Who we are
[Registered company name] (org. no. [000000-0000]), [Street address, postcode] Stockholm, Sweden, is the controller for the personal data described here. Contact us about privacy at hello@northlayer.dev.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Name, email, company and message from the contact form or email | To reply and prepare a quote | Steps before a contract, Art. 6(1)(b) |
| Name, email and booking details when you book a call | To hold the meeting | Steps before a contract, Art. 6(1)(b) |
| Email address on the Labs waitlist | To tell you when tools are ready to try | Consent, Art. 6(1)(a) |
| Contact and billing details of clients | To deliver services and invoice | Contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c) |
| Anonymous visit statistics | To see which pages are useful | Legitimate interest, Art. 6(1)(f) |
Cookies and analytics
This site does not use advertising or tracking cookies. We use privacy-friendly analytics that count visits without cookies and without identifying you. Fonts are hosted on our own server, so loading a page does not send your data to a font provider.
Who we share data with
We do not sell personal data. We use these service providers, who process data on our behalf under data processing agreements:
- Website hosting and analytics: Cloudflare, Inc. (hosting and cookie-free Web Analytics)
- Form handling: Formspree, Inc.
- Call booking: Cal.com, Inc.
- Email: [your email provider, e.g. Google Workspace or Zoho Mail]
Some providers may process data outside the EU/EEA. Where they do, transfers are covered by the EU Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
Client project data
When we work on your systems, we may have access to personal data you hold about your own users. In that case you are the controller and we act as your processor under a separate data processing agreement.
How long we keep data
- Enquiries that don't lead to work: up to 12 months.
- Client records and invoices: as long as accounting law requires (in Sweden, 7 years).
- Waitlist: until you unsubscribe or the tool is launched or dropped.
Your rights
You can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. You can withdraw consent at any time. Email hello@northlayer.dev and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or the data protection authority where you live.
Changes
We will update this page if our practices change and show the date at the top.