Privacy Policy

Who we are

North & Form is the data controller for personal information collected through this website and during enquiries or project work. Questions about this notice or your information can be sent to hello@northandform.co.uk.

Information we collect

When you contact us, request an estimate, accept a quotation or use a client account, we may collect your name, email address, business details, project requirements, messages, quotation and invoice records, and information needed to deliver and support the work.

We also receive limited technical and aggregate usage information needed to operate, secure and understand the website. If card payments are enabled, payment details are handled by the payment provider; North & Form does not receive your full card number.

How and why we use it

We use personal information to:

• respond to enquiries and take steps towards a contract;
• prepare estimates, quotations, invoices and project communications;
• deliver, administer and support agreed work;
• keep the website, accounts and services secure;
• meet legal, tax and record-keeping obligations; and
• improve our website and service using proportionate aggregate insights.

Our lawful bases are taking steps at your request before a contract, performing a contract, complying with legal obligations, and our legitimate interests in operating and improving the studio. Where consent is required, you can withdraw it at any time.

Service providers and transfers

We use trusted providers for hosting, databases, authentication, email, analytics and, where enabled, payments. These may include Vercel, Supabase, Resend and Stripe. They process information only to provide their services and under their own security and privacy commitments.

Some providers may process information outside the United Kingdom. Where that happens, we rely on recognised safeguards such as adequacy regulations or approved contractual protections.

Retention and security

We keep information only for as long as it is reasonably needed for the purpose collected, ongoing project support, dispute resolution, and legal or accounting requirements. We use appropriate access controls and reputable service providers, but no online system can be guaranteed completely secure.

Your rights

Depending on the circumstances, you may ask to access, correct, erase or restrict your information, object to processing, or receive a portable copy. Contact us to make a request. You can also complain to the Information Commissioner's Office.

Changes to this notice

We may update this policy when our services or legal obligations change. The latest version will always appear on this page with its revision date.