Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains how OREXOVA HOLDINGS LTD ("OREXOVA", "NormaLeads", "we", "us") collects, uses, shares and protects personal information when you visit our website, submit a form on it, or submit your details through an advertising lead form that leads to NormaLeads. See also our Terms & Conditions.

1. Who we are

NormaLeads is operated by OREXOVA HOLDINGS LTD, a company registered in Cyprus under company registration number HE 442139. We provide lead generation and appointment-setting services to window replacement companies. For the personal information described in this Privacy Policy, OREXOVA HOLDINGS LTD is the data controller.

2. Information we collect

We may collect the following information:

• Contact details: your name, email address, phone number and company name.
• Form submissions: information you submit through forms on our website and through advertising lead forms, including any other details the form asks for or you choose to provide, such as information about your window project.
• Appointment and scheduling information: the date and time of a call or appointment you book, and any details you enter while booking.
• Communication records: records of calls, emails and text messages with you, including when you opted in to or out of text messages.
• Technical information: IP address, browser and device information, cookies, and website usage information, collected by our hosting provider and the third-party services embedded in our website.

3. How we use your information

We may use your information to:

• respond to your inquiries;
• schedule and manage appointments;
• provide the services you request;
• send appointment confirmations, reminders and follow-up communications;
• communicate by SMS where you have provided explicit consent;
• operate, maintain, improve and secure our website and services;
• prevent fraud or misuse; and
• comply with legal obligations and establish or defend legal claims.

4. Text messages and mobile information

We send SMS (text) messages only where you have explicitly opted in. Submitting a form or providing your phone number is not, by itself, consent to receive text messages. Message frequency may vary. Message and data rates may apply. You can reply STOP at any time to opt out, and HELP for assistance.

Service providers may process information, including phone numbers, solely as necessary to provide messaging or operational services on our behalf, and are subject to appropriate confidentiality and data protection obligations. Details of our text messaging program are in the SMS Messaging Terms in our Terms & Conditions.

5. Who we share information with

• Window replacement companies: if you request a window replacement appointment or quote through an advertising lead form, we share your details with the company we connect you with so it can contact you and attend the appointment.
• Service providers: companies that help us operate, including our customer relationship management and messaging platform (GoHighLevel), our scheduling provider (Calendly), website hosting and font providers, and the advertising platforms on which lead forms run.
• Authorities and advisers: where required by law, or to protect our rights, or to our professional advisers.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

6. Legal bases for processing

Where the EU or Cyprus data protection law applies, we rely on: your consent (for example, text messages); taking steps at your request before a contract, such as arranging a call; our legitimate interests in running and securing our business and providing our services; and compliance with legal obligations.

7. Cookies, browser storage and embedded services

Our website may use cookies, browser storage, analytics, advertising technologies, embedded services and similar technologies that may collect technical and usage information, such as your IP address, browser and device information, pages viewed and interactions with the site. Our website currently loads fonts from Google Fonts and an embedded scheduling calendar from Calendly, which may collect technical data under their own privacy policies. If a form submission cannot be delivered, your browser temporarily stores the details you entered so we can retry sending them the next time you visit; they are removed once delivered. You can control cookies and browser storage through your browser settings.

8. Retention

We keep personal information only for as long as needed for the purposes in this policy, including to meet legal, accounting and dispute-resolution requirements, and then delete or anonymize it.

9. International transfers

Our providers and the window replacement companies we work with may be located outside Cyprus and the European Economic Area, including in the United States. Where we transfer personal data internationally, we use appropriate safeguards required by applicable law, such as standard contractual clauses.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal information, to request portability of your information where applicable, and to withdraw your consent at any time. Withdrawing consent does not affect processing carried out before withdrawal.

You may withdraw your SMS consent at any time by replying STOP to any text message from us.

To exercise any other right, contact us at hello@normaleads.com. If you are in the EU or EEA, you may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus or your local supervisory authority. Residents of certain US states may have additional rights under state privacy laws, which we will honor as applicable.

11. Security

We use reasonable administrative, technical and organizational safeguards to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Children

Our website and services are directed to adults and are not intended for anyone under 18. We do not knowingly collect personal information from children.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows when it last changed.

14. Contact us

You can contact OREXOVA HOLDINGS LTD at hello@normaleads.com. Our Terms & Conditions also apply to your use of our website.