Privacy notice

Who this is from

Northline Web Co. is a one person web design and development studio operated by Nick in Denmark. It is the data controller for the information described here, which means it decides what is collected and what happens to it.

You can reach the studio about anything on this page at hello@northline-web.com.

What is collected

The only information deliberately collected from this website is what you type into the enquiry form and choose to send. That is:

• Your name and email address
• Your business name and business type
• What you want the website to do
• The project details you write
• Optionally, your current website address, target launch timeframe and approximate budget
• Optionally, the estimate configuration you built, if you chose to attach it
• Your confirmation that you agree to be replied to by email

Please do not send sensitive personal information through this form. It is built for project enquiries, and nothing on it asks for anything beyond that.

If you write on WhatsApp instead

The site also offers WhatsApp as a way to get in touch. If you use it, the studio receives your phone number, whatever name and photo your WhatsApp profile shows, and the messages you send. The button under the enquiry form opens WhatsApp with whatever you have already typed into the form, so you can read the message and change it before anything is sent. Nothing is sent until you send it yourself.

Information handled automatically

Like any website, requests to this site are handled by infrastructure that processes technical information such as IP addresses in order to deliver pages and protect against abuse. This is standard hosting and security processing carried out by Cloudflare, and Northline does not use it to build any profile of you.

Why it is processed

The information you send is used for exactly one thing: replying to your enquiry and, if it goes further, agreeing and delivering a project. Under the GDPR the legal bases are:

• Steps taken at your request before a contract (Article 6(1)(b)). You asked for a scope and a price, and answering that means reading and keeping what you sent.
• Legitimate interests (Article 6(1)(f)) in running and keeping records of ordinary business correspondence, balanced against your interest in not being contacted for anything you did not ask about.
• Consent (Article 6(1)(a)) for the confirmation checkbox on the form, which you can withdraw at any time by email.

Your details are not sold, rented, or shared for advertising. You will not be added to a marketing list, because there is not one.

Service providers

Three third parties are involved in getting an enquiry from this page into an inbox. Each processes data on Northline's behalf. A fourth, WhatsApp, is involved only if you choose to write there.

Web3Forms

The enquiry form is submitted to Web3Forms, which receives the contents of the form and delivers it as an email to the Northline address. It acts as the form handling service and processes what you submitted for that purpose.

Cloudflare

This website is hosted on Cloudflare Workers static assets, so Cloudflare processes the technical request information needed to serve pages and protect the site. Cloudflare Email Routing also forwards mail sent to the Northline address on to the inbox where it is actually read, and Cloudflare Web Analytics, described under "Cookies and analytics" below, counts page views.

WhatsApp

WhatsApp is run by WhatsApp Ireland Limited, part of Meta, under its own privacy policy and its own terms, which you accept as a WhatsApp user rather than through this site. Messages are end to end encrypted in transit, and the ones you send arrive on the studio phone, where they are read and kept in the chat in the same way as an email is kept in an inbox. Northline has no control over what WhatsApp itself records about your use of the app. If you would rather not involve it, use the form or the email address, which reach the same person.

Google

Enquiries ultimately arrive in a Gmail inbox, so Google processes and stores those messages as the email provider.

International transfers

The service providers above are internationally operated, and your enquiry may be processed on servers outside Denmark and outside the European Economic Area. Where that happens, those providers rely on the transfer mechanisms available to them under the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.

If you would rather not use the form, you can email hello@northline-web.com directly. That skips Web3Forms entirely, though your message still passes through the email infrastructure described above.

How long it is kept

Enquiries are kept as long as they are useful for the conversation they belong to. In practice that means an enquiry that does not turn into a project is kept for a limited period in case you follow up, and correspondence relating to a project that does go ahead is kept for as long as the project and any ordinary business or accounting record keeping requires.

No fixed retention schedule is published here, because doing so would mean publishing a number that is not actually being enforced by a system. If you want your enquiry deleted, ask and it will be deleted, subject to anything that has to be retained for legal or accounting reasons.

Cookies and analytics

This website sets no cookies. There is no advertising pixel, no heat mapping, no session recording, and nothing that follows you to other websites. Fonts are served from this domain rather than a font CDN, specifically so that loading a page does not hand your IP address to another company.

Cloudflare Web Analytics

There is one measurement script. Since 10 August 2026 this site uses Cloudflare Web Analytics, which counts page views so that Northline can tell whether anyone is finding the site at all. Cloudflare adds it to the page as the page is served, loading it from static.cloudflareinsights.com.

"Analytics" covers a lot of very different things, so it is worth being exact about which one this is:

• It sets no cookies and stores nothing on your device.
• It does not give you an identifier, so you are not recognised from one visit to the next.
• It does not follow you to other websites, and none of it is used for advertising or sold to anyone.
• What is recorded is aggregate and coarse: which page was viewed, the referring site, roughly which country the visit came from, and general browser and device type.

Because nothing is written to your device and no profile is built, the site runs this without a consent banner rather than putting a pop up in front of you for something that does not track you. If you would still rather not be counted, any browser setting or extension that blocks static.cloudflareinsights.com will stop it, and every part of this site works identically with it blocked.

The one thing stored on your device

If you use the estimate builder, your selections are saved in your browser's session storage so that the configuration survives a page refresh and can be attached to the enquiry form. That data stays on your device, is never transmitted anywhere on its own, and is cleared by your browser when you close the tab. Clearing your browser data removes it immediately.

Your rights

Under the GDPR you have the right to:

• Ask what information about you is held, and get a copy of it
• Have inaccurate information corrected
• Have information erased where there is no good reason to keep it
• Restrict or object to processing, including processing based on legitimate interests
• Receive information you provided in a portable format
• Withdraw consent at any time, without affecting anything done before you withdrew it

To use any of these, email hello@northline-web.com. There is no charge and no form to fill in. Because this is a one person studio, the reply comes from the same person who read your original enquiry.

If you are not satisfied with how a request is handled, you can complain to the Danish Data Protection Agency, Datatilsynet, which supervises data protection in Denmark.

Security

The site is served over HTTPS, form submissions are sent over an encrypted connection, and access to the inbox is protected. Reputable providers are used for hosting, form handling and email.

Being straightforward about it: no website or email system can be guaranteed completely secure, and Northline does not control the internal security of the third party services listed above. That is the honest position rather than a promise that cannot be kept.

Changes to this notice

If the setup behind the site changes, for example if the analytics or the form service were replaced, this notice is updated and the date at the top changes with it. That is not a hypothetical: analytics was added on 10 August 2026 and this notice changed the same day. There is no notification list, so the date is the thing to check.

Contact

Anything about this notice, or any request relating to your information, goes to hello@northline-web.com, which is the surest route, or to WhatsApp on 31 45 57 38. Northline Web Co. is operated by Nick in Denmark and works with clients worldwide.