Privacy & cookies

Who we are

North by Northwest Consultants Ltd is the controller of personal information collected through this website.

Email: paul@northbynorthwest.co

Information you give us

If you contact us through the website, by email or by another means, we may receive information including your:

• name;
• email address;
• company or organisation;
• telephone number, if you choose to provide one;
• enquiry or message; and
• any other information you choose to include in your correspondence.

We use this information to respond to your enquiry, discuss our services with you and, where appropriate, take steps towards establishing a client relationship.

Our lawful basis will normally be taking steps at your request before entering into a contract where that basis applies, or our legitimate interests in responding to and managing business enquiries.

We do not use information submitted through the enquiry form to add you to a marketing mailing list.

How long we keep enquiries

If an enquiry does not result in a client relationship, we normally retain the correspondence and associated information for up to 24 months after our last substantive contact with you.

If you become a client, relevant information may instead form part of our client and business records and may be retained for longer where necessary for the client relationship or to meet legal, accounting or other legitimate business requirements.

We may retain information for longer where reasonably necessary to establish, exercise or defend legal claims.

Website hosting and security

This website is hosted using Cloudflare.

When you visit the site, Cloudflare may process technical information necessary to deliver and protect the website, such as your IP address, request information, browser or device information and security-related data.

We use this processing as necessary to operate, secure and maintain the website and on the basis of our legitimate interests in providing a secure and reliable website.

Cloudflare is a global service provider and information may be processed outside the United Kingdom. Where required, appropriate safeguards are used for international transfers of personal information.

Contact form and email delivery

When you submit the contact form, the submission includes the information you enter into the form, the submission time and the page URL from which the enquiry was submitted.

This information is processed by our website and sent to us using Resend, an email delivery service provided by Plus Five Five, Inc.

Resend processes the complete submission on our behalf in order to deliver the enquiry to us.

Resend’s primary processing operations are in the United States. International transfers are protected using applicable safeguards, which may include the UK Extension to the EU-US Data Privacy Framework and contractual transfer safeguards.

You can contact us if you would like more information about the safeguards used for international transfers.

Analytics and cookies

We would like to use Google Analytics to understand, in aggregate, how people find and use this website.

Analytics is optional.

For visitors in the United Kingdom, European Economic Area and Switzerland, optional analytics is off unless the visitor chooses to accept it. We use the same approach when a visitor’s location is unavailable.

For visitors in the United States, optional analytics may be on by default. It remains off where the browser sends a Global Privacy Control signal or the visitor has previously switched analytics off.

If analytics is on and Google Analytics has been configured, it may collect information such as:

• pages viewed;
• approximate location derived from network information;
• browser and device information;
• referral information;
• interactions with the website; and
• information used to distinguish visits or users.

Google Tag Manager loads on every JavaScript-enabled visit after the website has established its regional consent default. Tag Manager is not itself the analytics consent gate. Google Analytics is configured inside Tag Manager, not directly in the website, and its tags must respect the analytics choice.

We use analytics information to understand website usage and improve the website and our services. Where consent is required for storing or accessing information on your device, we rely on your consent.

You can reject analytics without affecting your ability to use the website.

You can also change or withdraw your choice at any time using the Cookie settings link on the website.

Essential storage

The website uses limited first-party browser storage to remember your analytics choice. The stored preference records only whether analytics is granted or denied and the consent format version. It does not store your location or IP address.

These technologies are not used for advertising.

Where storage or access is strictly necessary to provide a service you have requested or to remember and implement your privacy choice, it may be used without consent where permitted by applicable law.

Google

Google receives technical request information needed to provide Google Tag Manager on JavaScript-enabled visits. If analytics is on and Google Analytics has been configured, Google may also process analytics information in connection with Google Analytics.

Google operates globally and information may therefore be processed outside the United Kingdom. Google is responsible for providing the applicable safeguards for international transfers in connection with its services.

Further information about Google’s handling of information is available in Google’s privacy information (opens in a new tab).

Who we share information with

We do not sell your personal information.

We may share personal information with service providers where this is necessary to operate the website and our business. These currently include:

• Cloudflare, for website hosting, delivery and security;
• Resend, for delivery of website enquiries; and
• Google, to provide Google Tag Manager and, where analytics is on and Google Analytics has been configured, Google Analytics.

We may also disclose information where required by law, regulation or a court or regulatory authority, or where reasonably necessary to establish, exercise or defend legal claims.

Your rights

Depending on the circumstances, UK data protection law may give you rights over your personal information, including the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to delete personal information;
• ask us to restrict how we use personal information;
• object to processing based on legitimate interests; and
• receive certain information in a portable form where the right to data portability applies.

Where we rely on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

You have the right to object to processing of your personal information where we rely on legitimate interests.

These rights are subject to conditions and exemptions under data protection law.

To exercise your rights, email paul@northbynorthwest.co.

Complaints

If you have concerns about how we use your personal information, please contact us first and we will try to resolve them.

You also have the right to complain to the Information Commissioner’s Office (ICO) (opens in a new tab), the UK’s data protection regulator.

Changes to this notice

We may update this privacy notice if our website, services or use of personal information changes.

The latest version will always be published on this page, with the date of the most recent update shown at the top.