Privacy policy

Normstone entities

This website is operated under the Normstone brand by Normstone Inc., a Delaware corporation in the United States and the main entity responsible for the website and its inquiries.

The Abu Dhabi registered entity is NORMSTONE CONSULTECH - L.L.C - S.P.C, a Limited Liability Company - Sole Proprietorship Company in Abu Dhabi, United Arab Emirates. Its economic licence is CN-6814261, unified licence number 501-2026-200083918, and unified registration number 101-2026-200130420, issued on 7 October 2026. The contracting entity for professional work will be identified in the relevant proposal or agreement.

Who operates this website

Normstone Inc. is the main entity responsible for website inquiries and determines their purposes and handling. For privacy requests, email [email protected] with the subject ‘Privacy request’, or use the contact form. Please provide only the information needed to locate your record.

Information we receive

If you send an inquiry, we receive the name, work email, organization, area of interest, and message you enter. The system also assigns a record ID, a receipt time, and an internal status. Please avoid including passwords, health information, or other sensitive material in a first inquiry.

Like other websites, the hosting and access services may process technical request information, such as an IP address and browser or request details, to deliver and protect the site. These technical records are separate from the inquiry fields stored by the form.

Why we use it

Inquiry details are used to understand your request, decide whether and how to respond, and maintain a record of the inquiry. We do not use the contact form as a newsletter signup or sell the information submitted through it. Where EU or UK data protection law applies, we generally rely on our legitimate interests in responding to business inquiries and maintaining a secure website. Requested steps before entering a contract may rely on the pre-contractual basis where applicable to you. We rely on legal obligations when processing is required by law, and on consent for optional uses requiring it. You may object to legitimate-interest processing and withdraw consent without affecting earlier lawful processing.

Storage, access, and sharing

Submissions are stored in Cloudflare D1, the database connected to this Cloudflare Pages website. The form does not send an email notification. Access to the database is through the site owner’s protected hosting tools. Cloudflare processes information to deliver and protect the website and store its records. Authorized personnel handling inquiries for Normstone Inc. may access relevant records. Email correspondence is also processed by the provider supporting the published email address. Where an inquiry relates to delivery by the Abu Dhabi entity, relevant details may be shared with authorized personnel of NORMSTONE CONSULTECH - L.L.C - S.P.C. Information may also be disclosed as required by law or to professional advisers under appropriate confidentiality arrangements. Inquiry information is not sold or shared for cross-context behavioural advertising.

We do not make solely automated decisions about people from contact-form submissions. Basic validation and spam-field checks only determine whether a submission is accepted.

How long it remains

For inquiries that do not become client engagements, our standard retention period is 12 months after the last meaningful contact. Records may be kept longer while discussions remain active or where legal, accounting, dispute, or recordkeeping requirements justify it. Records connected to an engagement follow the relevant engagement and recordkeeping arrangements. Deletion is managed manually; the application does not automatically delete records. You can request deletion, subject to applicable exceptions, by emailing [email protected].

Locations and transfers

Normstone Inc. is established in the United States and the Abu Dhabi entity is registered in the UAE. Website delivery uses Cloudflare infrastructure; storage, correspondence, and authorized access may involve other countries. This website does not offer a country-specific data residency commitment. Where legal transfer safeguards apply, the relevant arrangements must address those requirements. Contact us for information about the arrangements relevant to your inquiry. This policy does not claim an unverified transfer certification or mechanism for Normstone.

Your choices and rights

Depending on the law that applies, you may be able to request access to, correction or deletion of, or restriction of processing of your personal information; object to certain uses; or ask for a portable copy. You may also be able to complain to a data protection authority. The available rights depend on the circumstances and applicable law.

To ask about an inquiry you submitted, use the contact form and provide enough information to locate the record. Please do not send identity documents or sensitive information in the initial message. You can also email [email protected]. We may request proportionate verification before disclosing or changing records and will respond within the period required by applicable law. We will not unlawfully discriminate against you for exercising applicable privacy rights.

Children and sensitive information

This website is intended for professional and business audiences and is not directed at children. Please do not submit sensitive personal information or confidential project records through an initial inquiry. If you believe a child has submitted personal information, contact [email protected] so we can assess and address it.

Cookies and other websites

The website does not include advertising tags or third-party analytics scripts. See the cookie notice for details. Resource pages link to external standards bodies and public authorities. Their websites operate under their own terms and privacy notices.

Updates to this notice

We will update this page when the website’s data flows or operating details change. The page was last reviewed on 7 October 2026.