Privacy policy

Last updated: 2 October 2026

This policy explains how North Four Digital Limited collects and uses personal data when you visit this website, contact us, or apply to work with us, and the rights you have over that data. We are committed to handling personal data lawfully, fairly and transparently in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. Who we are

North Four Digital Limited, trading as North Four (“North Four”, “we”, “us”, “our”), is a company registered in England and Wales under company number 17189367, with its registered office at Camburgh House, 27 New Dover Road, Canterbury, Kent, United Kingdom, CT1 3DN. Our VAT number is 518975543.

For the purposes of data protection law, we are the controller of the personal data described in this policy. We are registered with the Information Commissioner’s Office (ICO) under registration number ZC215378.

If you have any questions about this policy or how we handle your personal data, please contact us at privacy@northfourdigital.com or by post at our registered office address above.

2. Scope of this policy

This policy covers personal data we collect through this website and our direct communications with website visitors, people who contact us, prospective clients and job applicants.

It does not cover personal data we process on behalf of our clients when delivering marketing services, such as customer or audience data held in our clients’ advertising, analytics or e-commerce accounts. In those cases we act as a processor on our client’s instructions, under a written agreement with that client, and the client’s own privacy notice applies.

3. The personal data we collect

Information you give us. When you email us, including through the buttons on this website, we receive your name, email address and any other details you choose to include, such as your job title, company name, telephone number and information about your business.

Job applications. If you contact us about working with us, we receive the information you send, which may include your CV, employment history, qualifications and contact details.

Technical information. When you visit this website, our hosting provider automatically processes limited technical data needed to deliver the website securely, such as your IP address, browser type, device information, the pages requested and the date and time of the request. We do not use this information to identify you or to build a profile of you.

We do not knowingly collect special category data, such as information about health, ethnicity, religion or political opinions. Please do not include it when you contact us.

4. How we use your personal data and our lawful bases

We only use personal data where the law allows us to. We rely on the following lawful bases under Article 6 of the UK GDPR:

• Responding to enquiries and discussing working together. Taking steps at your request before entering into a contract, or our legitimate interests in responding to people who contact us and developing our business.
• Providing our services and managing our client relationships. Performance of a contract with you or the business you represent, and our legitimate interests in running our business effectively.
• Considering job applications. Taking steps at your request before entering into a contract, and our legitimate interests in recruiting suitable people.
• Operating and securing this website. Our legitimate interests in delivering a secure, functioning website and preventing misuse.
• Keeping records and meeting our legal obligations, such as accounting, tax and regulatory requirements. Compliance with a legal obligation.
• Establishing, exercising or defending legal claims. Our legitimate interests in protecting our business.

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights and freedoms, and concluded that they are not. You can ask us for more information about this assessment.

We will not add you to a marketing mailing list without your consent, and you can ask us to stop contacting you at any time. We do not sell personal data, and we do not use personal data for automated decision-making, including profiling, that produces legal or similarly significant effects.

5. Cookies and similar technologies

This website does not use cookies or similar technologies, such as tracking pixels, to store or access information on your device. We do not use analytics or advertising tools on this website, and our fonts are hosted on our own website rather than loaded from a third party. As a result, we do not need to ask for your consent to cookies.

If this changes, we will update this policy and ask for your consent before setting any cookies that are not strictly necessary.

6. Who we share your personal data with

We only share personal data where necessary and with organisations that are required to keep it secure and use it only for the purposes we specify. These include:

• Our website hosting provider, Netlify, Inc., which hosts and delivers this website.
• Our email and productivity provider, Google (Google Workspace), which provides our email and document services.
• Our professional advisers, such as accountants and legal advisers, where needed for them to advise us.
• Regulators, law enforcement or other authorities, where we are required to by law.
• A buyer or successor, if our business, or part of it, is sold or reorganised, in which case your personal data will continue to be protected in line with this policy.

7. International transfers

Some of our service providers are based in, or process data in, countries outside the UK, including the United States. Where personal data is transferred outside the UK, we make sure it is protected by one of the safeguards recognised by UK data protection law, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework, where the recipient is certified), the International Data Transfer Agreement, or the International Data Transfer Addendum to the European Commission’s standard contractual clauses. You can contact us for more information about the safeguards we use.

8. How long we keep your personal data

• Enquiries that do not lead to working together: up to 24 months from our last contact.
• Client records and correspondence: for the duration of our relationship and then for up to six years after it ends, to meet our legal, accounting and tax obligations and to deal with any claims.
• Unsuccessful job applications: up to six months after we tell you the outcome, unless you agree to us keeping your details for longer.
• Technical website data: retained by our hosting provider for a limited period in line with its own retention practices.

After these periods, we securely delete or anonymise the data.

9. How we keep your personal data secure

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include encrypted connections to this website, access controls and two-factor authentication on our business accounts, and limiting access to people who need it. No method of transmission over the internet is completely secure, but we take reasonable steps to protect the information you send us.

10. Your rights

Under data protection law, you have the right to:

• be informed about how we use your personal data;
• access the personal data we hold about you and receive a copy of it;
• have inaccurate or incomplete personal data corrected;
• have your personal data erased in certain circumstances;
• restrict how we use your personal data in certain circumstances;
• object to us using your personal data where we rely on legitimate interests, and to object at any time to direct marketing;
• receive personal data you have given us in a portable format and have it transmitted to another organisation, where technically feasible; and
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email privacy@northfourdigital.com. There is usually no charge. We may need to ask you to confirm your identity before we respond. We will respond within one month, which may be extended by up to two further months for complex or multiple requests, in which case we will let you know.

11. Complaints

If you have a concern about how we handle your personal data, please contact us first at privacy@northfourdigital.com so we can try to resolve it. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk/make-a-complaint, by telephone on 0303 123 1113, or by post at Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

12. Children

This website and our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18.

13. Links to other websites

This website may contain links to other websites. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.

14. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated shown at the top. Where changes are significant, we will take reasonable steps to let you know.