Privacy Policy

1. Who We Are
North Search operates the boutique finance intelligence platform at northsearch.uk. We are the data controller for personal data processed through this service. Contact us at info@northsearch.uk.

2. Data We Collect
Account data - your email address and hashed password, collected when you register.
Billing data - your subscription status and Stripe customer ID. We do not store card details; these are held by Stripe.
Usage data - pages visited and features used, collected to improve the product.
Support data - any information you provide when contacting us.

3. How We Use Your Data
To create and manage your account; process subscription payments; send transactional emails; monitor and improve the platform; respond to support requests; and comply with legal obligations.

4. Legal Basis
Contract performance, legitimate interests, and legal obligation under UK GDPR.

5. Data Retention
We retain account data while your account is active. On deletion, personal data is removed within 30 days, except billing records retained for up to 7 years for tax purposes.

6. Third-Party Processors
We share personal data with the following processors, who act on our instructions:
Supabase - database hosting and authentication (EU region).
Stripe - payment processing (PCI DSS Level 1 certified).
PostHog - product analytics (EU region), only where you have accepted analytics cookies.
Resend - transactional email delivery.
Zoho - our business mailbox, used when you contact us by email.
Netlify - website hosting and content delivery.
Some of these providers may process data outside the UK. Where they do, transfers are covered by the UK International Data Transfer Addendum or an adequacy decision.
We do not sell your personal data to any third party.

7. Cookies
Essential cookies keep you signed in and are set by Supabase when you log in. These are strictly necessary to provide the service and are not optional.
Analytics cookies are set by PostHog to help us understand how the site is used. These are optional. We ask for your consent on your first visit and set nothing until you accept. If you reject them, PostHog runs without storing anything on your device.
You can change your choice at any time by clearing this site's data in your browser, which will make the consent banner appear again.

8. Your Rights
Under UK GDPR you have rights of access, rectification, erasure, restriction, portability, and objection. You can request deletion of your account directly from your account page, or email info@northsearch.uk to exercise any right. We will respond within one calendar month.

9. Complaints
You may lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

10. Contact
info@northsearch.uk