Northfaced Privacy Policy

This privacy notice explains what personal information Northfaced collects, why we use it, who we share it with, and the rights you have under UK data protection law.

Contact Northfaced

This notice explains how personal information is used when you contact Northfaced or use this website.

For questions about your personal information, email amarjit@northfaced.com.

What information we collect, use, and why

We collect or use the following information for enquiries, project discussions, and customer support:

Names and contact details, including email address, phone number, and WhatsApp details.
Business name, website address, service area, and business context.
Messages sent through the contact form, direct email, WhatsApp, phone calls, or other direct contact routes.
Project requirements, preferred contact method, timing, budget context, and service fit information you choose to provide.
Correspondence, call notes, consultation notes, and records of agreed next steps.
Complaints, feedback, support requests, and related correspondence.

We collect or use the following information for website security, forms, analytics, and marketing measurement:

IP address, device, browser, page views, referring source, campaign link, and website journey information.
Form submission timing, origin checks, validation results, and spam-protection signals.
Cookie consent choices and marketing preferences.
Advertising and analytics information from tools such as Google Analytics, Google Ads, and Meta where consent controls allow it.

We collect or use the following information for legal, accounting, and business administration:

Client records, invoices, payment records, contract details, and service history.
Information needed to comply with tax, accounting, legal, regulatory, or dispute-related obligations.

Northfaced does not knowingly collect special category information, such as health data, racial or ethnic origin, religious beliefs, biometric data, or political opinions. Please do not send that type of information through this enquiry form. Contact us first if your project needs it.

Lawful bases and data protection rights

Under UK data protection law, we must have a lawful basis for collecting and using your personal information. Depending on the context, Northfaced may rely on:

Contract: where necessary to perform a contract with you personally, or take steps you request before entering one, including when you buy as a sole trader.
Legitimate interests: to run and improve the business, manage enquiries, prevent spam or misuse, keep business records and communicate with people acting for business customers, where those interests are not overridden by your rights. Optional analytics and advertising measurement use consent.
Consent: where you agree to optional cookies, analytics, marketing measurement, or a specific marketing contact that requires consent.
Legal obligation: where we need to keep or use information for tax, accounting, regulatory, legal, or compliance reasons.

Your data protection rights may include the right to ask for access to your personal information, to ask us to correct inaccurate information, to ask for deletion, to ask us to restrict processing, to object to processing, to ask for portability, and to withdraw consent where consent is the lawful basis. Some rights are subject to exemptions or do not apply in every situation.

You can object to direct marketing at any time by contacting Northfaced. Marketing emails, calls, WhatsApp messages, and similar direct contact are handled with regard to UK direct marketing and electronic communications rules.

The enquiry form uses Cloudflare Turnstile to help prevent spam. Cloudflare processes browser and device signals for this security check. See Cloudflare’s privacy policy.

Where we get personal information from

We usually get personal information directly from you when you submit a form, email us, call us, message us on WhatsApp, book or request a consultation, or become a client.

We may also receive information from your business website, public business listings, professional social media profiles, referrals, analytics tools, advertising platforms, hosting logs, or email delivery tools.

How long we keep information

We apply different retention periods depending on the type of information and our relationship with you:

Enquiries and general correspondence: usually kept for up to 2 years so we can follow up properly, handle repeat questions, and resolve issues.
Client and service records: kept for the duration of the client relationship and then only for as long as needed for support, handover, legal, accounting, or dispute purposes.
Financial and transactional records: usually kept for 6 years after the end of the relevant financial year.
Marketing and analytics data: kept according to the relevant platform settings and cookie consent controls, or until you withdraw consent where consent is required.
Security and form-protection logs: kept only for as long as reasonably needed to protect the website, investigate misuse, and maintain reliable service.

We do not sell your personal information. We share personal information only where reasonably needed to run the website, respond to you, provide services, measure marketing, manage records, or comply with the law.

Data processors and service providers may include:

Resend: sends contact form emails to Northfaced. Contact form email data may include email addresses, message content, and email metadata.
Cloudflare: provides the Turnstile spam-protection check for the enquiry form.
Vercel Inc.: hosts and runs the website and server-side contact form route.
Google: provides analytics, advertising measurement, and related marketing services where enabled and consent controls allow it.
Meta: provides Facebook and Instagram advertising measurement where enabled and consent controls allow it.
Email, phone, WhatsApp, and business administration providers: help us receive, store, and respond to direct messages, calls, client records, and service communications.
Professional advisers or authorities: where needed for accounting, legal, tax, regulatory, dispute, or compliance reasons.

If you contact Northfaced through WhatsApp, LinkedIn, or another third-party platform, that platform may also process your information under its own privacy terms.

Some providers process information outside the UK. The applicable transfer arrangements depend on the provider and service, and may include UK adequacy regulations or approved contractual safeguards. Contact us for details of the arrangements relevant to your information.

Resend states in its Data Processing Addendum that its primary processing operations take place in the United States and that it is certified under the EU-US Data Privacy Framework and the UK Extension. See Resend’s Data Processing Addendum.

Cookies and analytics

Google Tag Manager loads after Analytics or Advertising consent and receives those choices separately. With Analytics consent, the site records confirmed enquiries and clicks on contact or selected service/package links. These events contain the page path and, where relevant, the selected package, but not your name, email, phone number or message. Optional Google Ads and Meta conversion tags require Advertising consent and configured accounts. Enquiries are sent to Northfaced through Resend on Vercel independently of tracking consent.

The website uses essential cookies and may use optional analytics or marketing cookies where you have given consent. For more detail, read the Cookie Policy.

How to complain

If you have concerns about how Northfaced uses your personal information, contact us first using the contact page.

If you remain unhappy with how we have used your data after raising a complaint with us, you can also complain to the ICO at ico.org.uk/make-a-complaint.

Policy updates

Northfaced may update this policy from time to time to reflect website changes, service changes, supplier changes, or legal requirements. The version published on this website should be treated as the latest version.