Privacy Policy

Privacy Policy.

Effective Date: 3 June 2025
Website: www.northcodegroup.co.uk
Trading Name: Northcode
Legal Entity: Soteria Cyber Security Ltd (Company No. 16278712)

1. Introduction

This Privacy Policy explains how Northcode (a trading name of Soteria Cyber Security Ltd) collects, uses, and protects your personal data when you use our website.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Northcode is a web design and digital services provider operated by Soteria Cyber Security Ltd, registered in England and Wales under company number 16278712.

Contact Email: hello@northcodegroup.co.uk

We act as the “data controller” for any personal data collected via this website.

3. What Personal Data We Collect

We only collect personal data necessary to operate our services. This may include:

Your name and email address (when you contact us)
IP address and browser/device information (via cookies or analytics)
Any additional information you provide in a contact form

We do not collect special category data or information on health, race, religion, etc.

4. How We Collect Data

We collect your data in the following ways:

When you fill in a contact form
Through cookies and tracking tools
Through embedded services such as Google Maps

5. Lawful Basis for Processing

We process your data under one or more of the following lawful bases:

Consent – where you have given clear permission (e.g. to be contacted)
Legitimate interests – to operate our business and respond to enquiries
Legal obligation – if required to retain or disclose data for legal reasons

6. How We Use Your Data

We use your personal data to:

Respond to contact form enquiries
Maintain the security and functionality of the website
Improve the website’s performance and user experience

We do not use your data for unsolicited marketing.

7. Data Sharing

We do not sell your data.
We may share data only with trusted third-party services, such as:

Website hosting providers
Google Maps (embedded map feature)
Email service providers

These providers are required to keep your data secure and only use it in line with our instructions.

8. Data Retention

We only keep your personal data for as long as necessary:

Contact form submissions: up to 12 months
Analytics and cookies: in line with standard expiry periods (see Cookie Policy)

If you request deletion, we will act promptly.

9. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to processing
Lodge a complaint with the Information Commissioner’s Office (ICO)

10. Cookies

We may use cookies to improve your browsing experience and monitor traffic. You will be informed on your first visit and have the option to manage your preferences.

For full details, please see our [Cookie Policy].

11. Security

We take appropriate technical and organisational measures to protect your personal data, including encryption, secure hosting, and internal access controls.

12. External Links

This website may link to external sites (e.g. portfolio platforms, social media). We are not responsible for their privacy practices and encourage you to review their policies.

13. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated effective date.

Contact:
If you have any questions about this policy or how we handle data, email us at hello@northcodegroup.co.uk.