Privacy Notice

What we collect and why

• Contact details (name, business name, email address, phone number) — collected when you submit our requirements form or email us, so we can respond to your enquiry and deliver your project. Legal basis: performance of a contract or steps taken at your request.
• Project information (business type, pages and features you want, brand preferences, timeline, existing website links, and any content you send us) — used to scope, quote, and build your website. Legal basis: performance of a contract.
• Support and correspondence (messages you send us, including via any AI assistant on this site) — used to answer questions and keep a record of what was agreed. Legal basis: legitimate interests in running our business.
• Technical and usage data (IP address, device and browser type, pages viewed) — used to keep the site secure, diagnose faults, and understand how the site is used. Legal basis: legitimate interests in security and service improvement.

Payment card details are never collected or stored by us. Payments are processed by our Merchant of Record, Paddle, which handles that data under its own privacy notice.

Who we share data with

• Service providers and subprocessors — hosting, email, and analytics providers who process data on our behalf under contract.
• Paddle, our Merchant of Record, for the sale of our services, subscription management, payments, tax compliance, and invoicing.
• Professional advisers such as accountants and lawyers, where necessary.
• Authorities, where we are required to disclose data by law.

We do not sell your personal data.

International transfers

Some of our providers operate outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or transfers to countries recognised as providing adequate protection.

How long we keep it

We keep enquiry data for up to 24 months if the enquiry does not become a project. Project and billing records are kept for as long as needed to deliver the work and then for the period required by tax and accounting law, typically seven years. After that, data is deleted or anonymised.

Your rights

Subject to the law where you live, you may have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we rely on it. You may also complain to your local data protection authority — in Canada, the Office of the Privacy Commissioner. To exercise any of these rights, email hello@northdesigner.com. We aim to respond within one month.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and limiting access to those who need it to do their work.

Cookies

This site uses essential cookies needed for it to function and for secure checkout. If we add analytics or marketing cookies, we will ask for your consent first. You can manage or delete cookies at any time in your browser settings; blocking essential cookies may stop parts of the site from working.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last revised.