Privacy policy

Who we are

NORTHERLY.DEV LTD is the data controller for the personal data described in this policy. We are registered in England and Wales under company number 16918280, and our registered office is on public record at Companies House.

If you have a question about this policy, or want to exercise any of the rights below, email team@northerly.dev. We will respond within one month.

Email team@northerly.dev →

Information we collect

We collect very little. Specifically:

• Information you give us directly — your name, email address, company and whatever else you choose to include when you contact us about working together.
• Technical information recorded by our hosting provider when you request a page, including your IP address, the time of the request, the page requested, and your browser's user-agent string.
• Information provided in the course of an engagement, where a client shares it with us so we can do the work. That is covered by the agreement and any data processing terms we sign with that client.

How we use it, and our lawful basis

We use the information you send us to reply to you, to scope and quote for work, and to keep a record of our dealings with you. Our lawful basis is legitimate interests — responding to someone who has approached us about our services — or, once we are working together, performance of a contract.

We use server logs to keep the site available and secure, and to diagnose faults. Our lawful basis is legitimate interests in running a secure and functioning site.

We do not use your personal data to build a profile of you, and we do not make automated decisions about you.

Who we share it with

We do not sell your personal data, and we do not share it for anyone else's marketing.

We use a small number of suppliers who process data on our behalf — principally our hosting provider and our email provider. They act on our instructions under a contract, and only to provide the service to us. Where a supplier processes data outside the UK, we rely on the safeguards permitted under UK data protection law.

We will disclose data if we are legally required to, or to establish or defend legal claims.

How long we keep it

Enquiries that don't turn into work are kept for up to two years, so we have context if you come back to us. Records relating to an engagement are kept for as long as the contract requires and then for six years, which is the period we may need them for tax and legal purposes. Server logs are kept for a short period by our host and then discarded.

Protecting your information

The site is served over TLS, so traffic between your browser and our host is encrypted. Access to the systems holding enquiry data is limited to the people who need it, and protected by multi-factor authentication.

No system is perfectly secure, but if a breach occurs that is likely to present a risk to you, we will tell you and the Information Commissioner's Office as the law requires.

Cookies

This site sets no cookies. There is no analytics package, no advertising pixel, no embedded video or social widget, and no third-party font service — the typefaces are served from our own domain.

Because we set no cookies and do nothing that requires consent, you will not see a cookie banner here.

Server logs

Our hosting provider records standard request logs, which include IP addresses. We use them to keep the site running and to investigate abuse or faults. We do not attempt to identify individual visitors from them, and we do not combine them with any other data.

Links and advertising

This site carries no advertising and takes no advertising money. We do not share personal data with the sites we link to; following a link takes you somewhere with its own privacy policy, which you should read.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• ask us to delete data, where we have no continuing reason to keep it;
• ask us to restrict how we use it, or object to our using it on the basis of legitimate interests;
• ask for data you gave us to be provided in a portable form;
• withdraw consent at any time, where we relied on consent.

Complaints

If you think we've handled your data badly, please tell us first at team@northerly.dev — we would rather fix it. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator.

ico.org.uk ↗

Changes to this policy

We may update this policy. The version on this page is the current one, and the date it last changed is shown at the top. If we make a change that materially affects how we use your data, we'll say so here.