Privacy
What we do with your information.
Last updated 27 August 2026. Written to be read rather than to cover us, so if anything here is unclear, ask and we will fix the wording.
Who we are
Northora Digital, based in Countesthorpe, Leicester. We design and build websites for trades businesses and do their SEO. We are the data controller for everything described on this page.
Greg Cosby is the person who deals with this. gregcosby@northoradigital.uk, or 07359 922528.
Cookies, and only if you say yes
When you first visit we ask whether we can see how the site gets used. Nothing is stored on your device before you answer, and saying no changes nothing about how the site works. You can change your mind at any time using the cookie link at the bottom of every page.
If you say yes, we keep a random identifier in your browser, along with which pages you looked at, roughly how long for, and whether you started filling in a form. If you type something to us we keep that, and any contact details you choose to give, so we can reply and so we know where we got to if you come back.
What we do not do. We do not try to work out who you are. We do not look up your identity from your IP address or buy it from anybody. We do not build a picture of what we think you earn or what sort of person you are. We keep what you did and what you told us, and nothing we have guessed about you.
The lawful basis is your consent, and you can withdraw it whenever you like.
If you get in touch
When you email or ring us about work, we keep what you send: your name, your contact details, your business, and what you asked for. That goes into our customer records, which run on GoHighLevel.
We use it to reply, quote, and if you become a client, to do the work. The lawful basis is taking steps at your request before a contract, and our legitimate interest in running a business that answers its enquiries.
If we contacted you first
We send introduction emails to trades businesses, and if one arrived from us without you asking, this section is the one that matters.
Where we got it. Your business email address came from a publicly listed source: your own website, a business directory, or a public map listing. We did not buy a list and nobody passed your details to us.
What we hold. Your business name, business email address, website address, trade, and the results of an automated technical check of your website. That check reads the same public pages any visitor or search engine can read. We do not sign into anything and we do not have any access to your website.
Why. Our legitimate interest in offering a relevant service to a business likely to want it. Every email says who we are and how to stop them, and one reply asking us to stop is enough. We do not need a reason and we will not ask for one.
How to be removed. Reply with "remove" or email gregcosby@northoradigital.uk. We delete the record and keep only the fact that you asked, so the list cannot pick you up again later. That is the one piece we keep on purpose after a deletion request, because it is the only way to honour it.
If you are a client
To build a site and do SEO we usually end up holding: your business details, the photographs and text you send us, access to your website or hosting, and access to your Google Business Profile and analytics where you have given it.
That access is yours and stays yours. We use it to do the work you asked for and nothing else, we do not look at anything we do not need to, and when we stop working together you remove our access and we delete what we hold. The lawful basis is our contract with you.
We may report on enquiry numbers and call counts as part of the SEO work. That is counts, not the content of your customers' messages.
Who else sees it
Only the tools it takes to run this, and none of them get your data for their own purposes:
- GoHighLevel — our customer records and enquiry handling.
- Instantly — sending introduction emails.
- Our own servers, hosted in the United Kingdom, which is where the website and the technical checks run.
Some of those companies are based outside the UK, so data can be transferred there under the safeguards in their own terms. We do not sell anything to anyone, and we do not share your details with other businesses for marketing.
How long we keep it
- Enquiries that did not become work — two years, then deleted.
- Client records — for as long as we work together, then six years for the invoices, because HMRC requires it.
- Introduction email records — twelve months from the last email, unless you ask to be removed sooner.
- Website visit records — twelve months from your last visit, then deleted. That is a job that runs and is checked, not a sentence on a page.
Your rights
You can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, or object to us holding it at all. Email and we will do it. There is no form and no charge, and we will get back to you inside a month, usually the same week.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.
Changes
If this page changes, the date at the top changes with it. If the change is significant, meaning we start doing something with your information that this page does not already describe, we will tell anyone affected rather than quietly editing the page.