Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains how OREXOVA HOLDINGS LTD ("OREXOVA", "NormaLeads", "we", "us") collects, uses, shares and protects personal information when you visit our website, submit a form on it, or submit your details through an advertising lead form that leads to NormaLeads.

1. Who we are

NormaLeads is operated by OREXOVA HOLDINGS LTD, a company registered in Cyprus (registration number [INSERT COMPANY REGISTRATION NUMBER]), with its registered address at [INSERT REGISTERED ADDRESS]. We provide lead generation and appointment-setting services to window replacement companies. For the personal information described in this policy, OREXOVA HOLDINGS LTD is the data controller.

2. Information we collect

• Contact details you submit: your name, email address and phone number, and your company name if you are a business owner requesting a call with us.
• Advertising lead form details: your name, email address and phone number, plus any other details the form asks for or you choose to provide, such as information about your window project.
• Scheduling information: the date and time of a call or appointment you book, and any details you enter while booking.
• Communication records: records of calls, emails and text messages with you, including when you opted in to or out of text messages.
• Technical information: data such as IP address, browser and device type, and pages viewed, collected by our hosting provider and the third-party services embedded in our website.

3. How we use your information

• To respond to your request and schedule calls or appointments.
• To qualify requests, book appointments and provide our lead generation and appointment-setting services.
• To confirm appointments and follow up with you by phone, email and, where you have explicitly opted in, text message.
• To keep our records, operate and secure our website, and prevent fraud or misuse.
• To comply with legal obligations and to establish or defend legal claims.

4. Text messages and mobile information

We send text messages only to people who have explicitly opted in. Details of our text messaging program, including how to opt out, are in our Terms & Conditions. We do not share your mobile phone number or text messaging opt-in data with third parties or affiliates for their own marketing or promotional purposes. We may share it with service providers that help us deliver messages and support our services, under confidentiality obligations.

5. Who we share information with

• Window replacement companies: if you request a window replacement appointment or quote through an advertising lead form, we share your details with the company we connect you with so it can contact you and attend the appointment.
• Service providers: companies that help us operate, including our customer relationship management and messaging platform (GoHighLevel), our scheduling provider (Calendly), website hosting and font providers, and the advertising platforms on which lead forms run.
• Authorities and advisers: where required by law, or to protect our rights, or to our professional advisers.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

6. Legal bases for processing

Where the EU or Cyprus data protection law applies, we rely on: your consent (for example, text messages); taking steps at your request before a contract, such as arranging a call; our legitimate interests in running and securing our business and providing our services; and compliance with legal obligations.

7. Cookies, browser storage and embedded services

Our website loads fonts from Google Fonts and an embedded scheduling calendar from Calendly, which may collect technical data under their own privacy policies. If a form submission cannot be delivered, your browser temporarily stores the details you entered so we can retry sending them the next time you visit; they are removed once delivered.

8. Retention

We keep personal information only for as long as needed for the purposes in this policy, including to meet legal, accounting and dispute-resolution requirements, and then delete or anonymize it.

9. International transfers

Our providers and the window replacement companies we work with may be located outside Cyprus and the European Economic Area, including in the United States. Where we transfer personal data internationally, we use appropriate safeguards required by applicable law, such as standard contractual clauses.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal information, to receive a copy of it in a portable format, and to withdraw consent at any time. Withdrawing consent does not affect processing carried out before withdrawal. To exercise any right, contact us at [INSERT CONTACT EMAIL]. If you are in the EU or EEA, you may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus or your local supervisory authority. Residents of certain US states may have additional rights under state privacy laws, which we will honor as applicable.

11. Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children

Our website and services are directed to adults and are not intended for anyone under 18. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows when it last changed.

14. Contact us

OREXOVA HOLDINGS LTD, [INSERT REGISTERED ADDRESS]. Email: [INSERT CONTACT EMAIL].