Privacy Policy

North Figure · Last updated 28 August 2026

1. Who is responsible for your data

BB Data Services Limited, trading as North Figure, company number 16567785, registered office c/o Aardvark Accounting, 1 Cedar Office Park, Cobham Road, Wimborne, BH21 7SB, United Kingdom, is the data controller for personal data collected through northfigure.com.

Questions about your data: [email protected].

2. What we collect

Type What it includes
Identity Your name
Contact Email address, and phone number if you give one
Transaction What you bought, when, how much you paid, refund history. Not your card details
Technical IP address, browser and device type, time zone
Usage Which pages and lessons you opened, and when
Marketing Whether you have opted in or out of our emails and messages

We never see or store your card number. Payments are handled entirely by Stripe.

We do not ask for and do not want the contents of your spreadsheets or your business data. Everything our products do to your files happens on your own computer, in your own software.

3. How we collect it

  • Directly from you — when you buy, opt in, or email us
  • Automatically — through cookies and similar technology when you use the site
  • From our payment processor — Stripe tells us that a payment succeeded, and gives us your name, email and the last four digits of your card

4. Why we use it, and our lawful basis

What we do Why Lawful basis
Take payment and give you access To deliver what you bought Performance of a contract
Send access details, receipts and product updates To deliver what you bought Performance of a contract
Answer your support emails To help you Performance of a contract
Send marketing emails and messages about our other products To sell more Legitimate interests, or your consent where required
Keep records of sales and refunds Tax and accounting Legal obligation
Understand which pages and lessons work To improve the product Legitimate interests
Prevent fraud and abuse To protect the business Legitimate interests

Where we rely on legitimate interests, we have considered whether it is fair to you, and you can object at any time.

5. Who we share it with

We share personal data with service providers who process it on our behalf:

  • Stripe — payment processing
  • HighLevel — our website, checkout, members area, email and messaging platform
  • Our accountant — for tax and statutory records

Each of these is bound to protect your data and to use it only for the purposes we set.

We do not sell your data. We do not share it with advertisers or data brokers.

We may disclose data if we are legally required to, or to establish or defend a legal claim.

If the business is ever sold, customer data may transfer to the buyer, who would be bound by this policy.

6. Transfers outside the UK

Some of our providers are based in the United States. Where personal data leaves the UK, it is protected by an approved transfer mechanism — normally the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision.

7. How long we keep it

  • Customer and transaction records — seven years after your last purchase, because tax law requires it
  • Marketing contacts who never bought — until you unsubscribe, or after three years of no engagement, whichever is sooner
  • Support emails — three years
  • Website analytics — 26 months

8. Your rights

Under UK data protection law you have the right to:

  • be told what we hold and why — this policy
  • see it — request a copy
  • correct it — if it is wrong
  • have it deleted — where we no longer need it
  • restrict what we do with it
  • take it elsewhere — receive it in a portable format
  • object — to processing based on legitimate interests, including marketing
  • withdraw consent — where we relied on it

To use any of these, email [email protected]. We will respond within one month. There is no charge.

Deleting your data may end your access to products you have bought, because we would no longer be able to identify you as a customer.

9. Marketing

If you buy from us or opt in, we will email you about our other products. Every email has an unsubscribe link and it works immediately.

If you gave us a phone number and agreed to messages, you can stop those by replying STOP or emailing us.

Unsubscribing from marketing does not stop service emails — receipts, access details, and notices about products you own.

10. Cookies

We use cookies to keep you logged in, remember your cart, and understand how the site is used. You can block or delete cookies in your browser settings, but parts of the site — checkout and login in particular — will stop working properly.

11. Security

We use encrypted connections, access controls and reputable providers. No system is perfectly secure, but we take it seriously. If a breach ever affects your rights, we will tell you and the ICO as the law requires.

12. Children

Our products are for people doing paid work. They are not directed at anyone under 18 and we do not knowingly collect data from children.

13. Complaints

If you are unhappy with how we have handled your data, tell us first at [email protected] and we will try to put it right.

You can also complain to the Information Commissioner's Office:

ico.org.uk · 0303 123 1113 Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

14. Changes

If we change this policy we will update the date at the top. If the change is significant, we will email you.