Privacy Policy.
How I collect, use and protect your personal data - in plain English.
Privacy Policy.
Last updated: 3 October 2026
Who we are
Northhaus is a UK design studio run by a sole trader, trading as "Northhaus". For this website and our services, Northhaus is the "controller" of your personal data: we decide how and why it's used.
- Email: northhaus.io@outlook.com
- Address: [ADDRESS – Edinburgh, UK] [CONFIRM]
- ICO registration number: [CONFIRM – add once registered, or remove this line]
If you have any questions about this policy or your data, email us at the address above.
What we collect and why
1. When you use the contact form
What: your name, email address and message, plus anything else you choose to include.
Why: to read and reply to your enquiry.
Legal basis: our legitimate interest in responding to people who contact us, or, if you're asking about working with us, taking steps at your request before entering into a contract.
2. When you email us directly
What: your email address, name and whatever you write.
Why and legal basis: as above.
3. If you become a client
What: your contact details, project correspondence, invoices, and the payment details that appear on our bank statement when you pay by bank transfer (for example the account name and reference).
Why: to deliver the work, invoice you and keep business records.
Legal basis: performing our contract with you, and complying with legal obligations such as tax record-keeping.
4. If you buy a digital product
Purchases are made through Lemon Squeezy, which acts as merchant of record. Lemon Squeezy collects and processes your payment and billing details under its own privacy policy (https://www.lemonsqueezy.com/privacy). We do not see your full card details. Lemon Squeezy shares your name, email address and order details with us so we can support your purchase.
Legal basis: performing the contract for the product you bought, and our legitimate interest in providing customer support.
5. When you visit the website
Our hosting provider automatically records technical information such as your IP address, browser type and the pages requested. This is used to deliver the site and keep it secure.
Legal basis: our legitimate interest in running a secure, working website.
We don't use your data for marketing, we don't sell it, and we don't make automated decisions about you.
Who we share it with
We only share personal data with service providers who help us run the website and business:
We may also disclose data if required by law, for example to HMRC.
International transfers
Some of these providers process data outside the UK, mainly in the USA. Where they do, we rely on the safeguards UK data protection law allows, such as the UK–US "data bridge" for certified companies or approved contract clauses. [CONFIRM – check each provider's privacy policy or data processing terms]
How long we keep it
- Enquiries that don't lead to work: 12 months from our last contact, then deleted.
- Client records, including invoices and correspondence: 6 years after the end of the tax year they relate to, to meet tax and accounting rules.
- Digital product order records: kept by Lemon Squeezy under its own policy. Any copies we hold are kept for 6 years for tax and accounting purposes.
- Hosting logs: kept by Vercel for a short period under its own retention policy.
Cookies
This website does not currently set any cookies or use similar tracking technologies, and we do not use analytics. Our font and script providers (Google Fonts and Cloudflare cdnjs) receive your IP address when they deliver files to your browser, but they do not set cookies on this site.
If this changes we will update this policy and, where the law requires it, ask for your consent first.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict or object to how we use it
- receive your data in a portable format, where applicable
To make a request, email northhaus.io@outlook.com. We'll respond within one month. There's normally no charge.
Complaints
If you're unhappy with how we've handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it last changed.