Privacy policy

Who this covers

This policy applies to personal information we collect through this website and through the email addresses published on it, including information from prospective clients, candidates for our open roles, engineers in our network, partners and site visitors.

It does not cover personal information we process on behalf of a client while our engineers work inside that client's systems. In that setting the client decides what is collected and why; the client's own privacy notice governs, and our handling is defined by the written agreement between us. It also does not cover third-party websites we link to, such as LinkedIn.

What we collect

Information you give us

• Contact form. Your name, email address and the message you write when you use the form on our homepage.
• Application form. Your name, email address, the role you are applying for, an optional link to a portfolio or profile, your written answer, and your résumé if you attach one. Résumés routinely contain more than we ask for — phone number, address, employment history, education. We take what you send.
• Email and calls. Anything you choose to tell us at hello@ or talent@nortondigitalconsulting.com, or on a call with a Norton lead.

Information collected automatically

• Server logs. Our hosting provider records standard request data — IP address, timestamp, page requested, browser user agent — to serve the site, block abuse and diagnose faults.
• Fonts. The site loads typefaces from Google Fonts. Your browser requests those files directly from Google, which means Google receives your IP address and user agent as part of that request.

We do not run advertising pixels, analytics scripts, session recording or third-party trackers on this site, and we do not buy personal information about you from data brokers.

How we use it

• To answer your message, scope an engagement and stay in touch about work you asked us about.
• To assess your application, run our vetting process, and consider you for current and future roles and client placements.
• To present you to a client for a specific opportunity, with your knowledge.
• To operate, secure and improve the website.
• To meet legal, tax, insurance and employment obligations, and to establish or defend legal claims.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use your résumé or the contents of your messages to train machine-learning models, and we do not submit them to third-party AI services for that purpose.

When we share it

• Clients. If you are a candidate we intend to present for a role, we share your profile and résumé with that client. We tell you which client before we do it.
• Service providers. Companies that run parts of our operation under contract — website hosting and form handling, email and productivity software, applicant and candidate tracking, accounting and payroll. They may use the information only to provide the service to us.
• Professional advisers. Lawyers, auditors, insurers and background-check providers where a specific engagement or hire requires it.
• Legal and safety. Where we are required by law, subpoena or court order, or where disclosure is necessary to protect our rights, our people or the public.
• Business transfer. If Norton is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy.

Candidates and applicants

Applying to Norton means you are asking us to consider you for placement. We keep your profile in our candidate records so we can come back to you when a fitting role opens, unless you ask us not to.

We do not make hiring or placement decisions by automated processing alone. Every candidate who reaches our shortlist has been assessed by a human being through the four steps of the Production Gate, and a human being makes the call.

Ask us at any time to see what we hold on you, correct it, or remove you from our candidate records. Write to talent@nortondigitalconsulting.com and we will confirm when it is done.

Cookies and tracking

This website sets no cookies of its own, and it runs no analytics, advertising or session-recording technology. There is no consent banner because there is nothing to consent to. If that changes, we will update this section and ask for your consent where the law requires it.

The site does not respond to browser Do Not Track signals, because it does not track you in the first place.

How long we keep it

• Contact form messages and correspondence: for as long as the conversation is live, and then in our email records under our normal retention schedule.
• Candidate profiles and résumés: for as long as you may plausibly want to hear from us about a role, and then removed on your request or on periodic review.
• Records required by law — contracts, invoices, tax and employment records: for the period the applicable law requires.
• Server logs: for the short period our hosting provider retains them.

Your rights and choices

Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy of it, to correct it, to delete it, to limit how we use sensitive information, and to appeal a decision we make about your request. Residents of California, Colorado, Connecticut, Virginia, Texas, Utah and other states with comprehensive privacy laws have these rights by statute; we extend the same handling to everyone who asks.

To exercise a right, email hello@nortondigitalconsulting.com with what you want and enough detail for us to find your records. We will acknowledge within ten business days and respond within the period the applicable law allows, normally forty-five days. We may need to verify your identity first, and we will not treat you differently for asking. If an authorized agent submits a request for you, we will ask for proof of their authority.

If we decline a request, we will tell you why, and you may appeal by replying to our response with the word "appeal" in the subject line.

How we protect it

The site is served over TLS. Form submissions and résumés are handled by our hosting platform and delivered into accounts that require multi-factor authentication, with access limited to the Norton people who need it. Our security posture, and how our engineers handle client data on an engagement, is described on our Trust page.

No method of transmission or storage is perfectly secure. Please do not send us sensitive personal information — government identifiers, financial account numbers, health information — through the website forms. We never ask for them there.

Children, jurisdiction and changes

This website is meant for a professional audience. It is not directed to children under sixteen, and we do not knowingly collect their personal information. If you believe a child has sent us information, write to us and we will delete it.

Norton is based in the United States and our service providers store information in the United States. If you contact us from another country, you are sending your information to the United States, where privacy law differs from the law where you live.

We update this policy when our practices change. The date at the top of this page tells you when it last changed. Material changes will be flagged on this page; continuing to use the site after an update means the revised policy applies.

Contact us