Privacy policy

This policy applies when you visit this website, contact North Current Ltd, submit an enquiry, or share information so we can assess whether a diagnostic review may help.

North Current Ltd is the controller for personal information handled through this website and through direct business enquiries.

We may collect your name, organisation, role, email address, phone number, website, project context, system details, operational symptoms and any files or notes you choose to share.

If you use the diagnostic intake form, we also receive the details submitted in the form, the submission time and basic technical information such as IP address. The form includes a hidden anti-spam field that is used only to detect automated submissions.

We only ask for information that helps us understand the issue, respond properly and protect the website.

We use enquiry information to respond to you, assess fit, understand the operational or technical context, scope diagnostic work, manage professional correspondence and keep a record of relevant business discussions.

We may also use limited technical information to protect the website, prevent spam and diagnose delivery or security issues.

We do not sell personal information.

Operational details, supplier context, technical evidence and site information shared with North Current Ltd are treated as confidential.

Access is limited to people and service providers who need the information to respond to an enquiry, provide services, maintain systems or meet legal requirements. Formal project terms may include more specific confidentiality wording where required.

We process personal information only where we have a lawful basis under UK data protection law.

For most website enquiries and diagnostic review discussions, we rely on legitimate interests. Our legitimate interests are to respond to business enquiries, understand the operational or technical context you choose to share, assess whether our services are suitable, scope potential work, manage professional correspondence, protect our website and systems, and keep proportionate business records.

Where processing is necessary to provide services under a contract, or to take steps at your request before entering into a contract with you, we may rely on contract.

Where we need to keep information to meet tax, accounting, regulatory or other legal requirements, we rely on legal obligation.

Where you choose to receive optional updates or marketing communications, we will rely on consent or legitimate interests where permitted by law. You can opt out of marketing at any time.

Where we rely on legitimate interests, we consider the impact on individuals and only use information in ways that are reasonably expected, relevant and proportionate. You have the right to object to processing based on legitimate interests.

We keep personal information only for as long as needed for the purpose it was collected.

Enquiry and diagnostic review discussion records that do not lead to paid work are normally kept for up to 24 months, unless a longer period is needed to manage an ongoing discussion, resolve a dispute or protect legitimate business interests.

Client, supplier, accounting and contract records are normally kept for up to 7 years where needed for tax, accounting, legal or business record-keeping purposes.

Information that is no longer needed is deleted, anonymised or securely archived.

We use trusted service providers to host the website, handle form submissions, deliver email, protect systems and store business records.

The diagnostic intake form sends submitted information to North Current Ltd by email. We do not use the website to sell personal information or share enquiry details with unrelated third parties.

Service providers may process information only to provide their services to us and are expected to apply appropriate security and confidentiality controls.

If you have a question about how your information is handled, contact us using the details below.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection. The ICO can be contacted at ico.org.uk.

You can ask to access, correct or delete personal information where the law gives you that right.

You can also ask us to restrict processing, object to processing based on legitimate interests, withdraw consent where processing is based on consent, and request a copy of information you have provided in a portable format where that right applies.

Contact us using the details below. We may need to confirm your identity before responding to a rights request.