Privacy policy

PRIVACY POLICY

Effective Date: October 3, 2026

  1. WHO WE ARE

NORRED INC., doing business as NORRED Project Controls (“NORRED,” “we,” “us,” or “our”), provides remote project controls, contract administration, document control, executive reporting, project assessments, dashboards, and related professional consulting services.

This Privacy Policy explains how NORRED collects, uses, stores, discloses, and protects personal information obtained through norredprojectcontrols.com, website forms, email communications, project inquiries, proposals, billing activities, and related business interactions.

Client projects may also be governed by a proposal, statement of work, confidentiality agreement, data-processing agreement, or other written contract. When an applicable signed agreement contains more specific data-handling requirements, that agreement will control for the covered engagement.

  1. INFORMATION WE MAY COLLECT

NORRED may collect the following categories of information:

CONTACT INFORMATION

This may include your name, business email address, telephone number, mailing address, job title, organization, and other contact details.

PROJECT AND BUSINESS INFORMATION

This may include your organization’s name, industry, project type, requested services, project goals, schedules, budgets, reporting requirements, contract information, and information submitted through our Start a Project form.

COMMUNICATIONS AND DOCUMENTS

This may include emails, form submissions, meeting notes, attachments, project records, spreadsheets, reports, schedules, contracts, and other information you choose to provide.

BILLING AND TRANSACTION INFORMATION

This may include invoice information, billing contacts, payment status, transaction history, and related financial records.

Full payment-card information is generally processed by Shopify, banks, or other payment-service providers and is not intended to be stored directly by NORRED.

WEBSITE AND DEVICE INFORMATION

When you use our website, Shopify and other technology providers may automatically collect information such as your IP address, browser type, device type, operating system, referring website, pages viewed, approximate location, and the date and time of your visit.

PUBLICLY AVAILABLE OR THIRD-PARTY INFORMATION

NORRED may obtain professional or business information from public websites, government databases, professional directories, referrals, prospective clients, service providers, or other lawful sources.

  1. INFORMATION THAT SHOULD NOT BE SUBMITTED THROUGH PUBLIC FORMS

Do not submit the following through our public website forms or unsolicited email:

Passwords or login credentials

Social Security numbers

Complete bank-account or payment-card information

Protected health information

Biometric identifiers

Classified information

Controlled Unclassified Information

Export-controlled information

Government system credentials

Trade secrets or highly sensitive proprietary records

Personal information concerning children

Other information subject to special legal, regulatory, contractual, or security restrictions

If an engagement requires sensitive or restricted information, NORRED will provide separate instructions for an appropriate transfer method after the engagement has been reviewed.

  1. HOW WE COLLECT INFORMATION

NORRED may collect information:

Directly from you when you submit a form, send an email, request a proposal, sign an agreement, attend a meeting, provide project records, or purchase services;

Automatically through cookies, server logs, Shopify, analytics tools, security technologies, and similar systems;

From your organization, authorized representatives, referral sources, subcontractors, service providers, government databases, or publicly available sources; and

Through business-development, contracting, billing, and project-delivery activities.

  1. HOW WE USE INFORMATION

NORRED may use information to:

Respond to inquiries and communicate with prospective or current clients;

Evaluate project needs and prepare proposals, scopes, and estimates;

Provide project controls, contract administration, reporting, document control, assessments, dashboards, and related services;

Organize and analyze project information;

Prepare reports, schedules, dashboards, recommendations, and deliverables;

Create and maintain client and project records;

Schedule meetings and manage communications;

Process invoices, payments, refunds, and account records;

Operate, secure, maintain, and improve our website and business systems;

Detect fraud, misuse, security incidents, or technical problems;

Comply with contracts, laws, regulations, court orders, and government requests;

Establish, exercise, or defend legal claims;

Conduct internal administration, quality assurance, training, and business planning; and

Send business updates or marketing communications where permitted by law.

You may unsubscribe from marketing emails by using the unsubscribe method in the message or by contacting us.

  1. ARTIFICIAL INTELLIGENCE AND AUTOMATION

NORRED may use artificial intelligence, automation, analytics, and other technology-assisted tools to support document organization, information extraction, administrative work, research, draft preparation, scheduling, data analysis, reporting, dashboard development, communications, and quality-control activities.

Artificial intelligence tools assist NORRED personnel and do not replace NORRED’s responsibility for the services provided.

Unless otherwise agreed in writing, client-facing reports, recommendations, analyses, dashboards, and other final deliverables are subject to review by an authorized NORRED representative before delivery.

NORRED does not intend to use artificial intelligence to make solely automated decisions that produce legal or similarly significant effects concerning website visitors, prospective clients, or individual consumers.

Information may be processed through approved technology service providers when reasonably necessary to perform services, operate the business, or fulfill contractual obligations. Such processing is subject to applicable agreements, provider terms, confidentiality obligations, and NORRED’s internal procedures.

NORRED does not intentionally submit classified information, Controlled Unclassified Information, protected health information, passwords, account credentials, or other restricted data to general-purpose artificial intelligence systems.

  1. HOW WE MAY DISCLOSE INFORMATION

NORRED may disclose information to the following categories of recipients:

SERVICE PROVIDERS

These may include Shopify, Microsoft 365, cloud-storage providers, website hosts, payment processors, analytics providers, cybersecurity providers, communication platforms, approved artificial-intelligence providers, automation systems, and other vendors supporting our operations.

PROFESSIONAL ADVISERS

Information may be disclosed to attorneys, accountants, insurers, auditors, consultants, or other professional advisers when reasonably necessary.

CONTRACTORS AND SUBCONTRACTORS

Information may be disclosed to authorized contractors or subcontractors who need access to perform agreed services and who are subject to appropriate confidentiality or data-protection obligations.

LEGAL OR GOVERNMENTAL REQUESTS

NORRED may disclose information when required or reasonably necessary to comply with law, regulation, subpoena, court order, government request, contractual obligation, or legal process.

SECURITY AND PROTECTION

Information may be disclosed when reasonably necessary to investigate fraud, security incidents, unlawful conduct, threats, or violations of our agreements or policies.

BUSINESS TRANSACTIONS

Information may be transferred as part of a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable law.

WITH YOUR DIRECTION OR CONSENT

NORRED may disclose information when you direct us to do so or provide appropriate consent.

NORRED does not sell personal information for money. NORRED does not currently share personal information for cross-context behavioral advertising. If these practices change, this Privacy Policy will be updated and any legally required choices will be provided.

  1. COOKIES AND ANALYTICS

Our website may use cookies, pixels, server logs, and similar technologies operated by Shopify or other providers.

These technologies may be used to:

Keep the website functioning;

Remember preferences;

Maintain security;

Understand website traffic and performance;

Identify technical problems; and

Improve the website and user experience.

You may be able to control cookies through your browser settings or available website privacy controls. Blocking certain cookies may affect website functionality.

  1. DATA SECURITY

NORRED uses reasonable administrative, technical, and organizational safeguards intended to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, account authentication, vendor management, backups, security monitoring, confidentiality procedures, and human review.

No internet transmission, email system, website, cloud platform, or storage system can be guaranteed to be completely secure. You should use caution when transmitting confidential or sensitive information electronically.

  1. DATA RETENTION

NORRED retains information for as long as reasonably necessary to:

Respond to inquiries;

Provide services;

Maintain project, contract, billing, and business records;

Comply with legal, tax, insurance, and accounting requirements;

Resolve disputes;

Enforce agreements;

Maintain security; and

Support legitimate business operations.

When information is no longer reasonably needed, NORRED may delete, anonymize, aggregate, or securely dispose of it, subject to applicable legal and contractual requirements.

  1. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the right to:

Confirm whether NORRED processes your personal information;

Access personal information maintained about you;

Obtain a copy of certain personal information;

Correct inaccurate personal information;

Request deletion of certain personal information;

Request information concerning categories of information collected and disclosed;

Withdraw consent where processing is based on consent;

Opt out of the sale of personal information;

Opt out of targeted advertising;

Opt out of certain profiling or automated decision-making; and

Appeal the denial of a privacy request.

NORRED will not unlawfully discriminate against you for exercising an applicable privacy right.

To submit a privacy request, email:

derron@norredprojectcontrols.com

Use the subject line:

Privacy Request

Include your name, organization, contact information, the nature of your request, and enough information for us to identify the relevant records.

NORRED may request additional information to verify your identity or authority before completing a request. Information provided for verification will be used only to process and document the request.

If NORRED denies your request, you may appeal by replying to the decision and clearly stating that you are submitting a privacy appeal.

An authorized agent may submit a request where permitted by law, but NORRED may require proof of the agent’s authority and may independently verify the request with the individual concerned.

  1. CHILDREN’S PRIVACY

NORRED’s website and services are intended for businesses and adults.

NORRED does not knowingly collect personal information from children under 13 through this website. If we learn that such information was submitted without appropriate authorization, we will take reasonable steps to delete it.

  1. THIRD-PARTY WEBSITES AND SERVICES

Our website may contain links to third-party websites, applications, or services.

NORRED does not control and is not responsible for the privacy, security, content, or practices of third parties. You should review the privacy policies of any third-party service before providing information.

  1. CHANGES TO THIS PRIVACY POLICY

NORRED may update this Privacy Policy to reflect changes in our services, technologies, vendors, business practices, or legal obligations.

The revised policy will be posted on this website with an updated effective date. Continued use of the website after an update constitutes acknowledgment of the revised policy to the extent permitted by law.

  1. CONTACT INFORMATION

Questions, concerns, complaints, or privacy requests may be directed to:

NORRED INC.
Doing business as NORRED Project Controls
Email: derron@norredprojectcontrols.com
Website: norredprojectcontrols.com