Privacy Policy

Throughout this policy, references to "Northline Digital", "we", "us", or "our" refer to Sam Sheldrake, trading as Northline Digital.

We operate in the United Kingdom under English law. Our registered details are as follows:

• Legal entity name: Sam Sheldrake
• Trading name: Northline Digital
• Part of: SH Technologies Group, also a trading name of Sam Sheldrake (sh-technologies.co.uk)
• Business / Registered address: Dereham, Norfolk, NR20 4AG
• Company registration / entity status: Sole trader based in the United Kingdom
• Privacy contact email: support@northline-digital.co.uk

If you have any questions about this policy, or if you would like to exercise any of your statutory rights, please contact our privacy lead at support@northline-digital.co.uk.

Depending on how you interact with our website, we collect and process the following categories of personal data:

Interactive Calculators on our Website: All calculations run in your web browser. If you are not logged in, nothing you enter is sent to us: your figures are kept only in your browser's storage on that device. If you are logged in, the work you save in a calculator (described as "Saved Calculator Work" above) is also stored in your account, so you can use it on your other devices. Only you can read it: our database only lets each account see its own saved work. A copy is also kept in your browser's storage, which is not encrypted, so on a shared computer choose to remove your data when you log out. You can delete saved jobs at any time from within the calculator, and they are then deleted from your account as well.

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following lawful bases:

• Performance of a Contract (Article 6(1)(b) UK GDPR): Necessary to fulfill your order, run your customer account, save your calculator work to your account when you ask it to, deliver your digital download files, verify purchase access, provide customer support relating to a product you bought, and handle refund requests.
• Legal Obligation (Article 6(1)(c) UK GDPR): Necessary to comply with UK statutory obligations, specifically keeping complete corporate, VAT, and commercial accounting records for HM Revenue & Customs (HMRC).
• Legitimate Interests (Article 6(1)(f) UK GDPR): Necessary for our legitimate business interests in maintaining website security, preventing fraudulent transactions, troubleshooting server errors, showing you which tools you have opened and when, and notifying existing customers about critical updates or bug fixes to spreadsheets they already own. We balance these interests against your fundamental privacy rights.
• Consent (Article 6(1)(a) UK GDPR): Where you voluntarily opt in to receive release announcement emails about upcoming tools, including by switching on "Notify me" for a product in your account. You can withdraw this consent at any moment by clicking the unsubscribe link or emailing support@northline-digital.co.uk.

Our specific data retention schedules are:

• Sales invoices & transaction records: Retained for 6 full statutory years following the end of the relevant tax year, as mandated by HMRC and UK company law.
• Customer support communications: Kept for up to 12 months following the resolution of your query to ensure continuity of support.
• Customer account data: Kept while your account is open. You can delete your account at any time from the Settings page in your account, or ask us to do it for you. We then delete your account details, library activity, "Notify me" requests and any messages or bug reports you sent while logged in, apart from purchase records we must keep (see above). Those records are kept with no link to your account.
• Saved calculator work: Kept while your account is open, until you delete it. Deleting a saved job, or all of them, in the calculator removes them from your account straight away. You can also delete all of your calculator data (saved jobs, business details and settings) from the calculator's Settings page without deleting your account. If you delete your account, your saved calculator work is deleted with it.
• "Notify me" requests: Kept until the product launches and you have been told, or until you switch the request off or ask us to remove it.
• Product announcement mailing list: Retained until you unsubscribe or request removal, after which your email address is promptly purged.
• Standard server access logs: Retained for security purposes for up to 90 days, after which they are automatically rotated and overwritten.

We use carefully selected third-party service providers (data processors) who are contractually bound to handle your data securely and strictly in accordance with UK data protection laws:

• Accounts, sign-in and database: Provided by Supabase. They store your account details, library, purchase records, "Notify me" requests and saved calculator work on our behalf, and send account emails such as address confirmation and password reset (Resend, from our own northline-digital.co.uk domain).
• Payment Processing: Handled by Stripe. They process your payment details under strict PCI-DSS Level 1 compliance, and act as an independent controller for card and fraud-prevention data under Stripe's own privacy policy.
• Cloud Hosting & Infrastructure: Our static site assets and web tools are hosted with Vercel.
• Bot protection: Cloudflare Turnstile checks that log-in, sign-up and password-reset requests come from a real person. To do this it processes technical details such as your IP address and browser information, only for security.
• Email Delivery & Customer Support: Transactional order confirmations and support emails are delivered via Web3Forms.
• Professional Advisers & Authorities: In exceptional circumstances, we may share records with our qualified accountants, legal advisers, or UK statutory bodies (such as HMRC or law enforcement agencies) where required by a binding legal order.

A cookie is a small text file stored on your device when you load a webpage. Northline Digital maintains an intentionally quiet, minimal website:

• No Advertising Cookies: We do not deploy Meta Pixel, Google Ads Remarketing, LinkedIn Insight Tags, or any third-party ad network scripts.
• Essential Technical Storage: We may use temporary browser storage (e.g. localStorage) strictly to preserve your preferences on our site (such as your chosen visual theme tone or remembering that you joined our notification list). This data stays on your device.
• Login session: If you log in, our account provider (Supabase) stores a sign-in token in your browser so that you stay logged in. It is strictly necessary for the account to work and is sent to our account provider when the site checks who you are. It is removed when you log out.
• Third-Party Checkout Cookies: When you navigate to complete a purchase, our payment processor (Stripe) may use strictly necessary fraud prevention and session cookies to verify legitimate payments.

You can configure your browser to block or delete cookies at any time via your browser settings without losing access to our core website content.

Under UK data protection law, you have the following rights at any time without charge:

• Right of access (Subject Access Request): You can ask us for copies of the personal data we hold about you.
• Right to rectification: You can ask us to correct information you believe is inaccurate or incomplete.
• Right to erasure (the "right to be forgotten"): You can ask us to delete your personal data where we no longer have a lawful justification to hold it. Note that statutory tax records (such as sales receipts required by HMRC) must be retained for legal compliance.
• Right to restriction of processing: You can ask us to limit how we use your data while a complaint or accuracy check is investigated.
• Right to data portability: You can request a machine-readable copy of the personal information you provided to us.
• Right to object: You can object to any processing based on our legitimate interests or to any direct marketing communications.
• Right to withdraw consent: Where you gave us consent (e.g. to receive product release notices), you can withdraw it at any moment.

To exercise any of these rights, email us at support@northline-digital.co.uk. We will respond within one calendar month in accordance with statutory guidelines.

We take your privacy seriously and appreciate the opportunity to resolve any concerns directly. However, you have the statutory right to raise a concern at any time with the UK supervisory authority:

• Authority: Information Commissioner's Office (ICO)
• Website: ico.org.uk
• Telephone Helpline: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

We implement strong technical and operational safeguards to protect your personal information:

• Security Measures: All connections to our website are encrypted using modern Transport Layer Security (HTTPS/TLS). Access to our administration tools and payment dashboards is protected by multi-factor authentication (MFA) and strict principle-of-least-privilege access rules.
• International Transfers: Some of our technical infrastructure providers (such as cloud hosting or payment processors) may store or process data outside the UK or the European Economic Area (EEA), such as in the United States. Our account database (Supabase) is hosted in the European Union (Frankfurt, Germany). Where data is transferred outside the UK, we ensure transfers comply with UK GDPR through official UK adequacy regulations, the UK-US Data Privacy Framework, or the UK International Data Transfer Addendum / Standard Contractual Clauses (SCCs).

Northline Digital's spreadsheets, calculators, and tools are built for self-employed adults and business operators. If you believe a child under 16 has provided us with personal data, please contact support@northline-digital.co.uk and we will promptly delete it.

We review this Privacy Policy periodically to reflect changes in our services, technical providers, or legal obligations. When changes are made, we will post the revised document on this page and update the "Last updated" date at the top. We encourage you to review this page periodically.