North Fiord · Legal
Privacy & Cookie Policy
Plainly: we collect what you type into a form, we set one cookie to remember your language, and we run no advertising or analytics trackers on this site.
- Our forms collect the name, email, company, and message you type — nothing else.
- This website sets a single first-party cookie (
lang-pref) to remember your language; it contains no identifier. - Our public apps collect no personal data — no accounts, no analytics, no tracking.
- We run no analytics, advertising pixels, or third-party trackers on this site.
- We never sell, rent, or trade personal information, and we do not use it to build advertising audiences.
- Write to [email protected] to access, correct, or delete anything we hold.
1. Who we are
This website is operated by North Fiord, LLC, 2800 N 6th St Unit 1, Saint Augustine, FL 32084, United States. We are the data controller for information collected through northfiord.com. Throughout this policy, "we," "us," and "our" mean North Fiord, LLC.
Questions about anything below reach a principal directly: [email protected].
2. Information we collect
What you give us
Our application forms ask for your first name, last name, email address, brand or company, and an optional message. Submission is voluntary — you choose what to write.
Attribution parameters
If you arrive from a link carrying parameters such as utm_source,
utm_campaign, or gclid, we store those parameters in your
browser's session storage for the duration of your visit. If you then submit a form, they
travel with your message so we know which page or campaign a conversation started from.
Session storage is not a cookie, contains no identifiers we can link to you, and is
cleared when your browsing session ends.
What we never collect
No analytics or advertising trackers, no payments through this site, no account creation, no sensitive categories of information (health, biometric, government identifiers), and no knowing collection of data from children. Client identities and client data are never published.
3. How we use information
- To respond to applications and inquiries, and to evaluate whether an engagement is a fit.
- To keep records required by law, such as basic business correspondence.
We do not use your information for automated decision-making or profiling, we do not advertise to you through this site, and we do not send marketing email unrelated to your inquiry.
4. Analytics and advertising
None. This website runs no Google Analytics, no advertising pixels (Google, Meta, or otherwise), no session recorders, and no third-party trackers. If that changes, this page changes first — before any tag fires.
5. Our public apps
North Fiord develops and publishes public applications — small, purpose-built tools released under open-source licenses. The current generation of our apps collects no personal information: no accounts, no analytics, no advertising identifiers, no tracking. Where an app keeps settings or documents, they stay on your device unless you explicitly export them.
If a future app handles data differently, this policy, that app's store listing, and its public source repository will say so before it ships. Bespoke software built for clients runs under that engagement's own agreement — client infrastructure, client data, the rules on our security overview. Questions about an app's data handling reach the same inbox: [email protected].
6. Cookie policy
Cookies are small text files a website places on your device. This site sets exactly one, and it is strictly functional:
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
lang-pref |
North Fiord | Remembers your language preference so the homepage stops suggesting the other language. | 12 months |
Controlling cookies. You can block or delete cookies at any time in your browser settings — Chrome, Safari, Firefox, or Edge. Blocking this cookie degrades nothing but the language suggestion; every page and form works without it.
7. Where form submissions go
When you submit a form, your details are delivered to our customer relationship system — a private EspoCRM instance we operate, hosted in the United States. Submissions are read by the principals of the firm and by no one else. We do not export leads to advertising platforms, email-marketing tools, or data brokers.
8. Sharing and processors
We share personal information only with the processors required to run this site: our hosting provider and our CRM platform. Each processes data on our instructions. We never sell, rent, or trade personal information, and we have never done so.
9. How long we keep information
Form submissions are kept while we correspond with you and, if no engagement follows, for up to 24 months from your last message — then deleted. Ask sooner and we delete sooner.
10. Your rights and choices
Everyone. Write to [email protected] to request access to, correction of, or deletion of any personal information we hold about you, or to object to its use. We answer every request in writing.
California. Under the CCPA/CPRA you have the right to know, delete, correct, and limit the use of personal information, and to opt out of its "sale" or "sharing" for cross-context behavioral advertising. We do not sell personal information, and we do not share it for our own cross-context behavioral advertising. Exercising these rights never affects the price or quality of anything we offer.
EEA and UK. Where the GDPR applies, our legal bases are: legitimate interest (responding to your inquiries, securing the site) and contract (when you engage us). You may request access, rectification, erasure, restriction, portability, or object to processing, and complain to your local supervisory authority. Our operations are in the United States, so inquiries from the EEA or UK involve a transfer of data to the US, which we protect with contractual safeguards with our processors.
11. How we protect information
The website and CRM are served over encrypted connections (TLS). Access to submissions is limited to the principals. Our broader data-handling posture — read-only access, client-owned infrastructure, no credential storage — is published on our security overview and applies to client engagements.
12. Children
This website is directed at businesses and professionals and is not intended for children under 13 (or 16 in the EEA/UK). We do not knowingly collect information from children.
13. Changes to this policy
We may update this policy from time to time. The current version is always this page, and the date above reflects the latest revision.