Norton is the data controller of any personal data that is collected through the site. We are registered with the Information Commissioner’s Office (ICO) (registration number: ZA877690).
If you ever have any questions about this Policy or how we use your personal data, then you can always contact us using the information provided below.
About this Policy
This Policy applies to information that we collect when you engage with us through our site. This includes when you get in touch with us through contact forms or via the contact information that we make available, but also includes technical information about your visit and the device you’re using.
We’ll do our best to be transparent about how we use your data and to give you the best information possible. To help us do that we reserve the right to change this Policy or create additional policies to take account of changed circumstances or new legal requirements. Since we might need to do that in the future, we ask that you check back here on a regular basis and read this Policy together with any other privacy policies or notices that we have provided to you.
The type of data we collect
When you visit the site or communicate with us in the ways described above, then we’ll collect and use the following types of your personal data:
Identity Data: your first and last names.
Contact Data: your telephone number, address and email address.
Enquiry Data: the nature of your enquiry and other information that you provide in connection with it, such as your interests and preferences.
Candidate Data: information that you provide when registering your interest in an employment opportunity with us. This includes the contents of your CV and cover letter, such as your employment history, qualifications, experience and personal interests. Where your application is progressed then it may also include information obtained during interviews or assessments, information provided by referees and other opinions documented about your candidacy, as well as information about your right to work in the UK such as your nationality and other details contained in identification documents. In some circumstances we may also process information about your disability status, to ensure that we can make appropriate adjustments.
Transaction Data: your financial institution, payment card details and vehicle financing arrangements.
Purchase History Data: information about products and services that you’ve received in the past, including the details of any warranty cover on your vehicle and its service and maintenance history.
Technical Data: information about your device and browser, such as your IP address.
Usage Data: information about how you use and interact with the site, such as the length of time spent on each page.
Marketing Data: your preferences for receiving updates, surveys and other marketing communications from us.
Why we process your data and our lawful basis
We collect and process your data for different reasons in different circumstances. In addition, we’ll only collect and process your data where we have a legal basis for doing so. Our purposes and legal basis for using each type of data are set out below:
To respond to your enquiry
To discuss a bespoke build or factory visit
To discuss our products and services
To discuss vehicle servicing
To arrange a test ride
Necessary for our legitimate interests in engaging with you in relation to our brand, products and services
To take pre-contractual steps at your request
To consider your application and suitability for the role you’ve applied for, or for another role that we think might be appropriate based on your attributes
To get in touch with you about your candidacy
To make decisions about hiring and how we market job opportunities at Norton Motorcycles
Necessary for our legitimate interests in finding and recruiting the right staff for our business, as well as in complying with our legal obligations in that respect
To take pre-contractual steps at your request
To comply with our legal obligations as an employer
Purchasing and aftercare
Purchase History Dataory Data
To process payments for goods and services
To keep records of sales
To administer vehicle warranties
To keep records of vehicle servicing and maintenance
Necessary for our legitimate interests in operating and administering our business
To take pre-contractual steps at your request or to perform a contract with you
Marketing and research
To stay in touch with you by providing news and updates from Norton Motorcycles
To issue promotions and surveys
To make decisions about how best to improve our products and services
To better understand your needs and improve how we communicate with you
Necessary for our legitimate interests in promoting our brand, services and products
To improve the delivery of content on our site
To improve the security and functionality of our site
To customise our site according to your online behaviour and preferences
Necessary for our legitimate interests in making improvements to our site
Who we share your data with
Sometimes we might share your data with third parties. This could include:
Norton Motorcycles’ retailers, franchise partners and agencies.
Our affiliates and group companies.
Service providers we use for specific purposes, such as for our IT systems and marketing communications, and our professional advisers.
Regulatory authorities, law enforcement agencies and courts.
In the event of a sale of all or a part of our business, the buyer and its professional advisers.
Sending your data overseas
We may also send your data to recipients based overseas. However, we understand that some countries offer a lower standard of protection and will only transfer your data abroad where we are confident that your data will be properly protected.
In particular, we will only transfer your data to countries that have been deemed to offer an adequate level of protection, or where there are specific contractual protections in place with the recipient. Where do we rely on contractual safeguards then we will only use Standard Contractual Clauses approved for use by the ICO. Please contact us to know more about Standard Contractual Clauses and how we use them.
Keeping your data safe and secure
We are committed to securing your data and keeping it confidential. We have implemented appropriate technical and organisational measures to protect your personal data from being accidentally or unlawfully destroyed, lost, altered, disclosed, used or accessed. In addition, we limit access to your personal data to those employees, agents, contractors and service providers who have a business need to know. They will only process your personal data on our instructions.
However, please note that despite our best efforts we cannot guarantee the security of information being exchanged over the internet and, where our website contains links to other website plug-ins and applications that are not operated by us, clicking on those links or enabling those connections may allow third parties to collect or share data about you.
How long we keep your data
We will only retain your data for as long as necessary to fulfil the purposes we collected it for. Once those purposes have been achieved then, unless a different purpose for processing your data arises, it will be permanently deleted.
Your rights in connection with your data
You have rights under law in connection with your data. We’ve provided a list of your rights, although please note that they may not always apply in every case.
Right of access: subject to certain exceptions, you have the right of access to your personal data that we hold.
Right to rectify your personal data: if you discover that the information we hold about you is inaccurate or incomplete, you can get in touch to have this information corrected.
Right to be forgotten: you may ask us to delete information we hold about you in certain circumstances.
Right to restriction of processing: in some cases you may have the right to have the processing of your personal data restricted.
Right to object to processing: you can object to processing of your data when it’s based on our legitimate interests, for the purposes of direct marketing or statistical analysis.
Right to data portability: you have the right to receive or transfer your personal data to another controller if we are processing your data based on consent or on a contract and the processing is carried out by automated means.
We would always welcome the chance to deal with your concerns in the first instance, but you have the right to make a complaint to the ICO if you feel that we have handled your data improperly. If you would like to contact the ICO, then you can do so by telephone on 0303 123 1113 or through their website at https://ico.org.uk/global/contact-us/live-chat/
If you have any questions about this Policy or how we process your data or you would like to opt out of receiving marketing communications from us, then you can contact us at any time using the details below.
[appointment of EU representative]
Data Security Department
Unit 500 Solar Park
Tel: +44 (01332) 811988
Last updated: October 2021