Privacy

What we do with your information.

Last updated 27 September 2026. Written to be read rather than to cover us, so if anything here is unclear, ask and we will fix the wording.

Who we are

Northora Digital, based in Countesthorpe, Leicester. We design and build websites for trades businesses and do their SEO. We are the data controller for everything described on this page.

Greg Cosby is the person who deals with this. gregcosby@northoradigital.uk, or 07359 922528.

Cookies, and only if you say yes

When you first visit we ask whether we can see how the site gets used. Nothing is stored on your device before you answer, and saying no changes nothing about how the site works. You can change your mind at any time using the cookie link at the bottom of every page.

If you say yes, two things start.

Our website chat and visit records. These run on Cue, part of Ospry Suite. It keeps a random identifier in your browser’s local storage (not a cookie) and records which kind of page you open (a service page, the quote page and so on), starting the quote form (the form’s name, never what you typed), tapping the phone number, clicking through to book, staying on a service page long enough to count as reading it (about 18 seconds), and coming back another time. It does not record your IP address, your device, where you came from, how long you spend on each page or which page you leave from.

If you type something to us in the chat we keep that, and any contact details you choose to give, so we can reply and so we know where we got to if you come back. The chat’s automatic replies are written by an AI model from Anthropic, working from what we have told it about our business. What you type, and the page you are on, is sent to it to write the reply. A person can take over the conversation, and you can ask for one.

Google Analytics, with IP addresses anonymised. It sets its own cookies and gives us visit statistics: how many people came, which pages they viewed and how they found the site.

What we do not do. We do not try to work out who you are. We do not look up your identity from your IP address or buy it from anybody. We do not build a picture of what we think you earn or what sort of person you are. We keep what you did and what you told us, and nothing we have guessed about you.

The lawful basis is your consent, and you can withdraw it whenever you like.

If you get in touch

When you email or ring us about work, we keep what you send: your name, your contact details, your business, and what you asked for. That goes into our customer records, which run on GoHighLevel.

We use it to reply, quote, and if you become a client, to do the work. The lawful basis is taking steps at your request before a contract, and our legitimate interest in running a business that answers its enquiries.

If we contacted you first

We send introduction emails to trades businesses, and if one arrived from us without you asking, this section is the one that matters.

Where we got it. Your business email address came from a publicly listed source: your own website, a business directory, or a public map listing. We did not buy a list and nobody passed your details to us.

What we hold. Your business name, business email address, website address, trade, and the results of an automated technical check of your website. That check reads the same public pages any visitor or search engine can read. We do not sign into anything and we do not have any access to your website.

Why. Our legitimate interest in offering a relevant service to a business likely to want it. Every email says who we are and how to stop them, and one reply asking us to stop is enough. We do not need a reason and we will not ask for one.

How to be removed. Reply with "remove" or email gregcosby@northoradigital.uk. We delete the record and keep only the fact that you asked, so the list cannot pick you up again later. That is the one piece we keep on purpose after a deletion request, because it is the only way to honour it.

If you are a client

To build a site and do SEO we usually end up holding: your business details, the photographs and text you send us, access to your website or hosting, and access to your Google Business Profile and analytics where you have given it.

That access is yours and stays yours. We use it to do the work you asked for and nothing else, we do not look at anything we do not need to, and when we stop working together you remove our access and we delete what we hold. The lawful basis is our contract with you.

We may report on enquiry numbers and call counts as part of the SEO work. That is counts, not the content of your customers' messages.

Who else sees it

Only the tools it takes to run this, and none of them get your data for their own purposes:

• GoHighLevel: our customer records and enquiry handling.
• Instantly: sending introduction emails.
• Our own servers, hosted in the United Kingdom, which is where the website and the technical checks run.
• Ospry Suite (Ospry Suite Ltd): runs the website chat and visit records described above, on servers in the United Kingdom. The providers it uses in turn are listed on its sub-processors page.
• Anthropic: writes the chat’s automatic replies. It receives what you type in the chat and the page you are on. Anthropic states that what is sent through its API is not used to train its models by default and is normally deleted within 30 days, subject to its own contractual, safety and legal exceptions.
• Google Analytics: visit statistics, only after you say yes.

Some of those companies are based outside the UK, so data can be transferred there under the safeguards in their own terms. We do not sell anything to anyone, and we do not share your details with other businesses for marketing.

How long we keep it

• Enquiries that did not become work: two years, then deleted.
• Client records: for as long as we work together, then six years for the invoices, because HMRC requires it.
• Introduction email records: twelve months from the last email, unless you ask to be removed sooner.
• Website visit records: twelve months from your last visit, then deleted. That is a job that runs and is checked, not a sentence on a page.

Your rights

You can ask us for a copy of what we hold, ask us to correct it, ask us to delete it, or object to us holding it at all. Email and we will do it. There is no form and no charge, and we will get back to you inside a month, usually the same week.

If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.

Changes

If this page changes, the date at the top changes with it. If the change is significant, meaning we start doing something with your information that this page does not already describe, we will tell anyone affected rather than quietly editing the page.