Privacy

Who this covers

This policy covers norwellsystems.com and the information Norwell Systems LLC, a limited liability company organised in New Jersey, handles because you visited the site or got in touch. Information we handle inside a paid engagement is additionally governed by the contract signed for that work, and is described under “Information inside an engagement” below.

What this site collects

Nothing that identifies you. This site sets no cookies. It runs no tag manager, no advertising pixels, and no session recording. Fonts and every other asset are served from norwellsystems.com itself. The one measurement that does run is described in the next answer, and it counts visits, not visitors.

There is one exception, and it is worth stating plainly rather than hiding behind the word “analytics”. The host that serves the site, Cloudflare, keeps standard server logs, which include your IP address, the page requested, the time of the request, and your browser’s user-agent string. Those logs exist so the site can be kept online and defended against abuse. The same host also provides the site’s measurement: a small script counts page views and load performance without cookies, without fingerprinting, and without identifying who you are. We see totals and trends, never people, and none of it is combined with anything else, sold, or shared.

When you get in touch

If you send us an inquiry, we receive what you put in it: your name, your email address, your firm, your role and phone number if you give them, the country and city you are in, and whatever you tell us about the process you want automated. Only the name, email, firm, country and message are asked for; the rest of the form is optional and blank is fine.

That information is used to reply to you, to scope the work, and to keep a record of the conversation if it becomes an engagement. It is not used for anything else. We do not send marketing you did not ask for, and we do not sell, rent, or trade it.

The inquiry form carries a second, separate tick box for occasional email about what we are building and writing. It is optional, it starts empty, and leaving it empty has no effect on the reply you get. Tick it and your email address is also kept on that list until you ask us to remove it, which you can do by replying to any of them or by writing to the address at the bottom of this page. Nothing else from the form goes on that list, and the list is not shared with anyone.

Submitting the form sends it to our own inbox rather than to a form service, and there is no third party in between. As it passes through, a copy is written to storage at the company that hosts this site, so that a message is not lost if the delivery to the inbox fails. That copy is automatically deleted after ninety days, and it is not read unless something has gone wrong.

Information inside an engagement

A build almost always needs access to systems the firm already runs, and to real documents and records, because a system tested only against invented cases is not tested. That access is limited to what the agreed scope requires, lasts for the engagement plus the thirty-day fixes period, and is used only to build and test the system being delivered.

Client data is not used to train models, is not reused on another firm’s engagement, and is not retained after handover beyond what the contract requires. Where a delivered system processes personal data belonging to the firm’s own clients, the firm is the controller of that data and Norwell Systems acts on its instructions.

Who else sees it

A short list of service providers, and only where the service is the thing that makes the site or the correspondence work at all:

• The provider that hosts and serves this website
• The provider that carries our email
• Where an engagement requires it, the platforms named in that engagement’s written scope, all of them in accounts the firm owns

Nobody else. There are no advertising partners, no data brokers, and no analytics vendors beyond the measurement Cloudflare provides as the site’s own host, which identifies nobody and is not sold or shared.

How long it is kept

Correspondence is kept while a conversation is live and, if it becomes an engagement, for as long as we are required to keep business records. Inquiries that go nowhere are deleted once it is clear they are closed. Server logs are kept on the host’s standard schedule, which is measured in days and weeks rather than years.

Your choices

You can ask what we hold about you, ask for a copy of it, ask us to correct it, or ask us to delete it. If you ask for deletion, we delete what we are not legally required to keep and tell you what is left and why. There is no charge, and we answer within thirty days.

Depending on where you live, some of that may be a right under law rather than a courtesy, including under the New Jersey Data Privacy Act. The answer is the same either way, so we have not written a separate procedure for each jurisdiction.

Children

This is a business-to-business site. It is not directed at children, and we do not knowingly collect information from anyone under sixteen.

Changes

If this policy changes, the date under the heading changes with it. Because the site sets no cookies and runs no tracking, any change here will be about how we handle correspondence rather than about what the site itself collects. Material changes are not applied retroactively to information already given to us.

Contact

Questions about this policy, or a request about your own information:

james@norwellsystems.com