Privacy notice

Who handles the data and how to contact us

The website owner and data controller is Limited Liability Company “Norris Service” (LLC “Norris Service”), Tax Identification No. 00712202310172. Registered address: 720052, 118 Baitik Baatyr Street, Bishkek, Kyrgyz Republic. Data requests: sale@norris.kg, +996 553 22-88-88.

This notice covers the public website, enquiry forms, Norris Farm Monitor download registration, Norris Cloud accounts and data sent by connected devices. Project contracts and technical specifications define the parties’ roles, exact data and processing locations for custom installations.

To request a copy, correction, restriction, objection, deletion or withdrawal of consent, email sale@norris.kg. Include the account email or contact details and describe your request. We may ask you to verify your identity before disclosing information.

Data we receive

• Website enquiry: name, phone or other contact details, city, site type, selected service and package, budget, requested timeline and task description. The page address, language, campaign tags and technical request details are also received.
• Free Farm Monitor registration: name, phone, email, company or farm name, city, ASIC count and models. These fields are sent to Norris Cloud as part of the download registration request.
• Norris Cloud account: email, user identifier, registration time and a strong password hash. The plain-text password is not stored.
• Connected devices: device identifier and type, name and room, firmware version and capabilities, current state and telemetry, last connection time, device network address, control commands, automations and security events.
• On-site engineering systems: depending on the project, they may process employee or user identifiers, access events, entry/exit times, schedules and access logs. If a biometric feature such as face recognition is separately agreed, the technical specification defines the biometric data used, where it is stored and who controls it. Do not submit biometric data through public website forms.
• Website security: the server and infrastructure may process IP addresses and browser data to deliver pages, prevent spam, limit request rates and investigate faults. The Norris analytics event database does not store the IP address in plain form; a keyed HMAC hash may be used for rate limiting and remains pseudonymous data. If you allow Google Analytics 4 or Yandex Metrica, your browser also connects to those services directly; they may receive network information, including your IP address, through their own mechanisms.

Purposes and legal grounds

• To respond to an enquiry, clarify the task, prepare an estimate or proposal and contact you through the chosen channel. Forms request only information needed for that response and agreed follow-up.
• To create an account, provide and operate Norris Cloud access, associate a user’s devices, send commands, receive acknowledgements, display telemetry and run configured automations.
• To register a Farm Monitor download request and provide temporary file access. The free local mode does not require Norris Cloud remote control; details submitted for download registration are processed separately as an enquiry.
• To protect services, diagnose faults and prevent abuse. Consent is used where required, including for optional analytics. Account and enquiry data may also be processed to fulfil your request or a contract and comply with mandatory requirements.
• For employee attendance or access control installations, the customer determines the permitted purposes and legal basis for employee and visitor data. Norris Service processes that data only within the roles and scope agreed in the contract and system configuration.

Analytics, browser storage and WhatsApp

Optional analytics stays off until you choose. If enabled, the site may store a session and visitor identifier, pages visited, referral source, campaign UTM tags, browser or device type, visit duration and specifically configured events such as viewing a service, submitting a successful enquiry or clicking WhatsApp. Enquiry text, form contents, passwords and the prefilled WhatsApp message are not sent to analytics.

The site may use first-party records, Google Analytics 4 and Yandex Metrica if configured. Their scripts do not run before consent. Once enabled, third-party tags may use their own identifiers and receive data directly from your browser; Google and Yandex terms also apply. Change your choice below or through “Privacy settings” in the footer. The choice is stored in your browser. You may separately request deletion of analytics records already stored on the server.

Essential browser storage also supports Norris Cloud sign-in and product or language settings. It is not used for advertising profiles.

Clicking WhatsApp opens WhatsApp with a prepared message about the selected service. Norris does not send it for you: review the text and decide whether to send it. WhatsApp/Meta terms apply after you leave the site.

Who may receive the data

Data is available to Norris Service staff who need it to respond, operate, support or secure the service. Digital products use server and cloud infrastructure, the Norris Cloud database and, if analytics is enabled, Google Analytics 4 and Yandex Metrica. Providers process data to deliver those services.

If you open WhatsApp, data is sent to WhatsApp/Meta through your action. We do not sell personal data or disclose it to advertising brokers. Data may be disclosed to competent authorities where required by law.

Deta.kg provides hosting for the public norris.kg website. Norris Cloud, its database and third-party analytics may use separate infrastructure, depending on each product and provider configuration. The physical country or region must be checked against the contract and settings of the specific infrastructure; a hosting provider name alone does not establish a server location.

Retention periods

• In Norris Cloud, historical telemetry and completed command records are deleted after 30 days; audit-log records after 180 days. Diagnostic PDFs are deleted after the configured period, 24 hours by default. Server configuration can change these periods.
• Account data and current device settings are needed while the account and device pairing remain in use. Removing a device from an account also removes its queued commands and automations.
• Website enquiries and download registrations are kept to handle the request, fulfil agreed work and protect rights. The current implementation does not define a fixed automatic deletion period for these records. Request deletion at sale@norris.kg; documents required by law or to protect rights may be retained to the necessary extent.
• You can withdraw analytics consent at any time: new analytics events will stop and local identifiers will be removed from that browser. Server records already collected are deleted on a separate request or when no longer needed for the stated purpose.

Security and your rights

The website and Norris Cloud use HTTPS. Account passwords are processed with a strong password-hashing algorithm, and Cloud access is restricted by account and permissions. These measures reduce risk but cannot guarantee absolute security for data sent over the internet.

You may request information about processing and access to your data, ask for correction, deletion or restriction, object to specific purposes, and withdraw consent where processing is based on consent. Withdrawal does not undo processing lawfully completed before it. If data is needed to operate a requested feature or fulfil a contract, refusing to provide it may make that feature unavailable.

If data concerns a customer’s employees, visitors or other site users, the customer who determines the purposes and data scope may need to participate in the request. Requests and rights are handled under applicable Kyrgyz law, including the Digital Code of the Kyrgyz Republic.

The Norris Service website is not intended to collect children’s data. Do not enter passwords, API keys, documents, medical information, security diagrams or third-party information that is not needed for your enquiry in public forms.