NORTH & CO.
Legal
Your privacy matters to us. This policy explains what personal data NORTH & CO. collects, why we collect it, and how we protect it.
Last updated: January 2026
We collect personal data that you provide to us directly — for example, when you place an order, create an account, subscribe to our newsletter, or contact our customer care team. This may include your name, email address, postal address, phone number, and payment card details (which are processed and stored by our payment provider, Stripe — not by us directly).
We also collect limited technical data automatically when you visit our website: your IP address, browser type, device type, referring URL, pages visited, and time of visit. This is collected in aggregate and is used solely to improve the performance and usability of our site.
We use your personal data to fulfil and communicate about orders; to manage your account; to send you transactional emails (order confirmation, dispatch notification, returns confirmation); and, with your consent, to send editorial newsletters and information about new collections.
We do not sell your personal data, and we do not use it for profiling or automated decision-making. We will only contact you for marketing purposes if you have explicitly opted in, and you may withdraw that consent at any time.
Our website uses a small number of essential cookies to enable core functionality — your shopping cart, login session, and theme preference. These cookies are strictly necessary and cannot be disabled without preventing the site from functioning correctly.
We also use one analytics cookie (a privacy-first, server-side analytics tool that does not track individuals across sites or share data with third parties) to understand aggregate traffic patterns. You may opt out of this cookie at any time by adjusting your browser settings or using a browser-level opt-out extension.
We share your personal data only with the service providers necessary to fulfil your order: our payment processor (Stripe), our fulfilment partner, and our delivery carriers (Royal Mail, DPD). Each of these providers is contractually bound to use your data only for the purpose for which it was shared.
We may be required to disclose your data if obligated to do so by law or by a valid legal process. We will not disclose data in response to requests that are not legally binding.
We retain your order and account data for seven years in order to comply with our financial and legal obligations. If you close your account and have placed no orders in the preceding 12 months, your account data will be deleted within 30 days of your closure request. Newsletter subscriber data is deleted upon unsubscription.
Under UK GDPR and the Data Protection Act 2018, you have the right to access the personal data we hold about you; to correct inaccurate data; to request deletion of your data; to restrict or object to our processing of your data; and to receive your data in a portable format.
To exercise any of these rights, or to make a complaint about how we handle your data, please contact us at privacy@northco.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we are not handling your data correctly.
NORTH & CO. Ltd is the data controller for the personal data described in this policy. Our registered address is 14 Chiltern Street, London W1U 7PX, United Kingdom.
For any privacy-related questions, please contact our data protection lead at privacy@northco.com.