Privacy Policy

Order data: your name, email, optional phone and company, the services you bought and any notes you sent with the brief.

Account data: if you create an account, your name, email and a hashed password. Passwords are stored as bcrypt hashes and cannot be read by us.

Technical data: standard server logs containing IP address, user agent and requested path, kept for 30 days for security and debugging.

This is a portfolio project — treat the policy below as sample copy rather than a reviewed legal document.

Card details never reach our servers. Payment is handled by our processor, and we receive only the last four digits and the result of the transaction.

We do not run advertising trackers or sell data to third parties. There is no data broker in this stack.

To deliver the services you ordered, to send order and delivery notifications, to answer support requests, and to meet accounting obligations on invoices.

Marketing email is sent only where you have opted in, and every message carries a one-click unsubscribe.

Order and invoice records are kept for seven years to satisfy accounting requirements. Brief content and deliverables are kept for two years, then archived or deleted.

Account data is deleted within 30 days of an account being closed, apart from records we are legally required to retain.

Our payment processor, our email delivery provider, our cloud hosting provider and our error-monitoring tool. Each processes data on our instructions under a data processing agreement.

We do not share your data with anyone else unless legally compelled to.

A session cookie keeps you signed in. Your cart is stored in your browser’s local storage rather than on our servers, and clearing site data empties it.

Analytics is aggregate and cookie-free — no cross-site identifiers are set.

You can request a copy of your data, ask for corrections, or ask for deletion. Email us and we will action it within 30 days.

If you are in the UK or EU you may also complain to your local data protection authority.

Data requests and privacy questions go to orders@northlinedigital.example.