1. Controller and contact details
NotraOne is a trading name of Notra One Limited. For the purposes of UK data protection law, Notra One Limited is the controller of personal data collected through the Site.
If you proceed to the Gemba application platform, Gemba Finance Ltd will act as an independent controller of your data for that process. Please refer to Gemba’s privacy notices for details of how Gemba handles your data.
2. Personal data we collect
We collect the following categories of personal data when you use the Site:
- Identifiers and contact details such as name, email address, phone number, company name, job title, and country, when you submit a form or contact us.
- Device and usage data such as IP address, browser type, pages viewed, and interactions with the Site. This may be collected using cookies and similar technologies.
- Application referral data such as whether you clicked through to Gemba’s platform from the Site and high level status updates that Gemba may share with us to manage referrals, where permitted by law and by our agreement with Gemba.
3. How we use your personal data and legal bases
We use personal data for the following purposes:
- Responding to enquiries and providing information about our services. Legal basis: legitimate interests in operating our business and responding to requests, or steps taken at your request before entering into a contract.
- Introducing you to Gemba and tracking the status of introductions. Legal basis: performance of a contract with you or steps taken at your request before entering into a contract, and our legitimate interests in managing our introducer relationship.
- Marketing communications including newsletters and product updates where permitted. Legal basis: consent where required by law, otherwise our legitimate interests in promoting our services to business contacts. You can opt out at any time.
- Improving the Site and Analytics. Legal basis: consent for non‑essential cookies; legitimate interests for essential cookies and basic analytics that are strictly necessary to provide the Site.
- Legal and compliance purposes including record keeping and exercising or defending legal claims. Legal basis: compliance with legal obligations and our legitimate interests.
4. Sharing your personal data
We share personal data with:
- Gemba Finance Ltd when you ask us to introduce you or when you click through to apply. Gemba acts as an independent controller for its processing.
- Service providers that host the Site, provide analytics, forms, CRM, email, and IT security. These providers act as processors under our instructions.
- Professional advisers such as lawyers and accountants where necessary.
- Authorities were required by law or to protect our legal rights.
- We do not sell your personal data.
5. International transfers
Some providers may process personal data outside the UK. Where we transfer personal data internationally, we use appropriate safeguards such as the UK International Data Transfer Agreement or other approved mechanisms.
6. Data retention
We keep enquiry and lead data for up to three years from the last interaction, unless we need to keep it longer to comply with legal obligations or to establish, exercise, or defend legal claims. Cookie and analytics data are retained in line with our cookie policy and the settings you choose.
7. Your rights
Subject to legal limits, you have the right to request access, correction, deletion, restriction, data portability, and to object to certain processing. Where we rely on consent, you can withdraw consent at any time. To exercise your rights, contact us at privacy@notraone.com.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office at ico.org.uk or with your local supervisory authority.
8. Security
We use appropriate technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
9. Children
The Site is not intended for children. We do not knowingly collect data from anyone under 18.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we will post the updated policy on the Site and update the “Last updated” date.
11. Contact
If you have questions about this policy or how we handle your data, contact us at privacy@notraone.com.
Last updated: 18th September 2025