Find details about our business services and request the documents your procurement team needs.
For UK B2B buyers whose procurement team needs answers on a standard supplier review form. The pack covers the questions we get asked most, with our written response. Designed to be lifted into a procurement portal directly.
For anything not covered here, hello@normamade.com gets a written response within 48 hours.
Sender of record: Creative Club Grp Limited, a company registered in England and Wales (company number 12559468), registered office at Moy Road Industrial Estate, Taffs Well, Cardiff, CF15 7QR. Trading as Norma.
Legal entity: Creative Club Grp Limited Trading name: Norma Registered address: Moy Road Industrial Estate, Taffs Well, Cardiff, CF15 7QR Company number: 12559468 VAT number: GB348308685 Year founded: 2026
What materials do you use across the catalogue?
It varies by product. Each product page states the fabric or material and the weight the supplier gives us. We state a certification (such as GOTS, GRS or FSC) only where the supplier certifies that product and we can verify it; none is shown today.
Where are products manufactured?
Every order is made to order by our production partners, who decorate and ship it. Base garments and blanks come from the partner's own supply. The country of origin is on the garment's care label, and we will tell you what the supplier states for a product before you order.
Do you provide chain of custody documentation?
Only for a product whose supplier certifies it. Ask before you order and we will tell you what exists for that product.
What is your Modern Slavery Act statement?
Norma is below the turnover at which the Modern Slavery Act 2015 requires a statement, and we do not publish one yet. We ask our production partners for their own statements and share what we hold on request.
What is your environmental policy?
We do not publish one yet. Every order is made to order.
Do you measure Scope 1, 2, and 3 emissions?
Not yet. We have not measured our emissions, so we make no carbon, offset or per product footprint claims.
What is the carbon footprint per product?
We do not have per product figures. We will not quote one until it is measured.
What recycled content is in your packaging?
Packaging depends on the product and the production partner that packs it. Ask us for the specific products you are considering.
Do you have an end of life programme?
A take back programme is in development. Today, our recommendation to customers is to use the standard UK household textile or paper recycling streams for items at end of life. We will publish a return path for repair and material recovery within the first 12 months of operation.
Are you certified by EcoVadis, B Corp, or comparable bodies?
B Corp application is planned for the second year of operation. We do not currently hold either rating.
Do you have a Data Processing Agreement?
Yes. Our standard DPA template is available on request and can be signed before contract execution.
Where is customer data stored?
Most customer data is stored in the UK and EU: Postgres on Neon (eu-west-2 London), object storage on Cloudflare R2 (UK and EU edges), product analytics on PostHog EU cloud. Some sub processors (Stripe, Resend, Sentry) may process data in the US under UK Standard Contractual Clauses and the UK to US Data Bridge. The full sub processor list is available on request.
Do you hold SOC 2, ISO 27001, or similar?
Not at launch. SOC 2 Type 1 is on the roadmap for the first 12 months. Our security controls and posture are documented in our security overview, available on request.
What encryption do you use?
TLS 1.2 or higher in transit (TLS 1.3 preferred). AES-256 at rest for the database. Hashed passwords using bcrypt with a per password salt. Card data is never stored on our systems; payment handling is delegated to Stripe (PCI DSS Level 1).
What is your incident response?
We follow a four step framework: detect, contain, eradicate, recover. Material incidents affecting customer data are notified to the ICO and affected customers within 72 hours of identification, as required by UK GDPR. The incident response policy is available on request.
Do you have a documented Information Security policy?
Yes. Available on request under NDA.
Penetration testing cadence?
Annual third party penetration test (planned within first 12 months of operation). Continuous internal vulnerability scanning via Snyk on dependencies and code.
Backup and recovery?
Database backups are taken hourly with 30 days of point in time recovery. RTO target: 4 hours. RPO target: 1 hour.
Anti bribery and corruption policy?
We operate under the Bribery Act 2010 framework. Our anti bribery policy is published internally and available on request. Suppliers and contractors must comply with the same standard.
Sanctions screening?
We screen suppliers and high value B2B customers against UK and EU consolidated sanctions lists at onboarding and on a quarterly review cycle.
Tax compliance?
UK VAT registered (VAT number GB348308685). All tax filings are current; HMRC compliance is on schedule.
Standard contract terms?
Our terms of service are at normamade.com/legal/terms. For B2B customers placing orders over £5,000 per year, a master services agreement can be negotiated.
What are your payment terms?
Standard: payment at point of order via card or Klarna. For approved B2B customers, net 30 invoicing is available after a Creditsafe UK assessment. Net 60 is available case by case after 3 to 6 months of positive payment history on net 30.
What is your credit assessment process?
We assess net 30 applications via Creditsafe UK. The check looks at filed accounts, payment history, and other public signals. Decisions are typically returned within 2 working days. Approval is at our discretion based on credit score and limit.
What is your refund policy?
Defects, print errors, wrong items, and damage in transit: tell us within 7 working days of delivery for a priority reprint or a refund. Custom designs that the customer approved are otherwise not returnable, since a printed or embroidered item cannot be resold or reused (Consumer Contracts Regulations 2013, made to order exception). Full policy at normamade.com/legal/returns.
SLAs?
Production and delivery depend on the product, the quantity and the print method; each product page shows its delivery estimate. Online checkout delivers to UK addresses. For a business order going elsewhere in Europe, email hello@normamade.com and we'll arrange it.
We do not currently offer financial SLA credits but will discuss case by case for enterprise accounts.
Account management?
For B2B accounts placing more than £25,000 per year, we assign a named account contact. For smaller accounts, hello@normamade.com is the primary route, with 1 working day response SLA.
Do you track supplier diversity?
We are in the early stages of supplier diversity tracking. We can supply Tier 1 supplier breakdown on request. Tier 2 mapping is in development.
Equal opportunities policy?
Norma operates under an equal opportunities framework. Recruitment, promotion, and supplier selection processes are conducted without regard to age, disability, gender, race, religion, sexual orientation, or other protected characteristics under the UK Equality Act 2010.
We are a new company and cannot offer customer references yet. We are happy to walk you through the product, a sample and the account set up on a call.
Things we do not have today, which a procurement reviewer may ask about, and our timeline:
If any of these are launch blockers for your procurement review, please raise them at the walkthrough call and we can discuss alternatives or workarounds.
For procurement questions: hello@normamade.com (1 working day response). For security questionnaires: hello@normamade.com (NDA on request). For legal contracts and DPA: hello@normamade.com. For billing and invoicing: hello@normamade.com.
Creative Club Grp Limited, Moy Road Industrial Estate, Taffs Well, Cardiff, CF15 7QR, United Kingdom.