptations for transfers under Swiss data-protection law. The contractual information linked below describes these arrangements. Contact Norify for further information about safeguards.

8. Retention

Enquiries in Fluent Forms are retained for 30 days. Email correspondence in the Proton Mail mailbox is retained for one year.

For business contacts entered manually into Bexio, further retention depends on managing the contact and preparing or delivering an engagement. Data no longer needed for these purposes is deleted unless legal retention duties or legitimate documentation needs apply. Required business records may be retained longer; that duty does not apply automatically to every website enquiry.

Namecheap describes daily server-recovery backups of EasyWP databases and files retained for up to 14 days. Separately created website backups and technical logs have their own storage and deletion cycles. The Plausible browser-exclusion preference remains in local storage until changed or cleared. Plausible analytics records follow the site’s subscription and deletion settings; Norify retains statistics only while needed for website evaluation. Plausible states that the salt used for daily visitor identifiers is rotated and deleted every 24 hours; this does not mean that analytics records are deleted daily.

9. Your choices and rights

You can contact Norify to ask whether personal data about you is processed, request access or correction, or request deletion or object to processing where the applicable law provides for it. Other rights, including data delivery or portability, depend on the legal conditions of the particular case. Retention duties or other legally protected interests may limit a request.

Send your request to the business email shown above and describe what it concerns. Norify may ask for information needed to verify your identity. You can also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC), or another competent supervisory authority where applicable.

Swiss Federal Data Protection and Information Commissioner (FDPIC)

10. Updates

Norify updates this notice when its website or relevant processing changes. The current version is made available on this page.