Privacy Policy

1. Introduction

Northern Codes, a trading name of Innovade Limited ("we", "us", "our"), is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (northerncodes.com) or use our services.

We are an AI automation consultancy providing workflow automation, RAG systems, custom SaaS development, AI chatbots, web development, graphic design, and business problem-solving services to businesses of all sizes.

By accessing our website or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access our website or use our services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when you:

• Complete contact forms or request a consultation
• Subscribe to our newsletter or marketing communications
• Enter into a service agreement or contract with us
• Communicate with us via email, phone, or other channels
• Provide feedback, testimonials, or participate in surveys

This information may include: name, email address, phone number, company name, job title, billing information, project requirements, and any other information you choose to provide.

2.2 Information Collected Automatically

When you visit our website, we may automatically collect certain information, including:

• Device information (browser type, operating system, device type)
• IP address and approximate geographic location
• Pages visited, time spent on pages, and navigation patterns
• Referring website or source
• Date and time of your visit

2.3 Information from Third Parties

We may receive information about you from third parties, including business partners, marketing partners, social media platforms, and publicly available sources.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services
• To process transactions and send related information
• To respond to your enquiries and provide customer support
• To send promotional communications (with your consent)
• To personalise your experience on our website
• To analyse website usage and improve our offerings
• To detect, prevent, and address technical issues or security threats
• To comply with legal obligations and enforce our terms
• To fulfil any other purpose with your consent

4. Legal Basis for Processing (UK GDPR)

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data based on one or more of the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation: Where processing is necessary for compliance with a legal obligation
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your rights

5. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (hosting, payment processing, email delivery, analytics)
• Business Partners: With trusted partners who assist in delivering our services
• Legal Requirements: When required by law, court order, or governmental authority
• Protection of Rights: To protect our rights, property, safety, or that of our users and the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. International Data Transfers

Your information may be transferred to, and processed in, countries other than the United Kingdom. These countries may have data protection laws that are different from UK laws. When we transfer your data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), or we rely on an adequacy decision.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The retention period may vary depending on the context of our relationship with you and the nature of the data. When data is no longer needed, we will securely delete or anonymise it.

9. Your Rights

Under UK data protection law, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month, as required by law.

10. Marketing Communications

You may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly. Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to our services.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect information about your browsing activities. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

12. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

13. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete such information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on our website with an updated effective date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: