Privacy Policy
Introduction
This Privacy Policy explains how Twelve North Co (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit twelvenorthco.com, contact us, or use our services.
We are committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent way in line with UK GDPR and the Data Protection Act 2018.
Who we are
For the purposes of data protection law, we are the data controller of your personal data collected through this website.
Data we collect
We may collect and process the following categories of personal data:
- Identity and contact data: name, email address, phone number, company name, job title.
- Marketing and communication data: your preferences in receiving marketing from us and your communication preferences.
- Technical data: IP address, browser type and version, device identifiers, time zone, operating system, and other technology on the devices you use to access our site.
- Usage data: information about how you use our website, pages viewed, links clicked, and time spent.
If you contact us or request a proposal, we may also collect any additional information you choose to provide in free‑text fields.
How we collect your data
We collect personal data in the following ways:
- Directly from you when you:
- Fill in contact forms or request a consultation.
- Subscribe to our newsletter.
- Communicate with us by email or phone.
- Automatically when you use our website via cookies and similar technologies (see “Cookies and tracking technologies”).
How we use your data and legal bases
We use your personal data for the purposes below, relying on the associated legal bases:
- To respond to enquiries and provide our services:
- Purpose: handle contact requests, proposals, and client communications.
- Legal basis: performance of a contract or steps taken at your request prior to entering a contract.
- To manage our relationship with you:
- Purpose: send service updates, respond to support queries, notify you of changes to this policy or our terms.
- Legal basis: performance of a contract; legal obligation.
- To send marketing communications:
- Purpose: send you updates, insights, and offers related to our services.
- Legal basis: consent (where required) or legitimate interests in promoting our services, provided your interests and rights do not override those interests.
- To improve our website and services:
- Purpose: monitor performance, analyse how visitors use our site, and develop new features.
- Legal basis: legitimate interests in maintaining and improving our website, services, and user experience.
You can withdraw your consent to marketing at any time by using the unsubscribe link in our emails or contacting us directly.
Cookies and tracking technologies
We use cookies and similar tracking technologies to:
- Operate the website and enable core functionality.
- Understand how visitors use the site and improve performance.
- Support marketing, analytics, and advertising (where applicable).
Where required by law, we will ask for your consent before setting non‑essential cookies.
You can manage cookie preferences in your browser settings or via any cookie banner provided on our site.
Sharing your data
We may share your personal data with:
- Service providers who help us operate our website, analytics, email, and CRM systems (e.g., hosting providers, email marketing platforms, analytics tools).
- Professional advisers such as lawyers, accountants, or insurers where necessary.
- Authorities, regulators, or law enforcement where required by law or to protect our legal rights.
We do not sell your personal data to third parties.
If personal data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.
Data retention
We keep your personal data only for as long as necessary for the purposes described in this Policy, including satisfying any legal, accounting, or reporting requirements.
- Enquiry data: retained for [e.g., 12–24 months] after our last interaction.
- Client data: retained for the duration of the contract and for [e.g., 6–7 years] thereafter to comply with legal and tax obligations.
When data is no longer needed, it will be securely deleted or anonymised.
Your rights
Under UK GDPR, you have the following rights in relation to your personal data (subject to certain conditions):
- Right to access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your data in certain circumstances.
- Right to restriction: request we limit how we process your data.
- Right to data portability: request your data in a structured, commonly used format.
- Right to object: object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at policy[at]twelvenorthco.com.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage.
However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
Third‑party websites
Our website may contain links to third‑party websites, plug‑ins, or applications.
We are not responsible for the privacy practices or content of those third‑party sites and encourage you to read their privacy policies.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.
The updated version will be indicated by a revised “Last updated” date and will be effective as soon as it is accessible on this page.
Last updated: [15-01-2026]
If you have any questions about this Privacy Policy or how we handle your personal data, please contact:
Twelve North Co
Email: policy[at]twelvenorthco.com