Privacy Policy for NorthRose Studio
- Visit our website
- Purchase products or services
- Submit enquiries or forms
- Subscribe to newsletters or lead magnets
- Book calls
- Interact with us via social media
- Engage with tracking technologies
Please read this Privacy Policy carefully. If you do not agree with this policy, you should discontinue use of this website.
We may update this Privacy Policy from time to time. Any changes will be reflected by updating the “Last Updated” date above. We encourage you to review this policy periodically.
01. Who We Are
NorthRose Studio is the Data Controller responsible for your personal data for the purposes of UK data protection law.
NorthRose Studio is registered with the Information Commissioner’s Office (ICO) in the United Kingdom.
Contact details:
NorthRose Studio
The Guild, 5 Abbey St, Carlisle CA3 8TX
hello@northrose.co
02. Information That We Collect
Personal and Contact Data
- First and last name
- Email address
- Telephone number
- Billing address
- Business details (where applicable)
Collected through website forms, Dubsado enquiries, Calendly bookings, checkout pages, newsletter sign-ups, and direct correspondence.
Transaction and Payment Data
- Products or services purchased
- Subscription and retainer status
- Payment confirmations
- Transaction history
Payments are processed securely via Stripe and/or PayPal through Dubsado, ThriveCart and WooCommerce. We do not store full payment card details.
Technical and Usage Data
- IP address
- Browser type
- Device information
- Pages visited
- Time spent on site
- Referral sources
Collected via:
- Google Analytics
- Google Tag Manager
- Google Search Console
- Pinterest tracking technologies
- ProveSource
- Showit and website hosting logs
- WordPress and WooCommerce Plugins
Marketing and Communication Data
- Email subscription status
- Lead magnet downloads
- Email engagement data (opens and clicks)
Managed via Flodesk.
Social Proof Notifications (ProveSource)
We use ProveSource to display limited real-time notifications of recent purchases or enquiries.
These notifications may include:
- First name only
- General location (city or country)
- Product or service purchased
No full names, addresses, payment information, or sensitive data are displayed.
This processing is based on our legitimate interests in promoting transparency and trust in our services. You may request exclusion from these notifications by contacting hello@northrose.co.
03. Lawful Bases for Processing
Contractual Necessity
To fulfil purchases, subscriptions, bookings, and service agreements.
Legitimate Interests
To:
- Operate and improve our website
- Analyse performance and trends
- Prevent fraud or misuse
- Manage enquiries and client relationships
- Maintain business records
- Display limited social proof notifications
We conduct balancing assessments where required.
Consent
Where required for:
- Email marketing communications
- Non-essential cookies
- Advertising and marketing tracking technologies
You may withdraw consent at any time.
Legal Obligation
To comply with tax, accounting, and regulatory requirements.
04. How We Use Your Information
- Deliver products and services
- Process payments and recurring subscriptions
- Manage retainers and autopay arrangements
- Respond to enquiries
- Send newsletters and marketing communications
- Improve website functionality and performance
- Analyse usage trends
- Prevent fraud
- Maintain internal business records
- Comply with legal obligations
We do not sell personal data.
5. Third-Party Service Providers
- Showit (website hosting)
- WordPress and WooCommerce
- ThriveCart (checkout platform)
- Stripe and PayPal (payment processors)
- Dubsado (CRM, forms, proposals, contracts)
- Calendly (call scheduling)
- Flodesk (email marketing)
- Google Analytics, Tag Manager, Search Console
- Google Workspace (business email infrastructure)
- ProveSource (social proof notifications)
- Pinterest tracking technologies
These providers process data on our behalf under contractual safeguards and applicable data protection agreements.
07. International Data Transfers
Where personal data is transferred internationally, we rely on:
- Standard Contractual Clauses (SCCs)
- UK International Data Transfer Agreements (IDTAs) where applicable
- Adequacy regulations where recognised
- Contractual data protection safeguards
We take reasonable steps to ensure appropriate protection of personal data during international transfers.
08. Data Retention
- Fulfil contractual obligations
- Comply with legal requirements
- Maintain financial records
- Resolve disputes
Financial records may be retained for up to six years to comply with UK tax law.
Marketing data is retained until you withdraw consent.
Usage analytics data may be retained for internal analysis and security purposes.
09. Security
We implement appropriate technical and organisational measures to protect personal data.
However, no internet transmission is entirely secure. You provide information at your own risk.
We will notify affected individuals and regulators of data breaches where legally required.
10. Children
This website is not intended for individuals under the age of 16.
We do not knowingly collect personal data from children under 16. If you believe we have done so, please contact us.
11. Special Category Data
We do not intentionally collect or process special category data such as health information, racial or ethnic origin, political opinions, religious beliefs, or criminal history.
Please do not submit such information through our website.
12. Your Privacy Rights
- Access your personal data
- Request correction
- Request deletion
- Restrict processing
- Object to processing
- Withdraw consent
- Request data portability
To exercise these rights, contact hello@northrose.co.
You have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk.
13. External Links
Our website may contain links to third-party platforms including Instagram, Threads, and Pinterest. We are not responsible for the privacy practices of those platforms.
We encourage you to review their privacy policies before providing personal data.
Terms of Use for NorthRose Studio
01. General Information
This website is owned and operated by NorthRose Studio, located in Cumbria, England.
By accessing or using this website, you agree to be legally bound by these Terms and Conditions and our Privacy Policy. If you do not agree to these Terms, you must not use this website.
You must be at least sixteen years of age to use this website.
We reserve the right to amend these Terms and Conditions at any time. Updated terms will take effect immediately upon publication. Continued use of the website constitutes acceptance of any revised Terms.
02. Intellectual Property Rights
This includes, but is not limited to:
• All written content, copy, and text
• Photography, imagery, and visual assets
• Branding elements and visual identity materials
• Graphics, digital downloads, templates, products, and resources
• Website design, layout, structure, composition, arrangement, sequencing, and presentation
• Creative direction, styling, aesthetic concepts, and proprietary frameworks
• Custom code elements and technical implementations
All rights are expressly reserved.
No licence, right, or interest in any intellectual property is granted to you by implication, estoppel, or otherwise, except for the limited, revocable licence expressly set out in Section 04 below.
You may not, without prior written consent from NorthRose Studio:
• Copy, reproduce, duplicate, distribute, or republish any content
• Modify, adapt, translate, or create derivative works
• Replicate or materially imitate the website’s layout, structure, visual presentation, creative direction, or overall aesthetic
• Use screenshots, downloads, archived copies, or saved content for commercial purposes
• Use any content to create competing products, services, templates, or materials
• Remove, alter, or obscure copyright notices or proprietary markings
• Claim ownership or authorship of any part of this website
• Use NorthRose Studio’s name, logo, branding, or trade identifiers without prior written permission
Unauthorised use constitutes infringement and may result in legal action, including but not limited to claims for damages, account of profits, injunctive relief, statutory remedies where applicable, and recovery of legal costs.
NorthRose Studio reserves the right to pursue enforcement of its intellectual property rights in any jurisdiction worldwide where infringement occurs.
03. Prohibited Artificial Intelligence and Automated Use
This prohibition includes, but is not limited to:
- Web scraping tools
- Bots or automated scripts
- Data mining systems
- Machine learning systems
- Artificial intelligence platforms
- Generative AI tools
- Language models
- Automated website cloning or design tools
You may not input, upload, or otherwise provide any content from this website into artificial intelligence systems or automated tools for the purpose of:
- Training models
- Generating derivative works
- Replicating website copy
- Recreating branding, layout, structure, or creative direction
- Producing competing products or services
- Reverse engineering or materially imitating the website
Any attempt to clone, replicate, materially imitate, reverse engineer, or reconstruct the website’s design, structure, copy, or overall presentation through automated or AI-driven means constitutes a material breach of these Terms and may result in immediate legal action.
05. Purchases and Terms of Sale Agreement
By completing a purchase, booking, or payment, you agree to be bound by the applicable Terms of Sale or any separate written agreement governing that transaction.
In the event of any conflict between these Terms of Use and a separate written agreement or Terms of Sale, the specific agreement relating to your purchase shall prevail.
06. Third-party Services and Integrations
- Showit for website hosting
- Google Analytics for analytics and performance tracking
- Hotjar for behavioural analytics
- Dubsado for customer relationship management
- Flodesk for email marketing
- ThriveCart and WooCommerce for purchases and payment processing
We are not responsible for the availability, performance, security, or data practices of third-party services. Your use of such services is subject to their individual terms and policies.
07. Security
You are responsible for maintaining the confidentiality of any login credentials associated with purchases or access to digital products.
NorthRose Studio does not store payment card information. Payment data is processed securely through third-party platforms such as ThriveCart and WooCommerce gateways.
We are not liable for security breaches arising from third-party platforms beyond our reasonable control.
08. User Submissions and Communications
Any content you voluntarily submit to this website, including blog comments, testimonials, reviews, or other publicly displayed materials, grants NorthRose Studio a non-exclusive, royalty-free, worldwide licence to use, reproduce, publish, and display such content for business and marketing purposes.
Private communications submitted through contact forms, email, or direct correspondence will be handled in accordance with our Privacy Policy.
You agree not to submit content that is unlawful, defamatory, abusive, fraudulent, infringing, obscene, or otherwise harmful.
We reserve the right to remove or refuse any content submitted to this website at our discretion.
09. Disclaimers
This website and all related materials are provided for informational and educational purposes only.
We make no warranties, express or implied, regarding accuracy, completeness, reliability, suitability, or availability of content.
To the fullest extent permitted by law, we disclaim all warranties including merchantability, fitness for a particular purpose, and non-infringement.
We do not guarantee specific results from the use of our services, templates, products, or educational materials.
10. Limitation of liability
To the fullest extent permitted by law, NorthRose Studio shall not be liable for any direct, indirect, incidental, consequential, special, or punitive damages arising from your use of this website or reliance on its content.
Nothing in these Terms excludes liability for death or personal injury caused by negligence, fraud, or any liability that cannot be excluded under English law.
11. Indemnification
You agree to indemnify and hold harmless NorthRose Studio from any claims, liabilities, damages, losses, costs, or expenses arising from your misuse of the website or breach of these Terms.
12. Termination
We reserve the right to restrict, suspend, or terminate access to this website at our discretion if these Terms are breached.
13. Entire Agreement
These Terms and Conditions, together with our Privacy Policy, constitute the entire agreement between you and NorthRose Studio regarding use of this website.
14 Governing Law and International Users
This website is operated from England. These Terms are governed by the laws of England and Wales.
By using this website, you agree that any dispute arising from these Terms or your use of this website shall be subject to the exclusive jurisdiction of the courts of England and Wales.
If you access this website from outside the United Kingdom, you are responsible for compliance with applicable local laws.
15. Severability
If any provision of these Terms is found to be unlawful or unenforceable, the remaining provisions shall remain in full force and effect.
16. Contact
NorthRose Studio
The Guild, 5 Abbey St, Carlisle CA3 8TX
hello@northrose.co
