Privacy Policy

Last updated: 2 June 2026

This Privacy Policy explains how North collects, uses, and protects your personal information when you visit our website, contact us, work with us, or sign up for our newsletter.

We take your privacy seriously and aim to be open about what we do with your data. If anything below is unclear or you’d like to exercise any of your rights, please contact us using the details at the end of this policy.

Who we are

North is a digital agency based in Lincolnshire, United Kingdom, providing services including website design and development, AI strategy and automation, branding, and related consultancy.

For the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), North is the “data controller” responsible for your personal information.

Registered company name: North Marketing Digital Ltd
Company number: 17296129
Registered address: 82 Newmarket, Lincolnshire, United Kingdom
Trading name: North
Email: hello@itsnorth.co.uk
Phone: 07494 849752

What personal information we collect

We collect personal information in a few different ways, depending on how you interact with us.

Information you give us directly

• When you contact us: name, email address, phone number, business name, and the content of your message.
• When you book a discovery call: name, email address, business name, and any information you share via our booking tool.
• When you sign up to our newsletter: name and email address.
• When you become a client: name, business name, postal address, billing details, project requirements, login credentials we need to deliver the work, and any other information relevant to the engagement.

Information collected automatically

• Technical information: IP address, device type, browser type and version, operating system, referring website, and the pages you view on our site.
• Usage information: how you interact with our website, including pages visited, time spent, links clicked, and form submissions.
• Cookies and similar technologies: see the “Cookies” section below.

Information from third parties

Occasionally we may receive information about you from third parties — for example, if a contact refers you to us, or if we use lead enrichment tools to research prospects publicly available online (LinkedIn, company websites, business directories).

How we use your personal information

We use your personal information for the following purposes:

• To respond to your enquiries: if you contact us, we use your details to reply and follow up.
• To deliver our services: if you become a client, we use your information to perform the work, communicate with you, and manage the engagement.
• To send our newsletter: if you’ve signed up, we send you occasional emails about practical AI, web, and business topics relevant to Lincolnshire businesses. You can unsubscribe at any time.
• To improve our website: we use anonymised analytics to understand how visitors use the site and identify areas to improve.
• To comply with legal obligations: including tax records, anti-money-laundering checks where applicable, and responding to lawful requests from authorities.
• For our legitimate business interests: such as marketing to potential business clients (in line with PECR and UK GDPR), keeping records of our work, and protecting the security of our website.

Our lawful bases for processing

Under UK GDPR, we must have a lawful basis for processing your personal information. We rely on the following bases, depending on the context:

• Consent: where you’ve actively agreed — for example, ticking the box to receive our newsletter, or accepting non-essential cookies via our cookie banner.
• Contract: where processing is necessary to enter into or perform a contract with you (for example, when delivering our services to a client).
• Legitimate interests: where processing is necessary for our legitimate business interests — such as responding to your enquiry, contacting potential business clients, keeping records, or improving our services — and your rights and interests do not override those interests.
• Legal obligation: where we need to process your data to comply with the law (for example, for tax or accounting purposes).

You have the right to withdraw consent at any time where we rely on it, and to object to processing based on legitimate interests. See “Your rights” below.

Who we share your personal information with

We do not sell your personal information. We only share it with third parties where it’s necessary to run our business, deliver our services, or comply with the law.

The main categories of third parties we share data with are:

• Service providers and software we use to run the business: including Google Workspace (email and documents), HubSpot (CRM), Stripe (payments), Calendly (booking), Mailchimp or similar (newsletter delivery), and our website hosting provider. These providers process data on our behalf under appropriate data processing agreements.
• Analytics providers: we use Google Analytics 4 to understand how visitors use our site. See the “Cookies” section for how to manage this.
• Professional advisers: such as our accountants, legal advisers, or insurers, where they need access to provide their services to us.
• Authorities and regulators: if required by law, court order, or regulatory request, including HMRC and the Information Commissioner’s Office (ICO).
• Successors in business: if North is ever sold, merged, or restructured, your data may be transferred to the new owner as part of that transaction (subject to the same protections).

International transfers

Some of the tools we use store data outside the UK — most commonly in the European Economic Area (EEA) or the United States. Where data leaves the UK, we rely on protections required under UK GDPR, including the UK’s adequacy decisions, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.

If you’d like more detail about a specific provider, please get in touch.

How long we keep your information

We only keep personal information for as long as we need it. In practice:

• Enquiries that don’t lead to work: up to 24 months from the last contact, after which we delete the records.
• Client records: for the duration of our engagement plus 7 years afterwards (to comply with UK accounting and tax obligations).
• Newsletter subscribers: until you unsubscribe, after which we remove you from the active list.
• Website analytics: Google Analytics 4 data is retained according to the settings we configure (typically 14 months) and is in any case anonymised before storage.
• Backups: data in technical backups is overwritten on a rolling basis (usually within 30–90 days).

How we keep your information secure

We take reasonable steps to protect personal information from accidental loss, unauthorised access, alteration, and disclosure. These include:

• Encryption of data in transit (HTTPS / TLS across our site and tools)
• Strong, unique passwords and multi-factor authentication on all business accounts
• Secure, GDPR-compliant providers for all data processing
• Access controls so only people who need to see your information can do so
• Regular review of our security practices and tools

No method of online transmission or storage is 100% secure, but we work to industry-standard practices.

Your rights

Under UK GDPR, you have a number of rights in relation to your personal information. These include:

• The right to be informed — to know what we do with your data (this Privacy Policy sets that out).
• The right of access — to request a copy of the personal information we hold about you.
• The right to rectification — to correct any inaccurate or incomplete information.
• The right to erasure — to ask us to delete your information in certain circumstances.
• The right to restrict processing — to limit how we use your data in certain circumstances.
• The right to data portability — to receive a copy of your data in a structured, machine-readable format.
• The right to object — to processing based on legitimate interests, including direct marketing.
• The right to withdraw consent — where we rely on consent as our lawful basis.
• Rights related to automated decision-making — we do not make decisions about you using purely automated processing.

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month.

Children’s privacy

North’s services are aimed at businesses and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

Cookies and tracking

Our website uses cookies and similar technologies. We explain which ones and why below.

What cookies are

Cookies are small text files that websites place on your device. They are used to make websites work, to remember your preferences, and to collect information about how the site is used.

The cookies we use

• Strictly necessary cookies. These are required for the website to function — for example, remembering whether you’ve accepted cookies, or keeping your session active on a form. These are set automatically and do not require consent.
• Analytics cookies. We use Google Analytics 4 to understand how visitors use the website (which pages are popular, which devices are used, where visitors come from). This data is anonymised and helps us improve the site. These cookies are only set if you accept them via our cookie banner.
• Marketing cookies. If we add advertising or remarketing tools in future (such as Meta Pixel), these will only be set if you accept them via our cookie banner. We will update this policy if and when we introduce them.

Managing your cookie preferences

You can change your cookie preferences at any time by clicking the “Cookie Settings” link in our website footer, which reopens the cookie banner.

You can also manage cookies through your browser settings. Most browsers allow you to view, manage, delete, and block cookies. Helpful guides:

• Chrome: support.google.com/accounts/answer/32050
• Safari: support.apple.com/en-gb/guide/safari/sfri11471/mac
• Firefox: support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Edge: support.microsoft.com/en-us/microsoft-edge

If you block all cookies, parts of the website may not work as intended.

Do Not Track

Because there is no agreed standard for how websites should respond to “Do Not Track” browser signals, we do not currently respond to them. Our cookie banner provides the equivalent ability to refuse non-essential cookies.

Marketing communications

If you sign up to our newsletter, we’ll send you occasional emails on topics relevant to your business. You can unsubscribe at any time using the link at the bottom of any email, or by contacting us directly.

If you’re a business contact (for example, a Lincolnshire business owner we’ve identified as a potential client), we may contact you on the basis of legitimate interest under UK GDPR and the soft opt-in rules under PECR. You can ask us to stop at any time and we will.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time — for example, if we add new tools, change how we use data, or update for changes in the law. The “Last updated” date at the top will reflect any changes. For significant changes, we may also email registered contacts directly.

How to contact us

If you have any questions about this Privacy Policy, want to exercise your rights, or have a complaint about how we handle your data, please contact us:

Email: hello@itsnorth.co.uk
Phone: 07494 849752
Post: North, Louth, Lincolnshire

How to complain to the ICO

If you’re not happy with how we’ve handled your personal information, you have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113

We’d appreciate the opportunity to address your concerns directly first — so please consider contacting us before going to the ICO. But you’re entitled to do either.